Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
File: EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft (raw, json)
Hash identifier: Gn3betBv2Ap0Osxvs51txOJ0MIcoX3QZA7eZfhyNJC0=
Subject key identifier: 99:40:9A:4D:9F:EB:3E:18:2B:FA:84:9A:DE:C1:3D:40:FB:14:24:FB
Authority key identifier: 11:0C:B6:5D:FB:F4:A6:AD:DA:A4:C5:E0:83:9A:89:93:A3:90:DA:0B
Certificate issuer: /CN=110cb65dfbf4a6addaa4c5e0839a8993a390da0b
Certificate serial: 01A1205292240044BA6B4FAC8D2B7964EEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
Manifest number: 42
Signing time: Fri 09 Oct 2026 11:00:44 +0000
Manifest this update: Fri 09 Oct 2026 11:00:44 +0000
Manifest next update: Sat 10 Oct 2026 11:00:44 +0000
Files and hashes: 1: 0txqVoYoRq02yNIrhX49LTIof3M.asa (hash: Qphj0BiGCj2TI4zxKCc9q3mBKIrFTpgysYgc+lJX2bg=)
2: EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl (hash: 4964oiHcXc/9HO/VlUC5mlGeW0ISd8ItcCmes+jIn84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:52:92:24:00:44:ba:6b:4f:ac:8d:2b:79:64:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110cb65dfbf4a6addaa4c5e0839a8993a390da0b
Validity
Not Before: Oct 9 11:00:44 2026 GMT
Not After : Oct 10 11:00:44 2026 GMT
Subject: CN=99409a4d9feb3e182bfa849adec13d40fb1424fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:af:e7:19:a9:6a:6e:a8:79:1a:f1:c5:a3:
5c:30:e8:d2:50:3e:cc:f9:8e:25:5e:f3:30:57:76:
80:d2:32:98:de:6e:f5:05:be:6e:33:5a:4d:c3:17:
50:50:a4:d8:84:64:1f:90:82:0c:14:b1:96:0e:c2:
b2:0c:dc:f0:77:6c:f5:d7:32:24:5a:ff:e8:0d:b7:
7c:71:82:cb:c4:01:f6:ce:e5:5b:1f:ab:aa:39:ff:
6d:f1:54:b6:9c:3b:13:8e:84:25:83:89:cc:26:94:
1c:3f:37:fb:8f:bd:32:ca:a9:5a:67:f3:fd:41:08:
f3:2b:bd:2d:7f:19:e0:31:0d:51:8b:fc:4f:71:98:
e1:71:3c:a3:c8:db:e6:53:36:f4:bf:38:6b:ef:e9:
e0:8a:78:16:41:d9:65:0e:2a:81:f8:bf:c9:4c:16:
fc:49:96:1c:f9:cb:7b:66:98:36:b6:00:04:2c:17:
47:5f:5a:34:a9:a9:c5:53:f3:22:ec:09:3e:12:eb:
f8:f8:25:72:57:70:4c:93:1f:55:29:77:23:20:a9:
21:49:d9:e7:ec:e4:d9:d4:85:55:62:cc:5a:ac:cc:
4d:f9:43:5b:5f:2e:1e:b2:46:0a:ff:97:10:dc:43:
14:ba:7e:b5:4e:81:ab:4d:52:23:d8:11:77:84:ab:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:9A:4D:9F:EB:3E:18:2B:FA:84:9A:DE:C1:3D:40:FB:14:24:FB
X509v3 Authority Key Identifier:
keyid:11:0C:B6:5D:FB:F4:A6:AD:DA:A4:C5:E0:83:9A:89:93:A3:90:DA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:46:c8:8e:d6:1a:c3:eb:f4:25:77:ed:b5:94:0c:70:66:d8:
2f:45:d8:c4:c2:be:c9:2e:4b:49:c2:1f:49:99:c9:3b:ed:47:
54:00:b4:50:db:07:ac:f2:ff:51:e1:23:75:36:30:2e:48:97:
8e:fa:0e:ef:d6:0f:f0:18:77:93:64:0a:38:09:d2:92:c6:9d:
cb:64:51:9c:2c:da:d5:9a:f7:a0:ad:fa:cd:96:ec:1b:8b:12:
35:75:79:43:84:4b:d1:14:4b:36:37:59:43:7f:84:4f:d7:36:
9b:ce:d5:85:6d:34:1a:3b:73:35:dd:b1:00:a0:71:16:ff:7b:
63:45:04:a0:fe:69:63:ef:6b:cb:03:02:ac:d5:7c:da:48:98:
c1:10:75:1b:d6:fd:e4:95:5a:d9:64:61:a9:07:8c:9f:03:e6:
5e:db:f9:d3:2c:b8:c4:3f:54:90:4b:eb:17:ee:1e:44:c3:f2:
af:7a:e1:b7:7f:29:7a:0a:52:f0:8b:b6:9c:cf:8e:dd:f0:fb:
29:3b:0a:60:ce:fe:e2:1b:52:c2:ce:a5:8c:8f:8a:76:9d:0e:
ae:bf:0d:5d:83:a4:ae:14:72:14:26:f0:a2:b9:66:62:6d:6b:
85:c6:36:bd:7a:57:bd:ae:33:0c:52:0d:63:cb:2b:99:65:f0:
7a:cb:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:48 2026 by rpki-client