Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: B+AElRw78EMIwLolkLI7KizMe0NMDL2ZJ8QDo7bHNL0=
Subject key identifier: C8:05:B0:EF:8C:54:F3:23:1B:28:85:37:99:DA:44:1E:F4:00:E5:33
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 01A17CCEF0595B717159C3ED35DAD32021B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0C02
Signing time: Tue 27 Oct 2026 10:01:39 +0000
Manifest this update: Tue 27 Oct 2026 10:01:39 +0000
Manifest next update: Wed 28 Oct 2026 10:01:39 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: //b0N5qt7ehvyOTLIMZO4qTu26TZmCNbhUIi965xy5U=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:f0:59:5b:71:71:59:c3:ed:35:da:d3:20:21:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Oct 27 10:01:39 2026 GMT
Not After : Oct 28 10:01:39 2026 GMT
Subject: CN=c805b0ef8c54f3231b28853799da441ef400e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:b0:bd:ec:79:2f:ca:3c:14:8d:94:03:1a:
7e:81:1b:7a:56:b6:d2:60:9c:d0:b5:f4:b3:4d:fa:
50:30:aa:37:43:61:1b:01:53:ae:6c:b0:83:f4:67:
d8:e6:4a:28:7e:59:e0:ab:f1:53:be:15:ab:95:ed:
62:54:f8:22:85:37:c1:c0:a0:7b:ab:db:2f:72:bf:
d7:c8:cc:3c:ba:bb:b3:0b:8e:53:d3:05:3e:44:22:
d7:92:a9:56:98:5c:f1:5a:44:83:cb:5a:f8:03:80:
aa:af:34:5b:0c:d1:be:9a:99:99:ba:bf:11:1c:3d:
94:ce:a5:03:70:7a:8f:7f:fa:03:ce:d6:0b:15:c2:
67:24:ad:e3:65:b5:9e:28:a5:2e:ba:c5:7c:6a:25:
47:de:78:a4:28:fd:81:9e:58:44:bd:ca:9d:23:c2:
53:6f:f2:94:7a:9c:90:8f:9c:36:e2:7a:be:2f:61:
cb:97:1b:e3:fd:39:04:fa:96:50:60:20:a4:b1:bd:
42:5a:90:82:d2:5f:de:ed:8a:5a:fd:e5:94:09:37:
05:ef:bd:83:b1:f4:ab:e6:05:3e:9e:55:81:5f:55:
98:e2:d7:67:aa:44:c2:2e:bf:03:a6:87:2d:b8:ee:
dd:b5:ed:f9:af:27:72:96:46:12:38:2f:08:c1:ae:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:B0:EF:8C:54:F3:23:1B:28:85:37:99:DA:44:1E:F4:00:E5:33
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b2:18:64:00:06:de:88:24:6b:0b:1e:b5:88:35:12:55:f8:
29:4a:10:b3:3a:08:ed:c4:fa:9a:28:65:26:39:01:ed:fc:f6:
ac:76:f5:dc:df:58:72:4f:7c:58:1e:3d:ad:85:ff:36:a8:9e:
21:d2:c4:c6:47:20:dd:ab:d5:a6:3e:d2:e8:98:66:89:d9:69:
48:c3:04:7a:f0:cd:5d:32:d9:f5:01:f0:88:52:7c:8b:ea:ac:
65:e0:26:50:fd:10:c5:af:ad:69:68:e9:e5:39:e0:47:12:f4:
01:0e:21:0d:a4:4f:88:97:26:27:56:20:09:86:90:b2:77:b0:
73:58:d1:f4:f6:e0:5e:bf:46:10:a9:be:17:ef:4a:d0:20:f6:
c4:1d:af:fe:94:82:0e:28:75:18:da:04:f0:a0:cd:e0:aa:2d:
7b:fe:3c:bf:2c:f7:d8:01:c8:7b:ae:f9:da:ff:3f:07:ee:74:
89:ff:9c:f0:7c:c4:f3:2a:3f:93:b1:60:36:56:7b:b0:4b:9d:
e4:36:05:dc:4d:6a:7e:62:77:67:6d:2f:1a:2f:f0:f5:37:e2:
c6:f2:06:30:ff:be:b3:a5:1e:07:30:dc:e2:cb:f1:47:e2:c7:
fe:36:89:2d:cb:63:b5:22:f2:fb:7d:45:82:f3:a9:bc:44:ef:
0c:89:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:14 2026 by rpki-client