Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: SxliYbokz95j+aQL6GEwg+B3iXmmGsEIetB6X+i9w+c=
Subject key identifier: 61:55:41:D7:92:57:E7:53:F5:4B:9F:71:27:37:AD:86:18:C5:DA:7C
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 01A1735CE891AF70300C4CEB71CC5A803232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 109C
Signing time: Sun 25 Oct 2026 14:00:31 +0000
Manifest this update: Sun 25 Oct 2026 14:00:31 +0000
Manifest next update: Mon 26 Oct 2026 14:00:31 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: aJmKXdHeTvzrN0k8eWtE1ZoR6OSwA6bc2vOdRkCmE9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5c:e8:91:af:70:30:0c:4c:eb:71:cc:5a:80:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Oct 25 14:00:31 2026 GMT
Not After : Oct 26 14:00:31 2026 GMT
Subject: CN=615541d79257e753f54b9f712737ad8618c5da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:45:79:2e:7f:e1:43:fa:77:fc:37:42:f5:
65:70:6a:82:f5:d6:8d:cc:01:e1:eb:0a:f6:bd:89:
2d:3a:54:52:ca:0b:87:91:53:e0:73:87:dd:03:56:
5c:5c:c0:84:fb:26:8c:c7:b4:9e:00:b7:cb:9d:cd:
f5:e6:59:cc:19:b6:61:61:34:ab:59:b3:91:f9:b2:
c9:51:08:48:52:fd:3c:e5:fa:90:a4:ce:e3:bd:72:
db:37:d3:d7:b7:1c:7a:32:2b:c7:56:31:58:87:48:
44:e6:f6:aa:9f:ed:2f:3e:c1:80:a9:24:fd:57:73:
95:44:eb:b0:75:f5:b0:ac:3a:7b:68:3a:66:ac:69:
84:be:a0:c2:ea:13:c7:06:84:e3:79:b9:22:19:c1:
e2:c1:df:a7:99:e2:91:4e:24:08:37:e1:b4:c6:63:
0c:a0:d4:cc:41:0f:a3:d8:30:13:de:31:90:70:32:
99:12:e9:90:55:79:d6:8e:97:6e:c8:62:5a:df:48:
34:82:ff:c2:80:84:8f:2b:ed:b3:90:20:e0:bc:91:
7e:55:f6:b2:98:2c:99:25:31:8a:c4:09:ec:7a:cb:
9c:8c:3d:c7:3c:01:97:8b:fd:26:5a:21:ce:82:0c:
23:65:73:83:9f:72:15:a2:7e:7a:3e:ec:94:dc:46:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:41:D7:92:57:E7:53:F5:4B:9F:71:27:37:AD:86:18:C5:DA:7C
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:c8:d6:98:ce:82:1f:dc:62:b2:ee:5b:49:6f:64:e3:1b:
e6:c5:87:ea:7f:91:e0:9e:52:2a:f3:f9:15:6e:15:dc:30:44:
6c:50:87:6b:b7:1b:f1:c9:e9:fc:08:a2:63:44:1f:9a:74:39:
82:48:96:0e:1e:6c:28:3d:da:31:a5:b0:90:d3:3b:a5:26:e8:
44:19:12:02:52:d0:0c:e5:16:d4:a1:f2:2a:a0:93:94:7f:15:
2a:28:39:08:76:f1:81:cd:0b:79:c8:8f:3f:90:73:a3:a0:18:
ae:bb:a7:6c:7f:a2:17:58:b7:07:3d:1f:60:43:f4:18:f1:b1:
f9:2a:47:92:6a:63:ff:2f:d2:fd:d2:e6:0a:1b:28:77:d7:d1:
a5:93:fa:2a:cf:22:e7:5c:25:81:33:83:a7:3a:40:e4:1a:0b:
74:9d:03:2b:16:c3:40:c2:69:ef:ce:84:11:7f:6d:11:06:79:
d5:43:db:b1:6d:f5:3e:5f:af:fb:3d:12:d0:3d:d8:e2:04:80:
2b:e3:b5:b4:89:bd:c5:6c:ab:10:ee:30:bb:f0:51:2a:c6:70:
e7:00:42:02:29:60:00:3b:1f:eb:9c:32:0b:ec:c4:9b:a5:91:
dc:db:88:b2:f0:ea:a7:2f:7d:4d:ae:e6:47:38:a2:8f:fd:c7:
e0:c1:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:59:10 2026 by rpki-client