Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: t81mYRXmG3R6ZTb5W4dOrybo1D6bp/nBElhv9oAOerI=
Subject key identifier: BB:51:00:7A:CF:E2:F3:3D:78:91:0B:EF:4E:17:4A:CC:99:61:7B:F7
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 01A181F48352575A4996BDEBFD14EEE3508D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 10:00:47 +0000
Manifest this update: Wed 28 Oct 2026 10:00:47 +0000
Manifest next update: Thu 29 Oct 2026 10:00:47 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: xLU7UtaagHHNHV/L4Koo/SqbvyQkalK6XbvaL3KgnT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:83:52:57:5a:49:96:bd:eb:fd:14:ee:e3:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Oct 28 10:00:47 2026 GMT
Not After : Oct 29 10:00:47 2026 GMT
Subject: CN=bb51007acfe2f33d78910bef4e174acc99617bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:f4:98:50:e3:c7:68:f2:0c:06:86:ee:4b:
b3:bf:35:25:db:05:41:c8:c5:93:fa:df:47:57:05:
6c:a5:40:6f:51:79:9f:f5:eb:dc:e1:94:62:ec:c6:
2a:d5:c7:4b:81:f9:b9:6c:d2:1d:64:3c:ab:ac:9e:
5f:c6:4f:3d:27:9d:a4:00:b7:0b:44:76:a1:d0:f4:
55:ea:87:b9:1d:eb:a8:66:1d:f8:31:b8:85:2c:21:
31:90:8a:3f:fc:29:b1:58:00:dd:37:15:a9:7f:23:
5f:4c:a4:02:82:67:9c:b2:28:db:97:6e:fd:6e:39:
80:18:47:84:81:06:d6:38:04:ab:ba:85:14:23:c1:
bf:28:60:72:44:7e:b5:7f:d6:9a:e2:19:e1:54:56:
92:b6:52:71:6b:0a:6a:e4:29:d4:9b:7b:d0:9b:90:
c1:91:1f:e9:83:74:ef:cc:f5:ac:dd:28:ac:ae:e3:
21:37:3c:8a:b9:c1:08:13:9a:1c:42:c6:b2:da:e4:
af:1a:1d:11:05:3b:a9:13:63:8f:0a:73:a4:81:4b:
7a:d5:e3:a1:51:0f:c7:02:b5:c4:e6:42:01:0b:87:
a9:62:1d:a5:e1:e7:fc:9d:a3:7a:a6:ee:31:b9:1c:
40:06:09:3b:ca:ec:1a:79:f0:eb:78:83:50:0c:7d:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:51:00:7A:CF:E2:F3:3D:78:91:0B:EF:4E:17:4A:CC:99:61:7B:F7
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:0a:97:cb:9e:7a:71:cb:58:c9:94:b2:04:e8:50:72:1f:
fb:18:7a:5e:8f:dc:9d:72:f5:86:37:0f:94:e2:78:71:5e:77:
85:f9:d2:c0:ed:f6:ce:9e:10:f2:a4:32:9e:e7:0f:8f:78:a1:
8c:70:04:57:49:c6:5f:b2:5f:d2:a9:84:d2:c5:13:18:46:19:
f0:35:c7:41:0f:ec:eb:18:d4:bb:6b:90:2a:bb:17:5a:b6:58:
a1:fb:54:30:f7:9f:f2:ce:19:c9:88:89:e4:42:cd:79:3d:d9:
f2:f9:8f:d4:55:59:bf:fb:4c:05:35:91:51:60:9b:81:3c:29:
dd:9b:ae:4d:81:00:84:6b:8a:05:a5:ea:42:62:05:d3:b0:f9:
ab:5c:c2:27:76:8c:bd:c8:de:c4:78:6c:bd:ec:6c:57:65:da:
94:c1:18:52:67:ca:88:3b:66:e2:31:30:29:4b:86:d0:95:49:
c8:40:2b:d2:47:e3:68:62:c1:9e:f9:c9:6e:2b:e7:1c:4a:25:
b9:a1:a6:bc:b5:15:98:db:e5:10:18:57:44:43:76:46:77:78:
56:05:7f:5c:cf:c8:a4:16:e7:3c:64:73:7a:d6:4b:84:e5:0e:
9c:14:88:71:fb:7b:57:46:02:e7:f7:82:ee:2c:e6:91:43:9c:
7f:25:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:41:35 2026 by rpki-client