Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: GXP+q5ipNDH1l6fwJsPLHXPkFvzRVLvbzddLNvCejJc=
Subject key identifier: 4A:94:5C:BE:E4:10:8E:1B:97:44:B9:B0:E9:E9:36:EA:3E:8F:63:7C
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 01A1174F23CD805247295765E492AD3C810F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0FC4
Signing time: Wed 07 Oct 2026 17:00:24 +0000
Manifest this update: Wed 07 Oct 2026 17:00:24 +0000
Manifest next update: Thu 08 Oct 2026 17:00:24 +0000
Files and hashes: 1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: hEIaq2paYRf5b1oK1ZgbTlr3UihyN9VORdwwBy7CK3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:23:cd:80:52:47:29:57:65:e4:92:ad:3c:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Oct 7 17:00:24 2026 GMT
Not After : Oct 8 17:00:24 2026 GMT
Subject: CN=4a945cbee4108e1b9744b9b0e9e936ea3e8f637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:fd:92:d8:d3:3b:61:5c:2f:a9:90:b5:da:
01:59:e5:77:87:24:3c:9d:c1:8b:6d:44:8e:12:c7:
b5:7b:02:fc:f1:6c:0f:80:6c:67:33:e6:4c:39:72:
ae:ed:d4:e7:dd:19:80:34:00:2b:4e:53:f2:30:bc:
32:a7:6e:a6:25:8d:44:85:81:4a:6d:ce:1a:0a:f6:
9d:ab:87:0c:89:95:c5:95:cb:e7:ed:6b:bf:1d:81:
9d:94:f6:ef:f5:fd:aa:25:7b:e3:e8:7c:22:04:d2:
b2:99:21:d1:13:10:a8:ee:1f:7c:75:f7:a4:24:a6:
69:5f:bc:f8:a2:29:98:1c:c7:93:3a:cd:2a:22:9e:
d1:17:13:a8:98:11:8a:0e:ad:c7:7c:d5:ff:7a:16:
45:d1:f9:f8:79:55:ba:61:00:f9:69:11:50:51:ef:
95:63:15:aa:8c:15:8b:8f:a7:db:dc:a6:05:17:40:
49:19:bd:ad:05:17:4c:19:d9:09:95:54:a3:0f:cb:
1d:85:ae:ce:c1:fa:ac:f0:ed:b2:b6:c6:42:3f:63:
03:ea:13:2a:c6:c3:53:19:d2:31:8e:0c:21:4b:f7:
e8:98:a5:78:fe:af:f6:45:92:99:d0:64:85:58:68:
49:da:0f:2a:c7:a8:98:25:5e:b3:70:b3:2b:34:cb:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:5C:BE:E4:10:8E:1B:97:44:B9:B0:E9:E9:36:EA:3E:8F:63:7C
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:68:74:ef:7b:e1:ad:50:2c:dc:14:34:42:9a:53:4b:b7:
6b:ca:8e:46:81:df:98:66:be:8c:0c:4f:04:0f:62:48:0a:a9:
cb:1e:3a:50:2b:1f:7f:21:28:78:0e:b2:d9:e7:2f:da:00:20:
a2:ea:5a:3d:89:8f:10:e8:b6:7e:96:7a:c8:ae:bc:04:9f:d7:
39:82:b3:2e:b6:d5:c9:c1:c9:d7:05:28:ba:55:a2:31:44:ab:
cf:0a:5d:d1:83:70:4d:20:1f:ed:d3:3b:b7:6b:01:7a:80:ba:
41:6e:0d:0d:2f:35:04:c8:9f:7e:8e:c5:1b:72:40:32:60:7f:
84:c4:f5:1f:19:3d:a2:8a:fc:12:65:18:58:b1:a2:93:24:b4:
22:28:8c:34:b1:0b:f8:2a:35:29:65:a6:14:54:15:47:40:e6:
b1:97:a9:cc:c3:85:c9:06:a1:a6:72:ce:63:ea:86:27:ac:e1:
65:18:30:a3:c9:80:83:75:f4:44:1a:27:ad:c6:02:21:59:5d:
ad:55:62:e9:01:f1:05:32:65:e1:dc:d2:50:45:04:20:f0:69:
47:e2:7e:c3:28:ad:bd:16:9f:ba:6f:5a:a6:b3:2f:17:b0:06:
b7:38:a0:aa:03:86:2a:66:2d:4d:35:82:2e:13:c4:00:88:e5:
8c:c7:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:54:36 2026 by rpki-client