Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: 6dVxJR5Cn54cFa9N9B7VT8ACAUQtBtj/cuTtbuNqCsw=
Subject key identifier: F3:F7:75:85:5A:06:2F:4A:77:81:2E:6B:8C:17:9A:A1:8B:D4:1E:C4
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 01A13FDE73E164F9B4D92FA9719E992ACCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 14:01:45 +0000
Manifest this update: Thu 15 Oct 2026 14:01:45 +0000
Manifest next update: Fri 16 Oct 2026 14:01:45 +0000
Files and hashes: 1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: XYuV9NCvH+Ff3yS0wKsSIVr0HjEuuZXhPse16M3GlCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:73:e1:64:f9:b4:d9:2f:a9:71:9e:99:2a:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Oct 15 14:01:45 2026 GMT
Not After : Oct 16 14:01:45 2026 GMT
Subject: CN=f3f775855a062f4a77812e6b8c179aa18bd41ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:7d:84:ba:16:f0:ea:de:ee:eb:49:bf:f7:
5c:91:c8:3a:87:07:9f:c0:bf:0d:e3:b7:90:b4:32:
0a:39:f8:66:e6:4c:de:90:ea:f5:a3:41:56:ef:8f:
5f:3b:74:af:9f:93:c9:2c:6a:90:ad:61:0d:e4:70:
21:da:e2:f6:b2:49:61:df:86:09:ac:5f:09:f7:9d:
da:18:a9:04:15:77:ab:18:90:fa:f2:82:74:65:59:
84:1e:02:2f:67:d6:59:c6:88:5d:91:e4:cf:07:3d:
c6:23:d7:ea:59:47:bd:0f:76:4b:e2:30:1e:f4:0a:
26:05:7d:1c:9c:72:af:9e:59:55:d8:71:0e:51:89:
3a:4c:65:e0:f7:9a:5f:58:2b:a8:c0:09:9c:15:d7:
14:67:b8:87:89:e6:79:b0:c6:14:c6:67:3a:20:2c:
cf:e6:6a:63:d3:45:47:11:c2:9d:b6:df:97:a8:36:
e5:d9:e5:c9:56:47:af:fc:6f:0c:15:cd:0a:71:1c:
80:e8:01:49:55:e2:15:b0:d4:ab:3b:2b:ef:cd:4f:
f1:87:1a:69:26:c4:29:76:f7:9b:42:40:c7:b4:c7:
dd:77:61:76:ac:08:06:12:10:b0:94:fa:e7:f4:53:
0d:96:a4:17:60:64:3a:e4:6c:53:d8:36:0c:ba:c0:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:75:85:5A:06:2F:4A:77:81:2E:6B:8C:17:9A:A1:8B:D4:1E:C4
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:b7:0e:03:16:81:f1:b7:b6:d5:64:dc:dc:63:79:a8:70:
f3:87:e9:b8:16:a1:cc:83:3b:8e:1c:82:e3:0f:0d:2d:95:00:
46:c4:7e:a2:42:69:6b:e6:21:bf:c0:c6:75:c8:6b:36:ea:cb:
cd:1f:b3:3e:66:36:00:1c:61:e3:4a:97:c2:42:27:1b:23:2d:
a9:da:bb:ae:01:fc:07:5f:3e:47:60:5b:94:34:07:ad:ff:e0:
77:d3:ae:02:9f:f1:39:86:45:7c:de:7c:0a:a6:08:5d:2c:a6:
c7:8c:b0:6c:7f:17:85:2e:bb:fe:b0:b9:7d:44:32:81:cd:21:
6f:3e:ce:f4:c9:41:28:98:ea:0c:da:d3:7f:99:ff:44:7a:17:
06:66:8a:e2:7b:5a:8e:0f:d7:f8:a2:9a:8d:6f:99:2c:3f:1a:
e0:4e:46:b7:4f:ac:84:f5:42:35:f5:2d:53:6e:74:c5:ec:e1:
2b:41:1f:cb:a8:8d:c7:8c:34:bf:07:c8:78:69:d3:4a:e0:f6:
63:39:82:d9:cc:10:f8:2e:30:2e:a9:bd:c2:31:f2:6f:d6:4d:
b0:ef:ed:f7:c3:8f:5c:18:2a:9f:05:92:ca:0e:22:af:75:3c:
a8:12:ad:a0:7b:95:10:39:6e:76:79:af:c2:82:3c:db:fd:b6:
98:bd:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:27 2026 by rpki-client