Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: 27hTj3BI6EButSXMDEfxXZPkn1tI3AtaJNBQC9ZHHrw=
Subject key identifier: 77:4A:42:01:B2:67:E8:E4:AA:DF:48:72:3F:11:56:18:23:80:BA:69
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A06DCBBE3CB1A0735B4E690B8BE4EB25D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 1171
Signing time: Fri 04 Sep 2026 19:01:03 +0000
Manifest this update: Fri 04 Sep 2026 19:01:03 +0000
Manifest next update: Sat 05 Sep 2026 19:01:03 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: y9ZrmQ5u3wGzULbovb2ay7Jb1eiBXKbl+sAToQpRO3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:be:3c:b1:a0:73:5b:4e:69:0b:8b:e4:eb:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Sep 4 19:01:03 2026 GMT
Not After : Sep 5 19:01:03 2026 GMT
Subject: CN=774a4201b267e8e4aadf48723f1156182380ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:39:a9:c3:54:a5:7b:5f:a5:7c:3b:2f:3b:
43:f3:72:cf:4a:e6:73:6a:b3:da:7e:21:68:04:06:
01:ae:f9:b7:cf:91:41:b6:58:21:c6:73:92:f4:17:
6b:89:50:5e:f4:3b:51:c8:38:0d:ba:a3:b5:bc:95:
b8:cc:6c:61:ce:5a:53:80:10:79:5b:1d:49:7a:bc:
7e:78:2f:bb:81:2f:da:12:1c:42:81:3c:13:bc:87:
93:5f:ca:88:2a:bd:57:07:ad:b3:36:c4:3f:0c:73:
48:82:59:f3:03:4a:e5:91:92:4e:7a:97:90:74:4e:
3c:14:53:b8:10:3f:32:0e:aa:63:e1:a8:07:f2:ec:
c4:c1:ff:22:17:a3:82:28:33:25:da:08:93:72:d3:
e7:fa:67:d6:da:59:ac:03:98:94:1c:f9:92:ed:33:
cb:17:1f:e8:25:9e:13:6a:f9:01:25:f2:24:2f:97:
e8:5c:47:d6:98:04:d6:75:9f:bb:88:f6:03:81:fd:
2d:ab:f3:6d:5f:72:29:11:16:5e:b2:83:46:6a:db:
78:c3:c2:ea:d0:8d:15:1f:bd:d8:38:df:2a:2f:97:
50:a0:e2:ea:70:aa:de:c9:d1:a6:75:35:10:61:8c:
00:bc:35:55:d2:54:f7:92:6e:6e:9c:67:d0:67:20:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:42:01:B2:67:E8:E4:AA:DF:48:72:3F:11:56:18:23:80:BA:69
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:67:6d:ef:85:ee:47:a6:f2:01:b8:24:57:90:1f:46:13:
40:34:d7:c7:6f:55:60:85:15:d5:76:bd:48:eb:cd:bd:b8:19:
f9:f8:26:cb:bd:32:aa:56:33:61:c8:ef:1a:09:7d:c6:89:bf:
4b:ed:e5:14:1c:da:13:10:d2:46:db:7c:fd:26:67:92:f9:a2:
9c:40:f3:10:32:b2:72:53:10:73:d1:a5:98:21:a1:38:e0:74:
14:82:17:fb:18:a2:96:1d:5a:a5:d8:d2:f8:b8:d1:8c:ea:1f:
53:9a:8d:dd:e1:f8:37:a0:2d:26:13:21:e2:f7:b0:0c:1f:2b:
24:3d:3c:5b:37:b1:10:03:cc:13:03:0b:12:e5:2d:f1:e0:26:
06:2e:d9:4a:7b:8b:02:d9:cd:83:4d:f1:18:fb:af:c9:14:62:
f1:ff:83:38:4d:85:06:2a:a9:71:31:7b:00:ca:a0:c0:f3:c7:
a8:34:9b:d1:f4:24:47:27:e5:e6:94:d6:73:71:e4:69:ac:ee:
d5:57:fb:bb:8d:e7:61:d2:a2:6c:10:c4:79:fc:95:75:f6:c5:
67:33:b3:82:31:58:5d:d5:7b:35:f2:94:0c:45:a8:ae:89:bf:
55:bf:99:b4:6a:96:90:64:e9:9f:9b:30:d4:35:66:ff:d6:1d:
e7:8f:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:38:50 2026 by rpki-client