Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
File: eO2JedPoFMUVCZPpyAidJVQm3wU.mft (raw, json)
Hash identifier: MU8xnlQVw85xv4osk5sdW2aC6w3VSoPABsRaRN3VKcA=
Subject key identifier: 1D:8C:38:97:F0:40:60:7F:9E:5C:BC:D1:9B:69:91:12:18:C1:F1:98
Authority key identifier: 78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
Certificate issuer: /CN=78ed8979d3e814c5150993e9c8089d255426df05
Certificate serial: 01A157AFD58CF66E457B06A24D299A31E229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
Manifest number: 62
Signing time: Tue 20 Oct 2026 05:01:43 +0000
Manifest this update: Tue 20 Oct 2026 05:01:43 +0000
Manifest next update: Wed 21 Oct 2026 05:01:43 +0000
Files and hashes: 1: RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa (hash: UZQxNkbTTX73jZ3JuNG/u4WDtmsa3ERMpqjLQ9cHbqw=)
2: eO2JedPoFMUVCZPpyAidJVQm3wU.crl (hash: 82j1v9HDxQFq1GoKDm2L//zFx3Bd5nJtT7L8sQP/3qQ=)
3: wLTabeG6W9scPK-KgjhmQT_cofg.roa (hash: knKii4to9f3vWO2m5lSB+g8YQoY/mZRmcxoRXUr8ZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:d5:8c:f6:6e:45:7b:06:a2:4d:29:9a:31:e2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ed8979d3e814c5150993e9c8089d255426df05
Validity
Not Before: Oct 20 05:01:43 2026 GMT
Not After : Oct 21 05:01:43 2026 GMT
Subject: CN=1d8c3897f040607f9e5cbcd19b69911218c1f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:07:81:ee:68:97:6b:eb:5c:64:4e:b8:a8:
c5:ef:24:9a:15:a7:b1:5a:40:e0:43:f3:4b:d6:c0:
c1:81:20:d1:3c:8e:a8:cc:d0:e7:16:47:5d:5e:c6:
66:00:29:d8:13:68:7a:80:04:30:66:0b:71:14:dc:
25:6d:73:9e:4f:43:4a:be:98:0b:89:5a:32:bf:85:
7a:01:bf:22:56:6a:50:0f:93:05:c1:d4:34:e8:8f:
fd:88:37:d5:d9:09:1d:b3:6e:0e:2e:34:c8:6a:b5:
1b:ce:f1:15:1a:86:a0:bb:3e:6b:d2:03:a4:48:ac:
2d:57:b0:1f:a8:17:08:92:89:04:1b:61:e3:97:c3:
25:fa:be:6b:c7:f1:5e:55:0b:15:8c:cb:aa:84:f7:
fc:d5:38:02:c5:13:cf:5f:00:15:42:30:1f:6d:77:
b0:ac:b4:46:58:6d:8a:f5:a2:88:9f:23:14:90:19:
87:d0:7e:e8:8a:3e:a1:c2:a8:c0:df:87:9b:61:f3:
22:f9:aa:ca:df:41:7a:e1:74:87:a2:52:60:8b:5f:
e5:1a:f8:d6:27:1c:25:ea:14:d2:9d:92:67:b5:11:
3a:08:6a:ac:8f:83:70:cb:79:32:05:0e:e2:6a:8a:
d2:c1:0e:f8:4c:2d:5c:43:af:cc:0e:c5:20:e1:10:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:38:97:F0:40:60:7F:9E:5C:BC:D1:9B:69:91:12:18:C1:F1:98
X509v3 Authority Key Identifier:
keyid:78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:21:b7:ff:61:3e:1e:67:a0:e0:85:ad:3e:69:fe:44:f6:
43:64:3c:aa:0b:f7:83:62:e8:6d:57:7d:f5:25:ad:0d:ad:89:
d0:b6:27:f3:be:78:57:ce:43:3b:0e:5a:ab:58:76:9b:2b:76:
00:38:ce:58:cc:38:3c:2e:8f:7a:63:1d:c2:73:36:24:a8:14:
19:9f:8e:ac:60:d9:08:ec:33:f9:ea:2d:05:a1:d7:7f:2e:35:
0a:df:02:44:a3:e3:a8:e8:56:34:b4:f8:43:43:9d:46:79:74:
24:af:50:ce:fd:5d:1e:c2:08:44:72:13:40:ff:d1:e9:08:fd:
d7:40:fc:0c:28:8f:ec:08:44:78:f7:69:0a:72:11:4c:78:1e:
54:28:cc:50:f9:e1:c4:b3:a8:c8:6b:fb:ed:e4:6a:6c:94:ce:
39:70:ef:d0:08:b8:2e:3b:ad:9f:d1:4f:dc:8f:54:80:3f:cb:
de:98:b0:df:f8:e1:8e:59:bb:e2:04:7f:f4:8c:15:74:2f:15:
64:b1:b2:9b:6f:03:43:26:d6:e9:59:29:cf:19:36:c6:10:c2:
6a:a5:6b:b1:d2:8c:0b:81:b4:84:4e:67:7e:00:19:76:c4:d4:
b5:57:7a:60:38:37:c5:24:28:7a:a0:a3:78:37:43:df:ac:8d:
cc:3a:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:51:40 2026 by rpki-client