Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: yOMJDoSOP+CJBqWi4p1f4yRHTY1G//dkOWvWUl7Brbg=
Subject key identifier: 31:75:72:9A:24:7C:AF:2A:C3:2C:58:BF:7C:DF:E7:1C:97:B6:1E:92
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01A161C53A148782D921E161B5FB9BB804B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0ABC
Signing time: Thu 22 Oct 2026 04:01:17 +0000
Manifest this update: Thu 22 Oct 2026 04:01:17 +0000
Manifest next update: Fri 23 Oct 2026 04:01:17 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: xnqtnmz4UPh60MsRUGyhs9h8fBHh72Et3IH4MrpFjyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:c5:3a:14:87:82:d9:21:e1:61:b5:fb:9b:b8:04:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Oct 22 04:01:17 2026 GMT
Not After : Oct 23 04:01:17 2026 GMT
Subject: CN=3175729a247caf2ac32c58bf7cdfe71c97b61e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:fd:0a:00:69:26:ba:ac:c8:2a:c5:b4:f6:
c4:f1:34:5f:b2:7d:16:3d:d2:09:5e:26:df:b8:59:
38:14:a4:93:c5:b1:e7:59:4c:1d:1b:aa:47:cd:8a:
89:18:27:de:1f:3b:6e:ed:fc:81:69:b4:31:40:fc:
9c:97:a4:a7:5e:df:27:aa:af:cc:83:fb:53:69:98:
0c:b1:2f:c6:6e:7b:42:e5:df:83:ab:76:57:88:f3:
67:0c:f9:4d:f0:32:e4:11:b2:0c:1d:c1:38:3d:a9:
15:01:07:3e:87:e6:79:dd:d5:d9:3e:b6:29:03:fb:
08:51:84:be:7f:5c:f8:5e:ca:32:1d:b7:91:c1:81:
7c:31:99:9b:49:02:6c:f9:1f:57:aa:74:02:1a:0f:
b4:f4:95:6a:8c:b5:ec:db:84:54:f8:d9:79:39:66:
f9:4d:43:46:ff:a5:15:16:4e:73:b5:80:88:e5:85:
41:4b:58:81:82:73:b1:33:a0:06:73:49:5b:e2:e9:
b8:03:40:a7:62:87:32:3b:a7:72:ff:f2:49:03:be:
76:36:91:68:22:d4:92:72:37:c6:d3:79:52:19:e7:
d8:c6:9a:84:98:b8:d4:f9:82:63:76:b4:fb:0a:1a:
27:33:6b:50:bf:8f:06:a5:1e:c4:4c:1a:18:57:64:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:72:9A:24:7C:AF:2A:C3:2C:58:BF:7C:DF:E7:1C:97:B6:1E:92
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d8:a4:8c:6e:68:cb:8c:ad:ca:cb:a6:93:ae:e0:ba:cb:e0:
93:f9:f4:50:93:19:f5:d1:0f:71:c6:9e:49:94:60:64:9d:e1:
56:ee:f0:ae:85:4d:32:29:51:bc:d3:ae:a1:42:7b:dd:e2:e4:
5b:2d:ed:b2:63:08:f9:a0:99:0a:9e:9c:2b:6a:e1:59:2a:9d:
9a:dc:5b:f9:71:b4:33:59:fb:6b:16:23:b1:51:24:94:09:07:
40:2e:d0:88:fb:14:a3:9b:05:b5:91:38:c8:4b:a4:0a:eb:cd:
01:7b:dc:e7:bb:61:4f:a6:a3:db:43:ca:04:62:a5:ed:1a:ab:
c8:2b:55:cb:9b:ba:50:ce:07:0c:83:36:5e:a9:10:5d:94:0c:
e4:28:4e:ca:d6:b4:22:6b:f3:00:97:fb:33:3a:e7:44:ac:c1:
35:1e:26:7f:03:5f:ba:c4:d2:ee:08:16:61:8f:f6:23:9b:15:
62:51:0d:a0:d7:96:48:fa:17:47:ff:e8:ac:a0:11:35:d9:23:
20:44:40:56:19:f1:b7:3e:1c:7b:ab:ae:2a:a1:57:52:f8:88:
d7:de:9f:e1:68:84:4a:e7:74:27:42:32:45:9b:66:7a:c0:5e:
85:4c:06:4f:84:f0:78:fe:b9:81:a4:de:24:21:57:bc:d9:2f:
7b:97:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:37:12 2026 by rpki-client