Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: fqWkJnbhwT0jUamLuA5HML/etKLWRFnYg3WJaxWHv2A=
Subject key identifier: E4:21:DB:E8:F2:46:36:B6:BD:87:76:95:6A:70:26:64:44:F4:6A:EB
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 01A1829965255326AA3EFEB2B767C945F3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 13:00:53 +0000
Manifest this update: Wed 28 Oct 2026 13:00:53 +0000
Manifest next update: Thu 29 Oct 2026 13:00:53 +0000
Files and hashes: 1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: shCq793f+SRAvLgbRN85sC5GZvHUrotdonbpZMYbiAo=)
3: g2b0tfI5DAyRO9sqLcgf2kKw8tI.roa (hash: b/mHAHFQZqIoz/hcls8xHY15nIJE9JGUhZwiQd60kVE=)
4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:65:25:53:26:aa:3e:fe:b2:b7:67:c9:45:f3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Oct 28 13:00:53 2026 GMT
Not After : Oct 29 13:00:53 2026 GMT
Subject: CN=e421dbe8f24636b6bd8776956a70266444f46aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:87:c9:e6:e3:80:47:c8:0a:a9:89:98:16:
e1:29:11:e2:1e:4f:89:42:42:a4:11:5b:a7:2f:5b:
1f:be:89:da:00:6d:aa:e5:88:d3:57:40:ff:2e:e0:
83:74:c9:36:67:8a:4b:5b:07:99:4a:f0:5e:30:d6:
71:4f:53:2b:d0:17:7d:b4:91:87:a6:ba:5e:42:67:
b5:1d:56:04:5e:65:b5:a8:c0:32:00:41:5a:51:5e:
da:cb:3c:72:d6:af:bf:7a:6d:88:8c:64:07:28:04:
71:b4:01:40:17:e7:08:82:23:ec:5a:3c:6a:9e:fa:
9d:c0:05:ba:28:56:b3:ed:67:68:2b:53:27:cb:f3:
df:89:90:9d:4a:d1:11:9c:f7:36:31:92:0a:ad:16:
83:0a:0c:82:8a:f6:3b:6f:16:e4:92:02:18:f4:18:
f6:d0:c1:c3:b8:ad:c0:89:73:b5:7f:e4:12:bb:80:
c6:3b:fa:62:14:0e:8e:27:58:e8:e6:99:71:cb:df:
6e:92:93:5d:bd:0a:d9:d2:cf:88:f2:f2:97:7d:12:
ad:24:2d:95:8b:37:7e:7b:75:dc:3b:ad:e9:b2:1d:
c3:7c:91:89:7b:8a:ae:fb:3b:24:8f:fb:55:17:8f:
e1:6f:a9:95:75:33:7b:77:95:b0:e3:5e:37:c7:d7:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:DB:E8:F2:46:36:B6:BD:87:76:95:6A:70:26:64:44:F4:6A:EB
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1e:8c:67:34:f1:21:6c:c8:b7:5d:6b:91:2a:ce:f1:1e:57:
31:c7:3b:1c:60:c4:93:4a:da:d1:77:6f:cd:29:59:16:79:77:
f1:34:a6:0b:85:22:f1:d2:93:4e:09:e4:e4:7a:22:be:84:fe:
f7:1e:d6:bc:7b:45:d2:b7:e7:23:cb:85:cd:65:a5:c3:05:f8:
f5:4f:2f:79:90:4c:1c:87:af:f6:9c:d0:84:bf:9c:38:62:d4:
1d:63:c6:de:ba:51:c6:ab:fa:57:15:3e:ac:92:1a:bc:d3:eb:
fd:7f:30:1e:f2:e7:46:25:87:de:44:55:55:6c:c7:85:39:75:
52:50:a9:8c:00:13:c4:81:29:ca:e4:bd:4f:10:47:67:f8:59:
49:c3:8c:61:bb:60:c8:57:af:55:4b:05:7a:ba:ac:af:cf:ef:
a4:1a:2c:bf:74:5b:c1:ce:97:3d:34:bf:9c:db:d6:ea:54:1e:
da:9e:bf:ed:cf:42:e8:1b:0e:bb:5e:4b:80:07:b3:1d:de:dd:
09:0f:2c:e0:d0:cb:da:59:45:4a:ed:aa:65:63:9a:a1:d4:ad:
31:f1:c8:a1:76:4f:43:68:92:6a:69:7e:f1:cc:71:fa:7a:30:
f7:77:61:c1:01:28:cc:3f:be:bf:c6:ef:fe:25:bf:4f:c8:03:
b2:f1:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:59 2026 by rpki-client