Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: ZSu9w5/nSRzbivHLPwYXZF0ggAL17mAl9sGJdnw7k5E=
Subject key identifier: BB:EB:A6:09:58:67:3E:FA:33:AA:44:AD:5E:BD:61:77:E3:58:7A:EA
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 01A089B08517C591DE597919F4209467D991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 08B7
Signing time: Thu 10 Sep 2026 05:00:41 +0000
Manifest this update: Thu 10 Sep 2026 05:00:41 +0000
Manifest next update: Fri 11 Sep 2026 05:00:41 +0000
Files and hashes: 1: FlcJyZz4eln8fJdce2z7NQ0wMnc.roa (hash: o606d+6FRBkMadGSOs+1vJgoFljdYGR0aPQGsULNpfk=)
2: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (hash: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E=)
3: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: Hj6zoVT5SDJQRTAv+9nr8UTsGnxMm9D0VMFSMLmlhZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:85:17:c5:91:de:59:79:19:f4:20:94:67:d9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Sep 10 05:00:41 2026 GMT
Not After : Sep 11 05:00:41 2026 GMT
Subject: CN=bbeba60958673efa33aa44ad5ebd6177e3587aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:28:35:e7:dd:30:27:7a:90:60:4d:8c:66:
13:bb:0f:dd:23:ec:10:7d:00:dd:f2:57:5c:50:2d:
72:6a:b3:47:3a:06:cf:72:49:0b:14:22:21:9d:99:
ec:c7:4d:5d:2e:cf:28:30:cb:31:d8:ed:c8:e1:d9:
9b:90:de:e9:e0:e0:87:de:69:40:82:6d:d8:d9:c1:
f8:49:4e:ae:39:35:dc:b4:e8:a8:f1:b5:d2:4c:ab:
73:ba:ce:fa:78:02:38:ea:9c:df:0c:04:3e:98:c8:
ea:be:58:77:43:81:06:6a:cc:61:97:89:5d:77:91:
61:7b:b2:e3:a9:b0:a2:05:18:30:b1:69:78:4d:0e:
5f:a2:5b:58:02:10:d4:d5:9d:7b:36:00:91:13:04:
df:38:fc:02:08:43:59:64:44:a0:81:67:98:60:b4:
5e:ff:a8:14:64:1f:f1:11:d0:06:1f:d8:7a:85:65:
52:b5:ac:0b:89:83:db:1b:24:cd:0d:2a:79:cb:e1:
0d:ab:93:e2:54:8f:01:73:b7:37:6c:a1:f1:f4:6b:
ed:db:2e:cd:fd:f1:08:5e:d1:e1:49:f3:b7:50:20:
13:51:0c:bd:40:60:04:cb:3c:ea:b8:cb:62:78:f8:
96:40:a2:80:e0:f5:64:73:e1:d8:cf:07:db:ff:25:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:A6:09:58:67:3E:FA:33:AA:44:AD:5E:BD:61:77:E3:58:7A:EA
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:c6:ad:0e:f4:db:5e:1a:00:fd:30:0c:89:89:61:47:75:
e8:3a:40:11:66:74:96:57:54:84:91:68:38:f1:0d:93:dd:f3:
85:6d:3a:a2:8e:34:f1:1a:88:93:92:b8:1e:58:13:db:08:2d:
c6:76:1e:fa:65:0a:47:6e:11:c3:e6:05:c1:1e:be:38:60:d8:
ed:09:28:28:74:53:95:36:68:e7:d7:66:77:ab:d0:60:5d:52:
95:c5:07:3a:f2:33:f3:68:ef:dd:db:ec:46:ea:46:f4:a8:ef:
a4:6a:92:da:58:70:73:45:9a:ec:f3:72:23:ea:f2:22:53:63:
5e:26:5a:d0:36:50:51:ac:17:15:e7:7e:bf:ad:33:b1:f7:8e:
74:5e:11:4d:74:01:ff:e4:b2:93:ac:b3:93:8f:cb:98:54:26:
a6:9a:62:13:32:ee:d6:cf:02:d6:7e:82:97:6f:dd:56:f4:cb:
f2:b4:8f:a4:9c:77:f1:01:17:66:1f:b2:9e:97:c8:0f:99:8d:
4a:ad:7f:dc:61:83:a2:87:ba:cd:9a:7a:f2:a9:a2:2d:24:1f:
e5:68:69:3c:77:58:c8:ca:fd:27:60:be:b9:94:a9:43:a6:3e:
20:7f:23:31:fc:30:25:cd:96:a8:c3:ce:87:6d:3d:ca:95:cf:
38:ed:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:25 2026 by rpki-client