Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: 7vsLeLzU6EO0IrJ0LYCGl4q9NeJwda7JqpOIxAZTC8M=
Subject key identifier: 55:CC:0C:1E:D7:D8:C7:6D:CD:5C:FF:1C:6B:ED:56:1B:F6:C6:2C:11
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 01A08AC3147E0470284896E359735B714125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:00:35 +0000
Manifest this update: Thu 10 Sep 2026 10:00:35 +0000
Manifest next update: Fri 11 Sep 2026 10:00:35 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: wDxxumiD3IU5LvUAkscTKyoi0UpUcoiIV12PpZdgFhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:14:7e:04:70:28:48:96:e3:59:73:5b:71:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Sep 10 10:00:35 2026 GMT
Not After : Sep 11 10:00:35 2026 GMT
Subject: CN=55cc0c1ed7d8c76dcd5cff1c6bed561bf6c62c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:aa:59:a9:f1:f2:c0:2a:0c:7d:c6:d8:4a:
c4:44:4a:c1:8d:9d:88:33:00:58:98:c7:a1:f9:36:
34:d4:cf:ae:50:53:ba:16:c6:dd:17:6e:0d:67:32:
a4:fd:99:10:d7:59:6f:70:38:c2:ca:94:81:f5:e1:
f2:d8:8e:1f:c9:88:61:7f:f3:bd:54:0d:b5:2a:5d:
72:a7:08:94:ee:62:54:14:59:21:64:23:98:4a:f3:
35:4f:4f:05:07:e1:c8:cc:87:1d:be:53:e4:50:47:
ac:d2:fa:b2:53:67:65:e4:cd:a7:db:81:42:56:e5:
79:40:3a:e9:c9:53:74:00:34:b6:03:d6:d0:8b:34:
8a:4d:e2:04:d0:5e:d2:39:55:66:a8:c3:04:40:22:
c6:30:84:2a:9f:8f:1b:39:14:33:e2:e3:43:6d:e8:
f9:4b:12:9f:51:ef:e0:67:a5:5d:54:b4:63:b9:18:
81:ee:1a:e3:74:bf:6e:fb:67:60:f8:cd:03:40:e0:
94:6f:b5:c1:b5:8c:0f:0c:36:01:8d:78:9c:d7:9d:
54:d8:dc:0f:44:c4:62:7b:7b:70:33:bb:d1:21:13:
ff:96:11:59:0d:f8:13:35:ac:55:d5:7d:d1:f7:95:
0c:4c:8b:82:83:41:06:b7:a8:d3:ef:75:ac:92:aa:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CC:0C:1E:D7:D8:C7:6D:CD:5C:FF:1C:6B:ED:56:1B:F6:C6:2C:11
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:da:5b:0f:9c:91:6e:6e:7f:6d:ee:34:ac:a5:8f:42:3e:39:
c5:f1:6c:54:2a:fa:0e:ce:4f:d1:39:25:0b:a8:40:7c:94:1b:
38:d9:fd:f5:3f:c5:bf:dd:ec:2a:ca:dc:80:51:2e:7e:2f:5e:
bd:84:09:4d:80:04:5c:30:3c:1b:2c:38:e5:40:ac:50:44:81:
eb:59:67:e2:48:de:c0:bd:46:01:56:6f:b7:3e:89:67:7a:60:
0b:68:e6:ff:82:91:c7:3f:7d:2a:e5:f1:1b:da:dd:e8:35:d4:
3b:0b:f6:bd:d6:44:5a:ad:93:14:67:bd:7a:20:fa:9e:d0:dd:
4c:c8:f0:bf:c2:15:3e:fe:32:b4:9a:01:49:b3:d4:52:4e:af:
20:c2:29:fa:5c:6d:fd:77:c3:80:f2:62:ca:0e:e3:c3:e4:1b:
f4:ee:56:f8:04:5b:e0:9c:34:dc:05:56:44:b0:85:a4:c4:01:
14:f8:66:74:a8:15:e4:89:18:65:62:45:4d:9b:f1:11:28:f8:
0c:80:e8:fe:b7:f5:d0:79:77:bb:c9:43:8f:86:4d:a4:56:9f:
3a:50:a9:87:e6:a7:00:bc:ea:6d:3e:1b:1b:27:1f:3d:93:14:
95:bc:f5:57:da:66:61:39:84:4f:53:53:86:17:9b:60:2b:83:
ae:f4:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:02 2026 by rpki-client