Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: 1Y8tjzekdKN1R65UA0Ory/uUmXNKcaIjjy1s/fsC278=
Subject key identifier: 1F:CC:9A:60:A6:86:D8:9B:0A:07:F9:3C:E0:52:32:83:71:F4:F8:F2
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01A17582A04E2A3D6FB885295F8A79952171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 00:00:57 +0000
Manifest this update: Mon 26 Oct 2026 00:00:57 +0000
Manifest next update: Tue 27 Oct 2026 00:00:57 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: BcPHmuSp85jJBU6ACsPK1s6Yv6fPuxLDwDdG0lW6mh4=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:a0:4e:2a:3d:6f:b8:85:29:5f:8a:79:95:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Oct 26 00:00:57 2026 GMT
Not After : Oct 27 00:00:57 2026 GMT
Subject: CN=1fcc9a60a686d89b0a07f93ce052328371f4f8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:0f:e8:b1:64:6b:82:06:f3:d5:03:64:bb:
70:97:e2:ca:f5:f3:78:0c:95:f1:3f:64:a0:d9:de:
30:5a:6c:f6:a3:d3:5d:ed:0e:1b:79:52:f0:80:d4:
02:20:7e:c7:6c:0f:ad:5d:70:87:19:8b:f0:65:9d:
ff:4e:9e:49:39:3f:47:d7:9a:2b:a6:1c:11:a3:52:
36:f8:30:32:e9:18:d8:8e:f5:b9:de:08:7b:5b:a6:
5f:7b:cc:1f:28:2d:79:ba:4b:58:6f:d5:bd:6d:7d:
cd:59:cc:e6:b0:3d:51:3c:60:0f:e2:6c:9f:f6:9a:
9b:29:5b:c6:4c:64:e6:12:75:53:69:5e:a1:a0:0d:
b7:7e:28:7d:b2:98:b3:4b:05:0f:04:6e:91:06:4a:
e9:3e:84:b7:ed:17:d0:ec:09:d7:ac:2b:63:f9:3b:
25:b7:90:c4:47:37:4e:49:58:99:05:30:e5:1f:14:
bf:9d:69:99:5f:4e:4d:44:0d:f9:88:04:d3:2c:cc:
6e:a4:6f:f1:fc:28:2f:1f:2d:6c:e1:c1:f8:dd:83:
76:3e:a2:f2:40:a9:a4:c6:ca:0a:8a:7d:73:01:3c:
e2:08:2c:15:99:18:60:43:bc:03:57:0f:d8:40:a3:
e9:d6:d8:21:0c:78:f3:4f:f2:90:35:ae:c4:ad:62:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:9A:60:A6:86:D8:9B:0A:07:F9:3C:E0:52:32:83:71:F4:F8:F2
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:75:5e:9e:fa:96:46:11:9b:2f:be:9e:50:99:8f:64:48:
96:45:cf:35:6a:74:05:a5:21:7e:44:c7:74:31:d0:00:55:88:
ca:08:03:35:18:7c:45:42:0b:f3:26:e9:94:5f:8b:f0:ef:2c:
e0:63:06:be:3f:6f:68:a2:94:79:78:93:3f:f6:e5:62:eb:84:
7a:74:89:d5:cf:24:fa:f8:70:62:7d:9a:a7:95:7f:2b:d0:16:
bb:a4:50:68:50:13:fd:73:0b:ec:60:28:01:65:1c:ed:85:39:
b4:c1:de:dc:6e:21:fb:d0:f5:19:3b:21:24:b1:6c:70:3b:7f:
9f:87:f0:ed:67:7b:11:77:d8:6e:36:f4:56:97:ce:ba:b5:fe:
a6:e8:c2:0f:c9:2e:dd:d0:0a:e2:35:8a:24:6a:02:56:e2:aa:
cd:65:a8:1f:ce:ae:c0:30:d5:64:6d:76:47:b7:c3:d1:61:36:
fe:7a:15:9e:12:29:ce:cf:eb:2e:7e:a7:22:83:a9:dc:58:5c:
d5:91:9f:bd:f4:df:c4:0c:6a:3a:b6:d5:3d:31:3d:ea:13:85:
e2:2d:e8:ab:79:21:50:10:e4:7b:74:3e:72:42:4b:bf:5e:a4:
35:79:4a:b4:2c:ff:b4:02:5f:fc:e2:cb:c6:9a:c5:01:4e:18:
f9:c7:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:26 2026 by rpki-client