Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: Joy4qtaBDKNleafspoZrD+gQrA3r5xABqD7xR4VHrY4=
Subject key identifier: D3:84:D5:DE:43:65:C7:E4:E4:CD:5A:39:1C:EC:E1:EE:7B:F1:EC:66
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019FCCDDC3EDC0A7D1EB530DDAC28CFD3A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 13A7
Signing time: Tue 04 Aug 2026 13:01:53 +0000
Manifest this update: Tue 04 Aug 2026 13:01:53 +0000
Manifest next update: Wed 05 Aug 2026 13:01:53 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: EBbL7plRwWfJcph6rjZQaQnTC7a4GmkwwtqtVd3L/Tk=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:dd:c3:ed:c0:a7:d1:eb:53:0d:da:c2:8c:fd:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Aug 4 13:01:53 2026 GMT
Not After : Aug 5 13:01:53 2026 GMT
Subject: CN=d384d5de4365c7e4e4cd5a391cece1ee7bf1ec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:d3:14:91:28:21:2d:81:92:51:09:10:51:
ab:47:cc:86:57:ab:d5:37:14:6b:7b:91:e3:e9:f5:
30:37:3f:c5:15:47:7e:eb:35:d2:d5:a6:f4:81:12:
d6:7e:7a:8f:14:0c:c2:83:9c:74:76:e3:bb:2a:8a:
18:cb:66:e4:c6:3e:de:ca:43:01:5d:8e:aa:45:47:
07:1c:d4:38:02:fb:a9:64:68:0a:db:0b:bc:f1:84:
3e:50:8e:b6:b0:47:65:1e:95:14:b6:ba:30:00:1a:
7f:80:26:d9:69:70:13:19:ed:4c:b9:53:ae:95:61:
0e:f1:6c:34:49:34:bf:09:1b:3f:d5:1e:dd:5b:d7:
50:72:17:d0:f4:81:3b:be:88:24:fe:39:0d:c3:24:
0a:50:41:d5:c8:81:72:13:54:a0:bb:87:5b:df:13:
45:65:a8:d1:b3:7d:6b:5e:cb:84:e0:91:3f:0a:37:
63:10:0d:e8:4e:04:74:cb:37:88:16:f1:70:d9:ab:
13:71:83:c7:9a:30:7e:2a:a8:9b:43:89:be:77:27:
7c:94:11:61:c4:b1:15:0d:33:2b:dc:90:c5:04:76:
ec:ce:9e:e4:52:08:1c:ef:c3:42:70:db:93:4c:f2:
21:85:95:f5:14:d4:a4:61:41:d7:73:fa:e0:bb:17:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:D5:DE:43:65:C7:E4:E4:CD:5A:39:1C:EC:E1:EE:7B:F1:EC:66
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:0a:b9:a6:28:7b:dc:86:fb:dc:3f:f7:d1:4b:c4:c2:ab:
1e:c8:03:e7:de:68:52:bb:ef:28:bc:39:e4:cf:77:4b:52:1d:
f3:0a:62:8e:1b:30:51:5c:25:d1:69:d3:93:d4:d0:48:bd:a2:
94:9c:95:f8:7c:a4:86:9e:a0:0b:4f:d8:c5:12:6e:aa:7e:8a:
3d:d4:17:0e:4b:6c:23:0e:7b:ae:b6:12:af:cd:a3:67:23:82:
25:2f:9d:38:41:32:01:ca:1e:7e:5d:0a:40:12:18:51:b5:f0:
f7:f3:0c:30:14:03:03:07:68:0b:8b:ea:e7:b2:5c:b6:3f:36:
a8:1e:85:59:92:a3:64:8a:3b:8b:d8:d8:0a:1a:ce:31:30:aa:
a6:ba:9f:43:0a:91:35:58:73:77:13:2a:fc:c7:d5:62:65:da:
db:2c:10:70:3d:57:5a:25:ec:32:f7:a6:3e:fd:50:5f:fe:fb:
39:89:68:9c:9f:65:e1:90:42:22:83:70:f2:4f:81:34:08:66:
a3:01:86:51:da:d7:3b:94:ff:80:64:37:35:45:bb:31:60:81:
a2:41:98:b7:93:0f:75:ff:81:b6:12:24:93:c2:a5:5a:5d:e1:
87:41:02:62:d7:93:d2:5a:31:68:21:25:e8:81:c4:a7:27:fc:
ff:17:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:57:56 2026 by rpki-client