Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: B51TkgWRe1MJj54eUDjjmjhy9croJK6gS0BrWeLY2a8=
Subject key identifier: 5D:5F:05:CC:3E:AB:E5:50:50:ED:59:8D:B8:E2:A6:DA:68:AB:DF:E1
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01A0F7FB7257D4489B042BE2CCB7355C4451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1A84
Signing time: Thu 01 Oct 2026 15:00:46 +0000
Manifest this update: Thu 01 Oct 2026 15:00:46 +0000
Manifest next update: Fri 02 Oct 2026 15:00:46 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: WM4AzjKENyIn/kgd1qH3CoXqxpctSPQcRiVh7ln/XiU=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fb:72:57:d4:48:9b:04:2b:e2:cc:b7:35:5c:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Oct 1 15:00:46 2026 GMT
Not After : Oct 2 15:00:46 2026 GMT
Subject: CN=5d5f05cc3eabe55050ed598db8e2a6da68abdfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:43:d2:df:8f:49:14:ea:14:1e:e2:60:03:
ed:6d:5a:bb:5a:8a:19:07:5d:ba:ce:a7:bc:82:ac:
f2:fc:cc:aa:da:14:89:5f:70:cf:60:21:2f:7c:c3:
ca:4a:e9:6c:69:1d:bc:55:20:21:6e:4c:65:dd:58:
34:28:56:bf:96:e7:cc:7e:9d:c8:d0:ae:76:7c:05:
e7:d9:93:dc:53:3e:5f:08:af:4f:87:f1:23:f1:5c:
be:15:59:b2:c7:1b:53:df:db:48:b7:e5:50:e0:09:
3c:44:b0:a2:df:ac:e6:7a:bd:f0:3b:8e:d4:aa:3b:
76:df:ff:fc:c1:e5:ef:60:14:d7:4b:c3:54:c1:d3:
d6:ac:d6:ff:7f:95:4e:f6:f4:55:37:ba:d3:7a:ea:
4d:40:57:7a:d0:b8:75:37:0b:6a:84:97:48:50:b4:
21:5c:92:b5:0f:70:be:39:96:0e:e6:38:4a:95:29:
63:26:51:54:1c:a4:a6:09:b7:f5:4c:7c:f4:f6:fa:
98:6b:ed:02:8d:6d:17:9b:c0:9d:1a:2e:b2:f4:3f:
a4:e0:61:56:fe:ac:a4:49:54:19:ca:aa:f9:15:82:
de:1b:63:8d:18:1a:a4:69:5d:f2:9a:a7:4b:ae:41:
6d:10:ca:84:82:2d:a9:aa:f9:6d:ee:a4:a8:67:a5:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:05:CC:3E:AB:E5:50:50:ED:59:8D:B8:E2:A6:DA:68:AB:DF:E1
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:86:99:30:2a:22:16:6d:6b:2f:74:c4:5f:c4:43:44:39:
3b:28:2a:3d:18:b1:e8:7b:93:97:e3:04:40:05:3b:fb:17:22:
5a:ad:94:a4:35:d7:56:b0:bf:a2:32:b7:34:0b:0a:76:0e:a3:
10:ff:08:9b:bc:38:ca:7d:07:d1:57:01:89:eb:09:d6:f3:0c:
e2:c9:66:4b:0c:e6:b8:59:16:fa:23:d0:d9:08:c7:9b:b6:1c:
9c:04:61:67:cb:da:02:95:51:9b:e9:ba:3c:cb:2e:10:6d:32:
ca:7b:23:29:e5:d9:76:c9:70:36:78:b1:1f:21:55:f5:19:70:
9a:a5:25:85:0d:f9:54:06:69:11:05:7e:7d:29:d2:c8:0e:19:
4d:6e:5d:cf:9b:86:4b:61:d9:c6:95:c9:02:b1:cb:c8:7d:87:
dc:6b:51:75:29:20:80:a1:87:95:67:23:64:54:ad:a0:d4:db:
cc:55:54:4b:af:fa:6a:27:87:96:72:15:cd:92:16:00:ae:c1:
8c:27:5a:de:4d:97:fd:07:4b:8c:3e:35:90:f1:27:96:58:0a:
c9:d8:12:f8:5a:0a:3b:03:6a:a5:cb:e2:c0:6c:28:07:99:4b:
fa:39:8e:b2:cb:fe:ad:27:78:26:ca:8d:47:ce:5a:69:b9:ef:
54:26:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:46:15 2026 by rpki-client