Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: GacML2s2NS2GyLKvQu6QLXvV79km/8pVpSBrz1WSx3E=
Subject key identifier: AB:D7:93:9C:AA:2F:47:83:C1:21:EE:69:2F:A0:7E:E6:16:28:69:D9
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019F9F5EE05AC459E183A5465E0034DCFBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 16EC
Signing time: Sun 26 Jul 2026 17:00:22 +0000
Manifest this update: Sun 26 Jul 2026 17:00:22 +0000
Manifest next update: Mon 27 Jul 2026 17:00:22 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: ma1ndbogdZGrA2fAIieK+9hb0c1Ig3WqsNTi2JZSs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:e0:5a:c4:59:e1:83:a5:46:5e:00:34:dc:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jul 26 17:00:22 2026 GMT
Not After : Jul 27 17:00:22 2026 GMT
Subject: CN=abd7939caa2f4783c121ee692fa07ee6162869d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:de:70:c0:12:41:f8:59:38:b0:9e:83:c7:
ce:a6:17:83:81:32:81:3d:c3:c3:dd:05:88:3b:d2:
1f:fe:f2:21:d1:8f:31:b6:86:45:e5:c1:33:94:d5:
cf:a2:30:59:b4:18:61:1d:70:3b:00:86:a0:82:ba:
87:02:b2:00:8d:f1:87:4f:57:81:86:70:1e:ea:0e:
23:49:c6:60:7a:36:15:5c:24:d0:03:28:55:16:ff:
f3:38:52:c2:a5:37:e9:86:ff:ad:28:7e:35:b0:3e:
6f:e0:14:f3:a4:48:f7:bc:9a:ed:2f:e8:52:80:80:
7b:2d:65:20:8c:57:b8:70:49:10:ab:98:86:bf:a4:
85:ab:9c:b5:e4:ba:74:5a:93:66:69:86:65:e9:4d:
9c:40:ad:16:5e:d2:4c:23:3c:bf:27:87:7a:e3:56:
68:cb:5a:87:4d:d6:73:19:71:77:04:ab:f9:86:71:
c7:64:11:2d:d7:21:c2:87:1e:55:69:f2:d6:26:d7:
3e:db:82:a1:88:75:dd:8d:56:92:47:55:f2:dd:42:
14:d6:67:fe:c8:1a:d7:aa:92:54:27:a4:ff:06:52:
28:5d:1e:a6:ad:94:c2:14:bb:ad:b6:bf:ad:24:fc:
5e:60:e5:d9:20:ec:9d:3e:c0:37:41:93:f7:a0:36:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:93:9C:AA:2F:47:83:C1:21:EE:69:2F:A0:7E:E6:16:28:69:D9
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ab:64:f6:1a:b8:6a:a9:50:6e:d2:39:77:51:89:a0:bd:0a:
85:40:f2:9a:d1:00:e8:86:f6:f6:8e:4c:4b:cd:a7:a2:1a:99:
3b:77:64:56:5b:64:d9:ef:1f:bf:fb:8f:d0:f4:1a:3b:ef:f5:
42:e9:ed:73:65:45:f7:1e:24:c4:e1:4b:ef:1b:91:c0:1c:d6:
81:90:31:ce:5c:41:15:f2:66:33:97:91:60:ed:38:bf:05:2d:
89:8f:a4:75:ae:c2:18:f8:33:5c:1d:c6:b6:b1:9c:98:21:85:
a4:43:e1:cb:00:aa:c2:40:5a:7c:7f:01:09:69:05:38:07:73:
65:af:29:8b:97:84:24:aa:e2:70:2b:56:ee:42:d4:a9:20:4c:
ce:00:e1:4c:a6:f1:1d:f1:48:c4:26:b0:45:c6:dd:fb:b5:d3:
b3:18:c8:6c:f7:dc:82:90:83:56:90:22:19:fd:7b:26:c4:c5:
cd:68:9b:40:7b:c0:76:2f:31:40:85:66:cc:3b:42:31:bd:86:
bb:bd:aa:4d:6f:c7:ab:92:bd:12:74:b7:15:4b:77:89:96:cf:
94:a0:9b:ee:33:ff:d9:68:60:f5:b7:fb:25:57:10:8d:74:55:
b8:a5:52:da:45:17:22:46:8c:1d:12:4b:61:c6:79:bb:38:3a:
32:0e:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:45 2026 by rpki-client