Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: Y8MH253o8+2uVa0ie8f5OiQAdiBZoUS+jIqQZoHycak=
Subject key identifier: D6:A9:D7:2A:CC:68:CC:1C:31:93:FE:62:4E:50:DD:7D:C9:0A:9F:96
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01A120C1051995FC77C446FCBD65553199A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1AAD
Signing time: Fri 09 Oct 2026 13:01:22 +0000
Manifest this update: Fri 09 Oct 2026 13:01:22 +0000
Manifest next update: Sat 10 Oct 2026 13:01:22 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: DICQ8ri7GNBAYy2Dp7Ky7ewYjcpog4u8v8y2n1qnAn8=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:05:19:95:fc:77:c4:46:fc:bd:65:55:31:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Oct 9 13:01:22 2026 GMT
Not After : Oct 10 13:01:22 2026 GMT
Subject: CN=d6a9d72acc68cc1c3193fe624e50dd7dc90a9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:a0:0e:eb:31:2a:bc:5f:23:5e:06:3f:44:
af:3d:9d:6e:e2:75:06:c9:7d:e3:96:f7:10:45:ef:
e4:41:33:28:61:a5:93:2c:ae:ae:2b:38:8b:68:fd:
f6:a5:3b:cb:d8:ad:e6:34:b1:78:53:15:5a:3d:50:
68:3f:1d:67:61:d0:32:e1:60:06:fa:02:e0:d1:84:
97:f8:1e:5b:7e:19:ea:7a:41:a5:39:2c:1f:c1:6a:
7f:cf:81:91:f0:aa:98:d7:84:9c:90:ae:1c:f1:b9:
61:a7:c5:cb:87:ff:a5:84:07:91:a4:66:31:eb:10:
74:cb:d4:a6:fe:7a:75:56:52:5c:1a:fe:08:21:50:
17:f7:36:1f:1c:bb:0e:e5:d7:90:b3:e5:1c:09:3a:
86:5a:34:6e:e1:4e:62:ce:37:2d:8f:ee:2d:c1:90:
8f:73:cb:7c:da:f7:98:1f:87:3a:66:1a:05:57:64:
e0:8c:f0:e8:00:76:a5:31:0d:23:8b:a4:db:6f:7d:
d0:d1:87:3a:09:07:ad:21:68:27:87:e9:db:b6:10:
5d:e6:d1:57:f8:b8:47:cb:8f:1c:8a:c5:ea:5f:12:
a8:3e:48:16:cf:dd:05:a9:d3:79:41:60:00:36:e2:
90:1f:d5:8e:41:58:96:c6:03:91:f4:f9:b6:e8:a8:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:D7:2A:CC:68:CC:1C:31:93:FE:62:4E:50:DD:7D:C9:0A:9F:96
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:16:4e:c1:44:11:95:8f:54:7f:cc:de:67:a3:98:26:73:
59:29:61:42:bf:e8:9e:c2:c8:7a:26:b5:a3:e8:10:22:aa:05:
32:72:37:2b:10:e0:d9:38:b8:5b:35:7b:b0:13:35:42:54:82:
34:7a:90:bf:bc:a5:9b:a4:a2:76:ac:09:67:e8:f9:bf:ea:9c:
03:92:92:4c:da:85:eb:29:66:61:d3:ed:eb:a1:ac:62:7b:ee:
59:04:0a:72:fb:8d:6f:cf:96:58:58:10:37:7c:06:8f:41:ba:
21:ff:85:c0:3b:9a:2a:b7:00:fa:75:1b:b6:ab:33:81:06:a0:
df:cb:cb:cb:d6:70:7a:dc:dd:93:87:3a:bc:26:8b:ba:09:8e:
98:b5:89:69:c6:47:da:cf:ec:53:21:58:88:0c:ba:84:dd:ec:
45:e9:f4:1e:04:87:e5:d2:6c:f8:7a:ac:a7:27:17:43:53:b0:
70:42:db:ea:8c:8a:9c:99:d7:7c:3b:94:07:39:d5:7d:83:09:
de:00:97:ad:e1:d4:4c:e5:b6:d7:ec:fa:3c:b9:62:64:cd:83:
b2:5a:4b:7b:2d:62:4a:83:67:29:35:0f:3b:39:9d:d0:d0:d5:
10:a2:b8:5d:d3:25:6c:87:cd:29:a8:07:69:cc:0f:89:45:3e:
7c:bb:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:44:16 2026 by rpki-client