Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier: a+vPCic8fZZJq3jqgUrkkbsm7K8Coqk60LI+8YthFUU=
Subject key identifier: 7B:BA:1D:9B:76:2C:BA:F3:B0:E9:57:BD:D2:CD:50:56:56:DB:2A:9D
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial: 01A179CCD9C5243E0BD1C360B27FD1E87FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 20:00:30 +0000
Manifest this update: Mon 26 Oct 2026 20:00:30 +0000
Manifest next update: Tue 27 Oct 2026 20:00:30 +0000
Files and hashes: 1: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: XiW+Q75gGxYz4svxeZIz8SoUGnmlSqLhL1Q5ECcTVxg=)
2: axUwYQFpI_H0PGZ-1hLTsPluQlw.roa (hash: jYCTtZ3yrS3nW17v+JIWdi31GQ0OQwoHbk+cXhltHjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:d9:c5:24:3e:0b:d1:c3:60:b2:7f:d1:e8:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Validity
Not Before: Oct 26 20:00:30 2026 GMT
Not After : Oct 27 20:00:30 2026 GMT
Subject: CN=7bba1d9b762cbaf3b0e957bdd2cd505656db2a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c9:23:d9:57:6e:55:fe:a1:fa:4e:a2:04:67:
4a:18:3f:0e:30:b8:23:69:82:48:36:21:3b:07:13:
df:a8:87:df:4c:fc:4d:a4:ce:04:82:20:88:f7:6a:
30:1e:2f:ba:62:2a:3d:0b:cb:0a:74:8b:30:45:e6:
33:c1:0f:15:eb:c4:06:a6:8a:cc:5e:bc:05:9a:6b:
59:6b:07:91:e3:c6:16:69:be:85:f1:62:af:1c:2f:
0a:4e:05:7d:5c:b3:3c:78:d8:a9:94:60:0d:dc:ee:
33:c7:fb:d8:84:5b:05:da:fa:49:2c:eb:b7:ba:37:
80:44:1f:1b:ea:24:fa:92:05:ff:3d:70:6e:d2:06:
1b:64:44:9d:92:2c:09:14:05:b9:91:02:5a:18:17:
d3:50:cb:08:39:0f:9c:4c:9e:07:7e:7d:d9:21:ad:
35:7c:2e:20:ab:b2:99:ff:b8:bc:5d:a7:9b:4e:ea:
b0:a4:ea:0e:e0:00:5f:33:a1:87:ad:40:f3:64:c2:
f4:b2:d9:0b:2b:c6:c3:81:8b:2e:7f:3f:16:2c:4c:
f1:80:89:4b:80:b8:a4:15:0d:07:3b:b9:3c:57:7b:
4d:52:a7:d7:fe:bd:c2:3c:96:df:64:32:05:fd:54:
ed:ef:29:e4:06:a2:2e:6b:3b:fe:82:d2:4e:e2:06:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:1D:9B:76:2C:BA:F3:B0:E9:57:BD:D2:CD:50:56:56:DB:2A:9D
X509v3 Authority Key Identifier:
keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8a:4c:1b:b9:79:cd:3a:02:13:f0:db:d4:ac:76:88:1a:ff:
3a:fd:11:e9:15:72:15:65:9e:7a:ca:72:38:2f:1f:1a:6e:2e:
bb:73:16:6a:75:2f:1f:02:78:2b:5d:68:12:40:eb:e8:23:db:
f9:a0:2e:88:83:88:e9:e8:d9:6b:b6:a1:4f:e0:a5:4d:d7:aa:
d0:35:a2:69:a1:b6:d9:da:4a:fc:06:57:9a:37:1d:4b:fb:18:
eb:25:c2:09:01:49:dc:1e:be:b0:cb:a8:c2:02:87:8f:e3:ae:
cf:68:1a:34:2b:55:66:10:d1:4c:44:91:63:83:b2:1d:a1:ef:
3a:89:56:f1:33:f6:3d:0d:79:6f:1d:e0:58:13:c2:dc:f4:26:
b5:20:d8:00:e5:a1:5b:72:bb:49:1b:a4:e3:d5:3b:13:a7:4f:
45:d4:0d:88:be:66:6b:1f:a9:f0:67:5a:b3:56:7f:cf:14:d4:
45:9f:7b:b0:38:7e:0d:f3:b5:e7:01:7c:09:fa:01:90:09:89:
a5:01:83:0c:6e:a5:e7:47:1b:df:60:e5:8c:e2:b7:49:2a:cc:
c0:48:d5:44:59:f1:24:c0:83:e9:28:2e:c9:94:b1:61:a0:8d:
5f:fe:c2:80:54:36:64:31:17:2e:19:76:88:d0:1f:d0:51:72:
38:76:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:20 2026 by rpki-client