Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
File: eKA49MxsIbhivseqXJMX4SWdfaw.mft (raw, json)
Hash identifier: JMVqKxS4T9mWf61ZDeLNRdAHj1wq5WxDy9yCq9HAtco=
Subject key identifier: DF:38:B9:DF:33:44:C3:CC:C6:BB:95:DB:7D:87:DC:DB:62:A8:58:6E
Authority key identifier: 78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
Certificate issuer: /CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Certificate serial: 01A08C7B20BB3653AE18AC522037C1407C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:14 +0000
Manifest this update: Thu 10 Sep 2026 18:01:14 +0000
Manifest next update: Fri 11 Sep 2026 18:01:14 +0000
Files and hashes: 1: BAPEwvLWrCymKkuORRd20zN2KRM.roa (hash: xYjjd2fD6IT/QFAlJG+FXNFTXBwK7Qx9jdl5Cyhg+KE=)
2: F-XzCN7Z6yyf988iOvTKBqMAT9M.roa (hash: ph0B1ggQvIrHcHEAMTFHOb5go7oZA1k/Z917jRVSdfA=)
3: K-Pby2C1ey5Hmw1yKByzvBXih2U.roa (hash: ktjdbh6kCP3XgfCDqDMe5dm3+erjzCc+TQFlq963tyU=)
4: eKA49MxsIbhivseqXJMX4SWdfaw.crl (hash: 5864b1u3Nd+i5BYBOV/o9/2VDpEDS54IBHHZSSoSVzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:20:bb:36:53:ae:18:ac:52:20:37:c1:40:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Validity
Not Before: Sep 10 18:01:14 2026 GMT
Not After : Sep 11 18:01:14 2026 GMT
Subject: CN=df38b9df3344c3ccc6bb95db7d87dcdb62a8586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:70:3c:b4:d1:95:77:16:32:a0:19:5d:a8:
9e:af:9c:2f:75:a9:cb:d8:7b:de:d9:b1:68:49:bb:
dd:fe:1f:22:9f:27:9c:21:93:7e:cb:be:fc:81:c7:
58:31:90:fb:9b:2a:d5:a3:25:4f:2e:65:9e:06:94:
ff:33:12:e7:ba:93:13:2c:99:39:51:06:72:bc:18:
01:dc:d4:cc:82:17:71:9c:d1:95:af:bd:86:8c:70:
41:d2:32:f4:50:e9:90:75:45:8b:d5:8e:26:38:a8:
de:18:99:06:91:a5:e6:6d:04:03:1f:75:be:6d:ca:
43:db:1b:c0:ec:19:c6:35:c6:6b:43:59:b6:39:2f:
16:95:9e:ba:37:53:38:99:32:a5:35:ad:75:8d:b5:
ad:53:f8:c5:a4:a0:ad:2a:b5:9e:a5:c5:fc:b3:2b:
db:5b:ff:a1:de:2f:cb:c9:b3:50:f4:c0:58:58:47:
b4:f5:ca:7d:86:7a:2b:b0:17:3e:1e:6c:0d:95:88:
5b:34:53:86:a9:f0:11:65:ad:d6:fe:5e:a8:09:b8:
2b:13:fe:83:1b:01:00:9f:59:3b:9f:79:c9:d0:12:
f2:8a:79:e7:ad:d3:0d:8d:09:aa:e1:fc:86:e1:7f:
08:22:30:75:63:40:c2:f5:cd:ca:42:7b:0d:8f:82:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:B9:DF:33:44:C3:CC:C6:BB:95:DB:7D:87:DC:DB:62:A8:58:6E
X509v3 Authority Key Identifier:
keyid:78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:a9:d9:1b:8c:8e:87:e9:fb:50:85:1d:68:38:8a:1d:a0:
13:9a:f1:18:4e:8a:6f:a8:1a:e2:d8:66:de:14:f4:f2:15:4f:
a0:43:0e:e1:fc:a9:05:55:8c:2a:75:09:1e:ba:0e:1e:1b:10:
b9:7f:37:40:04:95:4f:ad:5a:06:92:85:aa:19:66:e8:87:ae:
7b:f1:f0:f3:eb:b7:d2:92:ed:85:a8:fa:50:c5:dc:53:74:6c:
08:fa:ea:98:60:ad:e4:dc:dc:b8:d4:4d:1e:dc:de:28:0f:f5:
f0:83:1c:7c:c1:0c:d3:0b:e8:73:ee:f4:a6:8b:90:0d:76:14:
c6:27:a6:d6:fa:f9:ac:82:c5:68:5a:b6:53:05:c2:8c:0f:1b:
ab:f7:f0:8b:94:af:45:26:a9:89:3c:e6:af:9b:60:5a:a9:04:
f8:4b:91:4e:d0:f3:06:bb:df:37:52:33:68:0a:8a:14:49:98:
5d:7b:8f:aa:fb:93:a8:e4:52:69:ee:1b:fe:4e:78:9e:49:dd:
62:d0:b1:3e:df:f9:b3:e2:d2:8f:89:c4:47:9d:1a:2a:ff:13:
eb:28:cc:8d:c0:07:09:82:a9:0d:a1:6c:21:75:2d:b1:15:5d:
ce:de:77:70:3b:f9:85:79:6e:42:25:c3:a4:74:3f:66:fa:f7:
4b:91:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:09 2026 by rpki-client