Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier: wh9fmMsTB45cmEiQ1KQvVWtytt8kMb+thfGFT34clHI=
Subject key identifier: 4B:20:D9:FC:99:22:3B:3D:AD:F5:9A:AC:A9:59:07:6A:85:BE:A4:5D
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 01A13E5C9B4AB33B9019A7C4BD61484F69AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 07:00:18 +0000
Manifest this update: Thu 15 Oct 2026 07:00:18 +0000
Manifest next update: Fri 16 Oct 2026 07:00:18 +0000
Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: FbqIhx2cZ5+4Tmryx8YGZ+r6dbLs2QbPipmAjS8qUCQ=)
2: Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa (hash: S095x8PjGP0BDIBL70mlfzvokhhapxj9rG8kMLp9d34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:9b:4a:b3:3b:90:19:a7:c4:bd:61:48:4f:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: Oct 15 07:00:18 2026 GMT
Not After : Oct 16 07:00:18 2026 GMT
Subject: CN=4b20d9fc99223b3dadf59aaca959076a85bea45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:a1:fc:28:a3:6e:89:8d:11:aa:d7:7b:4f:
52:6d:10:44:e6:e8:2c:40:49:d6:a3:b3:98:5c:c5:
4b:ea:df:8d:30:d9:a1:79:32:7b:0d:7f:e1:c2:0d:
b8:f1:d6:ae:ef:2d:99:0a:e6:1f:e0:6c:41:92:05:
5f:5d:07:79:c5:5d:6a:04:2e:17:d2:99:e0:8b:b1:
18:b5:34:b7:18:19:3c:c1:e3:c2:ea:af:47:f7:81:
0e:37:30:f2:83:ab:89:2a:ec:dc:bb:8f:5a:83:c2:
33:72:a2:46:a0:49:3b:c0:d2:a9:4b:de:a8:ca:ea:
16:c9:6d:39:b9:4a:eb:1a:9f:14:08:01:82:54:74:
6d:0b:ec:0d:36:99:3b:67:6e:f9:70:b5:96:86:57:
52:46:02:67:cc:0b:64:ff:21:84:8e:a2:4c:73:77:
69:b3:20:ef:7d:c9:01:c9:92:6d:4b:b2:b5:f7:a6:
ed:a5:d7:90:fe:98:14:07:9b:0c:14:40:18:c8:36:
b8:ab:3c:b4:61:c6:0b:8b:bf:6e:12:ed:e1:47:cc:
a5:10:6d:b6:ea:93:87:1a:b9:40:36:6c:e2:e3:50:
69:7b:14:ff:14:fd:3c:bf:77:ca:66:ff:92:d7:50:
06:ae:97:53:81:30:86:ac:ef:3b:4a:8f:b1:5c:0a:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:D9:FC:99:22:3B:3D:AD:F5:9A:AC:A9:59:07:6A:85:BE:A4:5D
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0c:39:58:a9:56:ab:4b:a7:54:96:a9:cd:c4:bb:42:3c:01:
3c:0c:33:61:70:14:3d:41:f1:1f:7e:e1:03:e0:0e:8e:c1:ac:
2f:07:4d:af:bc:dc:03:81:0a:88:08:d5:82:90:66:0d:1f:13:
58:b8:e4:ab:37:3a:35:42:0b:3a:d5:91:90:9a:3f:53:73:d8:
eb:fb:91:9e:6e:e8:1d:39:08:8b:5c:6e:59:fb:27:e1:73:2d:
d2:db:2e:f0:85:bf:d8:0d:f6:be:50:4f:7a:1f:8c:f6:9d:ce:
a5:dc:34:f4:42:1a:06:b2:d6:42:ef:78:36:c3:fc:0a:9e:ec:
88:26:90:26:d0:69:d9:e3:6c:26:75:85:49:c8:c4:cb:b4:7b:
a4:31:e2:86:16:03:32:d7:5a:5a:d5:5e:ee:b6:a9:64:b3:65:
63:12:1a:8a:88:ef:12:05:f3:dd:de:1d:d2:7f:50:e7:01:08:
20:ea:7c:e4:13:30:f9:b3:3d:4a:a0:99:6a:50:8f:26:dd:5e:
ac:77:d3:d6:47:32:81:90:bc:4f:09:05:f1:9c:46:3e:6f:51:
a7:a4:e3:d1:77:a6:8c:17:01:a1:1f:02:b0:28:e1:3d:bf:04:
f6:ec:a3:4e:ee:4c:38:b2:4b:30:14:0f:e2:04:e7:e9:6a:68:
8e:34:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:28 2026 by rpki-client