Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: kc6UxAOfCkzd2OiVeIAcqSH/VuO+mxiHbcNrOZcxS4w=
Subject key identifier: EC:B8:51:CD:6E:7E:95:1C:D6:02:9D:9D:EE:AA:E9:50:73:58:D0:B8
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 01A16C4868ADDD80CD4AB4EE1F4014784EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 1AC1
Signing time: Sat 24 Oct 2026 05:00:47 +0000
Manifest this update: Sat 24 Oct 2026 05:00:47 +0000
Manifest next update: Sun 25 Oct 2026 05:00:47 +0000
Files and hashes: 1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: ORvo58T7VyKXGF5NrHRoV1zBMkQayFR5ShUsrOjtTDo=)
3: ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa (hash: 3P+Qk6FSe+iXFNy50RbYcBKfyRXeennfx5/RBemjyco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:68:ad:dd:80:cd:4a:b4:ee:1f:40:14:78:4e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Oct 24 05:00:47 2026 GMT
Not After : Oct 25 05:00:47 2026 GMT
Subject: CN=ecb851cd6e7e951cd6029d9deeaae9507358d0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:4a:39:dd:67:8e:7e:ed:9b:01:5f:fc:5c:
f3:86:1e:d2:29:76:be:5c:c6:b9:ab:33:9c:5e:d5:
6e:da:b4:20:66:af:ea:df:aa:c5:35:db:74:d1:34:
07:7d:21:a2:3f:ab:0a:86:3e:bb:23:27:4d:ed:43:
8f:a1:3b:0f:e1:2e:52:eb:b9:56:f9:9a:bf:9b:69:
46:5e:62:ac:33:e3:0c:90:af:b2:aa:73:b2:d7:07:
69:0b:a8:83:2c:9b:42:d6:19:e4:c0:5a:0f:3b:0b:
6e:6a:39:6d:7a:7d:46:64:ac:94:1a:36:d0:4c:6a:
5f:5c:c7:6d:cc:7b:49:0c:51:06:b2:00:96:d0:f6:
b9:6f:8f:e6:a0:2f:d9:2f:a4:cc:64:82:1e:64:5d:
57:84:9f:8b:2c:ea:9c:8d:81:05:66:3a:ec:37:f0:
bf:a8:03:84:2e:78:a2:ff:80:c7:7f:7b:13:0d:2a:
d7:44:67:3a:8a:c9:a8:64:60:6e:59:6f:b0:ba:e3:
01:84:94:7a:7f:54:bc:ad:2e:0e:dd:36:c8:6a:74:
ae:1a:f2:7b:a9:13:61:18:1f:58:c6:fa:44:68:f0:
66:5c:87:7d:8c:42:58:88:59:44:1d:dc:62:13:0b:
12:80:57:5e:1e:4d:68:a9:75:93:87:7f:f6:da:5e:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:51:CD:6E:7E:95:1C:D6:02:9D:9D:EE:AA:E9:50:73:58:D0:B8
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:2b:60:32:80:87:7e:81:7f:97:b8:c2:31:a3:55:be:bc:
9d:dd:41:a9:ff:28:21:98:94:f4:02:7b:14:3c:b5:df:b9:7d:
07:2f:d4:62:8f:1c:57:ad:2c:59:89:7a:bd:ea:6b:b8:76:63:
32:27:5a:94:9c:f1:2f:ee:1f:f6:4c:4d:b6:ea:b4:fc:5b:35:
8e:5d:2b:e5:69:22:f9:5b:82:7d:7c:19:de:ea:7e:4b:5f:3a:
13:1e:64:7c:91:ad:3c:ff:a3:60:d0:14:44:fc:c9:f5:b9:15:
92:bd:a3:d5:35:95:98:f1:05:32:d7:85:6f:67:54:bc:6a:4f:
1f:61:8f:c9:f7:8a:ec:77:b5:47:4b:64:f0:7a:03:6b:78:9d:
23:e4:c9:12:6a:d4:e3:51:99:e6:13:ea:a5:b8:05:f7:aa:de:
a4:cd:dc:68:33:1f:98:90:8c:d9:4d:df:be:e0:a0:24:67:00:
50:7b:af:31:62:17:6d:21:25:ed:de:78:e8:13:09:8a:62:80:
83:d7:37:2a:66:3f:25:42:3a:91:0c:fe:6d:f7:6f:0f:30:f6:
78:00:cd:f6:de:9c:6c:ee:87:76:03:37:64:9e:37:16:41:75:
51:16:93:48:85:c5:29:68:0f:c4:d9:e7:3e:3f:02:9b:f3:df:
0e:5a:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:57 2026 by rpki-client