Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
File: eXanO3wTqWbZU71ok8RChfwk7-8.mft (raw, json)
Hash identifier: tUbEMRMCG6A/ZEPuUov6ZSPlF2rO+bdL32f9UDvbhh8=
Subject key identifier: 16:04:54:8E:E0:95:B7:47:40:F0:74:4C:B8:3B:61:53:8E:E6:63:F6
Authority key identifier: 79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
Certificate issuer: /CN=7976a73b7c13a966d953bd6893c44285fc24efef
Certificate serial: 01A12CC596F2DDB0DE70D495FC0A4F0025AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
Manifest number: 1B
Signing time: Sun 11 Oct 2026 21:01:49 +0000
Manifest this update: Sun 11 Oct 2026 21:01:49 +0000
Manifest next update: Mon 12 Oct 2026 21:01:49 +0000
Files and hashes: 1: 69dyOwruRqj66SetLH027OeIV3c.roa (hash: HCxhftpBnIA2rFHXS8WEzRsnIrsGSyzbbtWPmOSrBwU=)
2: eXanO3wTqWbZU71ok8RChfwk7-8.crl (hash: sKcu9qLncw2bdFZi4gCJ4lKNN21hgQB6/uh0PsH7K0I=)
3: uwz0si1SwVU9VQBKdbu7R8q5vms.roa (hash: qbkqCRHMCZSiQRFrAx9zDyfbeZmrRRF+Lxcz2PpqE4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:96:f2:dd:b0:de:70:d4:95:fc:0a:4f:00:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976a73b7c13a966d953bd6893c44285fc24efef
Validity
Not Before: Oct 11 21:01:49 2026 GMT
Not After : Oct 12 21:01:49 2026 GMT
Subject: CN=1604548ee095b74740f0744cb83b61538ee663f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:77:12:e0:58:f2:27:90:36:50:67:a4:74:
74:ae:78:91:4b:e5:87:c6:85:75:9d:8a:6b:e1:e8:
b9:65:9f:a0:f4:dc:6b:3c:ad:4f:e9:ff:7d:b6:66:
86:fc:53:49:d0:a2:21:66:7e:ab:14:83:c3:b5:3e:
5d:26:a4:40:d7:25:73:ab:15:c5:7a:e5:df:bd:4c:
2d:4d:48:e8:85:23:8b:be:19:83:7d:92:6f:ad:8f:
cd:36:42:8d:a1:75:b3:ba:8c:0b:c9:31:c4:8f:2c:
9a:be:0f:69:58:87:26:e5:76:b5:82:e0:aa:49:22:
c7:47:e4:1b:bb:73:05:40:31:d2:ba:4d:00:42:02:
4a:de:c5:a7:ff:1a:bb:d2:df:a3:e6:1f:b2:74:aa:
2c:55:29:c2:c1:4f:19:f0:fc:0d:bd:1b:28:20:f6:
63:3d:15:71:ef:8e:b5:94:b9:b3:3e:4a:f7:4b:1c:
a8:2c:49:de:98:37:5d:f0:b4:c8:69:13:3c:1d:28:
10:ea:fc:d7:d7:e1:56:37:95:2d:bf:1a:c4:3f:22:
a6:ca:89:80:da:bd:34:87:ac:6b:e3:c7:54:49:0a:
43:43:67:26:92:5f:8b:bb:45:12:5e:3c:1f:6f:fa:
9b:f5:7f:a6:e5:f6:2c:d8:a0:79:50:7d:82:c8:f7:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:54:8E:E0:95:B7:47:40:F0:74:4C:B8:3B:61:53:8E:E6:63:F6
X509v3 Authority Key Identifier:
keyid:79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:54:24:b0:f1:48:de:95:c5:8e:fc:58:99:1c:f1:1e:cc:
54:1f:71:0e:5f:cb:65:c0:e5:bb:33:9b:5b:63:3b:be:ea:01:
bd:7f:d5:35:b3:c3:d5:cb:b1:e8:b1:1b:29:c2:a9:d6:42:45:
4b:6a:9c:c6:4f:03:57:3d:de:32:dc:41:e1:5c:03:e3:f5:8f:
9f:25:70:66:37:f2:f2:25:aa:0f:03:4d:c8:9a:3b:36:1b:11:
99:5c:13:9f:74:3a:cd:6c:9d:f8:e9:80:9c:3a:6f:d8:f0:76:
b5:67:05:d8:27:ef:33:3b:b5:1d:20:ea:44:67:a4:16:77:6b:
d6:31:32:c5:e4:e5:06:1b:2c:b3:f1:4c:d2:9c:7c:25:75:18:
25:ba:4d:cc:e3:d3:fb:0f:14:4b:43:0e:98:d6:54:90:57:ba:
99:c2:b0:e3:70:94:16:cc:bd:ec:80:f3:1d:d0:b6:28:f9:ac:
7e:c0:be:92:b3:00:e4:f4:18:7b:e0:84:91:07:39:82:bd:12:
d0:35:ed:ff:e3:d8:b5:fb:88:50:50:d4:67:7f:77:91:50:68:
8b:d2:8f:31:17:4e:0f:91:d6:87:4f:fa:15:62:44:fb:a0:f0:
31:35:f6:ba:e2:6b:67:b5:5d:01:db:ee:b6:9a:bf:f4:11:f9:
b8:cb:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:39:05 2026 by rpki-client