Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: 3uPExiyPRgB5n0tUAZ01yfniKCkMxtPowVBDTcmDIV0=
Subject key identifier: 8C:B7:68:83:17:6E:37:CA:F4:8F:05:D0:2D:CE:1D:C1:45:F0:6B:C2
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 01A14EAC36FE1036C037B36BA3EA46C0EC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1A9B
Signing time: Sun 18 Oct 2026 11:01:11 +0000
Manifest this update: Sun 18 Oct 2026 11:01:11 +0000
Manifest next update: Mon 19 Oct 2026 11:01:11 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: qZ1ReiW3F07Pm7Wzor2Lm72hCqUNdko7D4MVDLauZ/0=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ac:36:fe:10:36:c0:37:b3:6b:a3:ea:46:c0:ec:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Oct 18 11:01:11 2026 GMT
Not After : Oct 19 11:01:11 2026 GMT
Subject: CN=8cb76883176e37caf48f05d02dce1dc145f06bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:8c:06:3a:cb:31:36:86:40:51:62:aa:7d:
db:b8:fc:0b:fc:d0:15:17:02:97:e1:67:a0:69:91:
93:c1:99:85:46:ac:e1:e5:8e:fc:c7:ee:c2:ab:69:
a6:bc:e6:de:00:5b:ec:97:e8:4f:fa:dc:e7:56:d2:
a8:23:08:eb:12:3d:42:fc:43:95:97:31:c2:fe:c4:
e5:e7:10:37:55:90:37:ef:2d:c1:ee:b3:aa:51:74:
77:a5:74:06:ba:68:b3:81:c1:fb:5b:90:81:fb:7f:
d9:34:f4:1b:6b:68:6e:76:ee:ab:07:13:f5:7c:b5:
e9:25:4f:ae:05:87:f9:be:ed:68:b9:30:31:ac:cd:
d7:47:16:50:4c:2f:99:0b:14:93:8c:7b:4b:b8:b0:
32:68:d9:82:81:a5:07:57:e2:04:8e:d7:f1:14:cd:
24:9d:e0:d2:c9:0a:92:ba:ce:0a:a4:be:8a:a6:c5:
65:5c:9b:74:62:f2:72:5f:ce:b9:25:37:a9:bc:69:
ce:36:b1:19:cd:2f:f1:c5:35:b5:ef:4b:c6:73:50:
cd:c6:2b:46:ec:a4:aa:4f:11:3a:ad:df:33:63:80:
9a:3e:58:f1:75:df:f1:76:02:e2:dd:9f:94:3e:89:
56:63:b1:77:8a:39:6e:71:71:db:43:76:4d:58:35:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:68:83:17:6E:37:CA:F4:8F:05:D0:2D:CE:1D:C1:45:F0:6B:C2
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:e5:a2:40:03:bf:81:df:09:2e:f6:1d:05:03:99:bb:5f:
11:c7:1c:57:75:f5:e5:3a:59:ea:8d:7d:bf:dc:f4:80:6d:81:
82:24:1e:ca:e8:2b:fd:3e:dc:16:ef:45:3d:71:6b:cd:0e:42:
47:34:54:35:1d:c8:38:e9:92:36:19:58:31:01:cf:93:1e:d4:
b8:55:fc:c7:50:6c:58:f1:93:17:f8:98:06:57:5f:dd:ed:5b:
76:18:8c:7d:54:b1:5c:ac:02:fa:78:92:12:16:6f:19:02:16:
45:44:64:8a:55:c2:4e:2e:47:67:2d:70:ae:eb:42:66:db:f1:
d8:72:66:95:16:1e:da:63:57:ff:1c:64:9b:e9:a3:bf:dd:38:
e6:ec:13:75:7e:cd:e4:92:98:a5:47:67:6d:fa:91:df:e7:ec:
c7:3b:ff:59:5f:5d:ef:88:c1:35:aa:77:1f:d3:80:0b:ce:00:
5c:6d:e3:a4:a0:cb:02:4b:bb:67:2a:c1:9f:98:c9:6a:0f:83:
f1:e6:d4:1e:5b:92:4d:16:9f:38:7f:dd:6b:e5:b4:c6:c7:91:
8a:ad:be:0e:31:cb:26:cd:e7:75:25:2a:ef:69:6b:e4:44:61:
cf:de:03:c0:22:57:38:48:6e:6c:ea:20:7a:0e:10:a7:4e:d4:
ce:4d:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:37 2026 by rpki-client