
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File: eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier: RYlo6WWxXFK27QSELANGdMGCbwa92Vbgyghs5MAcTnA=
Subject key identifier: 91:13:FD:E0:2E:E9:D1:8E:88:4F:80:D0:D6:FA:98:74:15:43:CF:BD
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 01A1901E32FA38F3DB37AA480B153FEC5B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number: 025C
Signing time: Sat 31 Oct 2026 04:01:00 +0000
Manifest this update: Sat 31 Oct 2026 04:01:00 +0000
Manifest next update: Sun 01 Nov 2026 04:01:00 +0000
Files and hashes: 1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: ZCA2bE084A6pWz3RUdkU5BzkshahqJ77UdfVukTnNqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1e:32:fa:38:f3:db:37:aa:48:0b:15:3f:ec:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Oct 31 04:01:00 2026 GMT
Not After : Nov 1 04:01:00 2026 GMT
Subject: CN=9113fde02ee9d18e884f80d0d6fa98741543cfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:9b:82:82:a9:a2:4e:2f:b0:8d:ff:be:7b:
a0:14:aa:c3:66:52:d4:06:35:9a:6d:b1:bd:a3:63:
69:f2:0c:a3:c0:e0:c1:fb:1a:6b:60:74:3f:8a:e4:
db:2b:28:3b:f7:67:06:1a:72:f5:f7:8b:a0:c0:b2:
3e:91:a0:05:30:4c:e1:d6:8a:c9:e8:ca:6e:9e:13:
08:f2:ed:a6:c8:b3:b6:66:80:df:78:d6:ae:1d:af:
58:9e:37:76:71:49:7b:de:bd:00:89:56:9f:21:9d:
aa:10:31:12:24:b3:e3:7a:a4:d2:49:c9:59:b5:34:
fa:0a:25:42:2e:46:a6:4c:1c:3c:44:18:46:65:fd:
2d:80:33:81:c8:30:25:69:b4:c9:ca:e6:96:ed:23:
81:80:38:40:ef:d4:59:e3:71:2f:05:d1:97:37:00:
3c:b1:b9:e1:b4:53:fb:d8:42:28:a4:7f:cb:61:a6:
a9:fc:93:c4:27:c0:35:11:58:13:43:de:db:d0:23:
c5:b5:50:2f:f4:a5:c5:6e:f9:1e:b1:66:70:a2:43:
85:67:ce:39:c1:93:31:26:ab:5c:c9:bf:5d:19:a6:
f9:61:df:60:49:a2:4d:2c:b6:32:0a:71:d7:dc:1a:
16:ed:b0:7f:93:f7:9c:8a:d4:a0:9f:c0:a3:51:a7:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:FD:E0:2E:E9:D1:8E:88:4F:80:D0:D6:FA:98:74:15:43:CF:BD
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:93:de:04:44:bf:0a:a3:50:9e:cb:74:b3:25:37:53:39:
dd:c0:8f:c4:cd:cb:59:ac:83:78:72:71:3d:2c:7e:c2:d7:d3:
13:3a:79:8e:01:05:a6:11:6a:09:ad:51:09:41:55:49:b0:70:
9b:4f:ab:00:75:d0:ae:6b:23:e9:67:e1:77:22:89:3f:6c:80:
59:2c:0f:4e:b7:c5:d4:34:fa:0e:5a:ca:3a:ca:2f:0b:ee:b5:
2d:11:69:36:6f:45:7e:65:2e:fe:52:a5:36:03:e6:a2:34:9e:
51:fa:97:9b:79:23:25:fa:98:7d:0f:10:7c:71:51:d3:46:a4:
ad:96:1d:3b:75:0a:44:6c:28:e3:ac:d4:25:fc:a7:d4:11:c1:
ac:db:ac:5e:ed:72:23:ed:e6:37:fd:9a:d1:aa:50:4c:e4:bb:
df:be:2a:b7:3a:de:d3:7b:0f:40:a9:9d:67:46:1f:31:9a:43:
7a:22:a8:4e:29:19:af:d2:df:6a:1c:55:6c:60:d0:66:f5:83:
54:cf:96:fe:3f:e5:33:0d:97:74:b6:fc:14:99:17:18:a4:f6:
f5:b9:85:17:3f:c6:b3:06:44:c8:ed:8d:b6:e6:2e:99:08:98:
b6:58:49:81:89:4b:0a:43:23:d6:41:f5:87:f5:6d:01:0f:99:
58:41:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:40:42 2026 by rpki-client