Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
File: e42xKSYaUs0SXzabHrir_w8Rsmg.mft (raw, json)
Hash identifier: otrJUIX7IGYy+fr7FmtH/FjJojUB7Ois2DBMs0MlymI=
Subject key identifier: FF:BB:99:51:E9:C4:03:A2:34:94:C7:FB:B6:A0:CE:87:88:9A:93:41
Authority key identifier: 7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
Certificate issuer: /CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Certificate serial: 01A16C7FBF18002C4E54C4B8A9FFD6AC569A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:01:13 +0000
Manifest this update: Sat 24 Oct 2026 06:01:13 +0000
Manifest next update: Sun 25 Oct 2026 06:01:13 +0000
Files and hashes: 1: e42xKSYaUs0SXzabHrir_w8Rsmg.crl (hash: 1EzDeYGbRYGtM8pkcHBAX2THBltn91BvwfJMqhexgc4=)
2: gkzk0gvDg9I3VzGU5NaHexAuLU0.roa (hash: h5/p9RICRTcamiWva/eyrrucloMZMW61s6wicb+IUZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:bf:18:00:2c:4e:54:c4:b8:a9:ff:d6:ac:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Validity
Not Before: Oct 24 06:01:13 2026 GMT
Not After : Oct 25 06:01:13 2026 GMT
Subject: CN=ffbb9951e9c403a23494c7fbb6a0ce87889a9341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:f0:1c:9e:2a:01:84:72:15:68:6e:4d:a4:
26:20:2e:35:eb:01:16:94:9e:92:ea:a2:37:b0:a0:
83:63:3e:d1:62:15:2d:0f:7c:09:58:62:18:3b:2b:
10:a5:4d:63:62:77:b4:d0:b6:ff:74:cd:c3:e9:63:
89:0d:5b:02:a8:90:af:41:a8:8a:d8:47:8e:6c:a9:
20:48:87:de:be:13:95:6a:fb:b0:12:0b:4c:ec:e0:
b0:dc:60:3e:0a:d2:ae:5b:a0:ee:94:41:ec:ec:f7:
a8:80:67:fe:c5:62:3f:df:b4:2f:95:af:52:60:95:
8a:c2:da:dc:04:e8:de:a8:49:81:de:0a:98:1c:cc:
aa:63:2c:36:e7:f9:f1:9c:75:88:23:7b:98:f9:e6:
c5:9c:74:c6:90:43:97:54:a5:31:7c:f6:64:74:e7:
8f:d2:36:78:75:dd:dd:97:f1:b7:ee:ea:bc:95:60:
0c:12:7d:9f:2a:d3:a4:32:e7:09:61:c0:ce:c2:49:
a6:25:86:47:f7:4a:c9:89:57:46:da:f7:35:af:63:
02:92:31:be:5e:a3:93:9b:55:f4:32:9e:04:83:21:
81:90:6d:08:30:e3:d3:16:f0:15:6f:28:e1:f9:43:
02:3b:89:91:34:e3:bc:ae:97:30:c6:b2:5c:1e:b2:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:99:51:E9:C4:03:A2:34:94:C7:FB:B6:A0:CE:87:88:9A:93:41
X509v3 Authority Key Identifier:
keyid:7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:66:26:8e:b3:bb:eb:2e:dc:97:56:04:0e:15:06:3d:28:
87:f3:4b:ad:33:f9:6b:58:3b:19:65:f0:a4:1b:99:89:62:03:
21:a3:51:c8:fb:0c:da:5a:e9:4a:b7:0b:00:9d:bd:12:2e:0f:
74:e9:19:30:37:51:33:73:e6:d4:8a:2f:b5:6b:84:9a:29:bd:
70:29:c6:5e:3a:f7:e7:ce:a7:75:6b:60:b9:5f:8e:d5:49:e9:
10:5a:57:c2:c2:76:07:66:a6:59:9a:1a:f8:96:0f:df:e9:e4:
11:bb:6c:2b:46:40:d5:9e:b9:21:47:db:b9:4a:00:ed:ed:15:
31:5c:a7:94:7c:e9:51:af:17:e1:e5:3f:31:01:8d:8d:d5:cb:
9e:41:cd:c5:f6:e5:b0:24:21:3a:aa:10:f3:d0:ff:5c:59:fd:
30:a5:c9:31:47:6a:ef:2f:9d:dd:e6:4e:2b:b0:1e:4f:ef:75:
39:d4:ed:76:2e:14:c9:52:5d:e4:cb:00:88:ae:3a:4c:b6:6d:
c6:31:59:c3:ab:c6:58:c4:06:8a:ad:36:d6:04:49:cf:04:a5:
14:78:5e:f1:1b:38:68:0a:bb:03:81:8d:7c:bc:da:7b:3b:ca:
8b:6b:3d:5d:0d:63:dd:ec:00:e7:80:ed:5c:61:8f:19:13:40:
15:4f:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:52:05 2026 by rpki-client