Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: 3GfCJr38lBBUheO8qI+2sFSFP2YpIjBFhLsly4nQzCk=
Subject key identifier: 15:4D:10:C7:CF:B8:E2:EA:77:1C:D2:A5:10:7F:20:29:19:5B:DB:81
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 01A17A7176A46A875DF4D483A94A9BFC59A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: 0217
Signing time: Mon 26 Oct 2026 23:00:18 +0000
Manifest this update: Mon 26 Oct 2026 23:00:18 +0000
Manifest next update: Tue 27 Oct 2026 23:00:18 +0000
Files and hashes: 1: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (hash: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: i5hJw38NY2O2zoc6R+c5ZZ8Jdf0K63T5vBtl4uKW7MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:76:a4:6a:87:5d:f4:d4:83:a9:4a:9b:fc:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Oct 26 23:00:18 2026 GMT
Not After : Oct 27 23:00:18 2026 GMT
Subject: CN=154d10c7cfb8e2ea771cd2a5107f2029195bdb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:e0:66:8a:2e:b6:33:e5:40:18:d4:8a:97:
2d:89:17:84:ee:a7:da:8b:5c:af:38:68:1a:b1:1d:
20:2d:48:6f:31:52:a9:14:26:6b:45:8f:a3:c4:d3:
45:38:8a:41:d2:32:c0:4b:25:d0:c9:14:28:13:93:
82:aa:ae:5c:24:08:e8:9d:c9:65:cb:14:6b:89:6f:
d6:c4:82:22:59:ad:e9:ea:61:7c:b7:f3:9e:da:8b:
b0:e9:6a:54:64:17:8a:a4:61:07:15:de:fe:aa:a0:
39:91:b8:03:20:a7:99:32:c2:e5:8b:b8:d8:4e:ee:
7b:79:e7:49:b5:fa:e3:a0:0f:3c:fc:a4:5c:fc:4e:
31:0b:33:d3:00:b4:e0:58:09:eb:1e:bf:0a:23:50:
75:50:85:03:7c:d5:bd:6a:3d:d5:06:b5:29:46:7c:
7f:f3:55:9f:bb:d5:7e:c9:c2:7c:55:41:52:ae:0c:
a0:33:5c:6a:d4:fb:8c:81:73:06:f8:a2:be:5b:9e:
1d:51:da:a0:f6:e7:f2:0e:f8:d8:48:55:0b:0d:52:
85:f3:a8:92:1e:9b:2b:0f:fb:f1:d7:1e:cc:c4:51:
4b:6c:d7:c7:32:48:16:25:99:45:58:2d:82:69:df:
b3:0a:c9:f9:83:30:09:22:15:9f:b8:d4:c0:13:67:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:10:C7:CF:B8:E2:EA:77:1C:D2:A5:10:7F:20:29:19:5B:DB:81
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:32:4e:4a:03:b5:8d:72:32:f6:42:7c:0d:65:17:07:02:1f:
4e:8a:8d:a3:72:f2:81:7d:20:c8:c8:52:eb:4e:c4:cf:04:1e:
34:13:b5:75:4a:1a:a1:43:90:e5:f5:3c:bf:87:0b:09:16:c3:
68:09:c5:cc:2b:4b:e1:bc:43:fc:d9:89:61:b9:da:8c:80:b7:
15:bc:4c:43:32:45:24:93:f9:06:41:22:78:08:e9:ba:1d:fb:
56:7e:ad:b9:7c:43:06:e8:53:df:06:50:d1:42:dd:e1:b3:0c:
e4:46:3a:99:a4:20:8a:e3:0a:1e:e8:d9:17:6b:fb:2d:bd:f0:
9c:88:4f:20:09:de:50:e9:2c:92:5e:e4:ab:94:78:de:9b:42:
15:de:a3:b3:d5:02:6e:b8:64:e6:2e:55:d6:eb:06:18:d0:a7:
0d:26:12:04:d1:4e:10:be:b0:a4:53:53:22:49:f0:1b:0c:00:
f8:20:55:6f:15:e8:b0:56:2d:fd:0a:90:b7:41:73:76:bc:18:
cb:4e:7f:fd:0c:f2:02:2f:37:18:f7:9c:f5:ac:ab:62:2a:6e:
d0:d0:53:f7:50:20:6a:ba:90:86:c9:1b:b6:3f:66:2d:90:c0:
f6:09:c7:57:d1:cd:22:98:7a:8a:f9:e8:30:3c:5f:ef:06:38:
ac:95:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:57:58 2026 by rpki-client