Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: hs/zaGgBz9xLituutPXUKRkur7z6C+bTW4S1SKlb6AU=
Subject key identifier: C7:BB:57:9E:F4:E2:7C:5C:41:9A:3C:55:C2:A0:4C:88:69:7E:BC:EE
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 01A0F67B98AB6A8609AF426A5BAE5DFF5C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 1979
Signing time: Thu 01 Oct 2026 08:01:29 +0000
Manifest this update: Thu 01 Oct 2026 08:01:29 +0000
Manifest next update: Fri 02 Oct 2026 08:01:29 +0000
Files and hashes: 1: M3zpnwwGXaGL3R2w7EMCJ4wbclk.roa (hash: j1ibhMzbM/bGDbvXooShA+Ex1FCjg8NtC5fCI4cFBAs=)
2: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: BsMBdqF00UKoEpXLkGl+v6e1pbHbzCpXak1TJ+R7pWs=)
3: nkcqRqm6JxltUVOst-8A4bjg-Yw.roa (hash: XaEc/XtzoivAIb5D2Y8YGEKADIQDianztAx7Av77swM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:98:ab:6a:86:09:af:42:6a:5b:ae:5d:ff:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Oct 1 08:01:29 2026 GMT
Not After : Oct 2 08:01:29 2026 GMT
Subject: CN=c7bb579ef4e27c5c419a3c55c2a04c88697ebcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:53:c4:9d:93:fa:83:02:40:ed:64:25:bb:
f6:f8:ef:67:d2:c8:94:ad:4a:a7:7e:07:93:8c:b2:
e2:d6:2a:e3:74:9c:a7:80:d3:36:f8:e8:2a:ac:a8:
70:48:36:86:7e:13:ca:9f:03:00:1d:14:85:91:34:
de:89:f3:95:19:35:9b:f6:67:72:3c:c3:0e:1e:2d:
99:33:3d:10:7b:c8:aa:de:ea:40:d0:64:3f:cd:3d:
01:e8:f2:a7:be:9b:6a:07:10:59:30:0a:ec:8f:f8:
d9:cf:6a:4a:d8:f2:33:dc:01:c2:44:ae:08:ef:40:
9a:ea:f8:e8:65:e6:0c:17:a3:fa:c5:3b:7f:57:71:
e6:d6:f4:46:92:51:ec:53:bd:5b:2b:f1:1f:19:e0:
7a:9e:c1:78:f6:6d:0a:78:f0:33:36:58:2e:75:cb:
bb:e8:7a:30:3e:63:24:1e:67:34:21:dc:7d:6d:f0:
c2:1e:3d:66:b5:01:31:64:7d:e4:6a:38:4e:48:2d:
59:8d:be:9b:4d:db:9e:3a:4f:15:6e:71:1e:bb:05:
e4:00:ef:ac:94:bb:0c:1d:de:ee:75:f1:05:d0:74:
6c:96:18:23:50:54:9e:e2:23:6d:12:af:dc:96:da:
0b:8e:d8:be:36:96:ad:e5:24:cc:50:64:7b:42:08:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:57:9E:F4:E2:7C:5C:41:9A:3C:55:C2:A0:4C:88:69:7E:BC:EE
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:d7:52:60:45:40:ee:c9:f4:7c:b7:06:26:ec:65:5d:48:
02:b7:a4:c6:4e:3c:06:7f:3b:50:e0:50:47:14:5f:4e:34:2e:
9c:2c:04:a4:ba:7c:d4:a9:60:30:d5:b5:ce:5e:3d:1e:c7:b5:
93:bd:4c:6d:29:2a:8d:cf:4d:08:e7:da:28:12:50:e1:2b:cf:
4a:d5:19:3c:a8:45:c6:47:e9:b8:a1:30:80:55:4a:d3:2f:3e:
33:06:cf:1b:5e:2b:07:4d:76:57:6b:41:1c:8f:19:fb:4b:7e:
15:83:f9:b0:b6:2f:ad:d2:1e:cc:a5:2d:03:65:a4:db:f3:e0:
ce:5e:c5:16:3f:c6:f9:59:38:59:f4:71:87:67:ad:17:a2:93:
6e:96:0d:0a:4c:f7:d0:8a:d5:2f:84:42:45:70:41:bd:7b:13:
3c:ee:1e:a8:98:17:f1:ba:93:98:76:08:b8:7a:85:b6:49:4f:
62:70:6b:6c:d5:b6:18:c0:8c:7c:ff:e0:31:a3:82:b2:6e:33:
b4:73:0c:0a:44:e4:67:e4:87:f0:b6:06:42:cf:4c:ce:80:b9:
92:79:1b:98:97:4e:cb:42:5d:e9:da:10:28:16:68:7e:e7:48:
a0:33:de:cd:58:f0:d2:d0:98:c3:62:83:c2:c8:e3:01:20:00:
f3:30:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:45:19 2026 by rpki-client