Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: wzGV20rJZK2NVJWWRZTrjQndpG3rh5TfKdEckN9uz7Q=
Subject key identifier: 7F:E7:E4:DC:F4:6D:83:CE:2E:7A:D7:4D:1C:65:CC:1E:F7:90:4A:76
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 01A1803DEA028F6D6BC83764226849DDF783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 02:01:43 +0000
Manifest this update: Wed 28 Oct 2026 02:01:43 +0000
Manifest next update: Thu 29 Oct 2026 02:01:43 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: GUxCWnnfIXpEc8OiApAByrRBpSaXQAlb+JkjibKjbN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:ea:02:8f:6d:6b:c8:37:64:22:68:49:dd:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Oct 28 02:01:43 2026 GMT
Not After : Oct 29 02:01:43 2026 GMT
Subject: CN=7fe7e4dcf46d83ce2e7ad74d1c65cc1ef7904a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:68:7d:b4:f3:7b:14:bb:b1:dd:f5:44:f7:
f1:5f:5c:cf:2e:b3:8a:cf:dc:4c:16:f0:16:79:2a:
4f:0a:86:db:d7:a3:98:17:1c:b3:8f:71:0b:46:b1:
56:f6:7b:d2:d3:70:8a:db:22:64:17:c9:a9:8f:8f:
b1:31:1e:67:f2:08:04:8a:d1:4d:3f:67:69:6b:a0:
dd:93:35:88:23:e9:73:ba:88:7e:ba:8e:67:0a:8b:
2f:a1:a7:f1:b4:c2:ef:43:66:84:52:e5:36:86:83:
7c:a8:24:e9:6e:d1:fe:1b:94:67:cc:59:df:4c:69:
5e:85:74:e0:b7:82:54:69:e1:52:86:6d:5d:35:cc:
84:da:5e:86:48:a9:83:48:fd:21:66:5e:e8:80:0a:
cf:84:6c:4c:2d:e1:55:72:bd:47:85:ce:af:1c:79:
87:2b:69:d9:2c:fc:92:75:63:ee:f6:09:0a:52:27:
df:ca:62:22:de:c8:6e:aa:a7:b8:a2:67:83:c1:79:
40:b7:36:94:f2:72:f9:52:4e:c2:c4:e2:a2:3a:6a:
6e:bf:3d:5b:ba:cd:70:4c:46:76:25:c9:41:f8:5c:
ee:35:e6:32:e9:42:b1:30:d6:2e:30:28:3f:37:8b:
3b:0f:e4:0a:6b:68:d6:89:6c:15:7b:58:c4:cb:e7:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:E4:DC:F4:6D:83:CE:2E:7A:D7:4D:1C:65:CC:1E:F7:90:4A:76
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:7e:94:7c:c5:96:d7:4e:1c:0f:26:c1:e7:9e:f3:47:bc:
92:1e:ca:f7:20:43:3e:68:87:e9:96:b1:97:df:a2:d6:fa:5b:
64:70:fa:3d:33:25:a1:df:42:12:0a:3a:c6:e7:e5:8d:14:39:
4a:8c:b6:93:0a:a9:43:9e:56:c2:36:5d:26:01:34:3d:05:34:
3b:0e:63:f2:a2:e0:0a:79:38:78:55:8a:63:81:88:3c:3f:7d:
20:72:89:f8:a8:63:84:e0:89:12:ba:01:c0:be:75:75:cf:b8:
b8:8e:53:ad:61:31:23:91:17:3f:14:0e:1b:06:12:72:54:10:
44:5d:71:60:3b:03:64:31:8e:5a:2f:16:cf:88:1b:04:4f:08:
92:d7:8a:6b:cd:ee:f2:80:45:6b:54:7e:1f:f1:80:ef:a7:b1:
46:45:fc:22:34:86:f3:34:1d:d7:a1:23:92:5f:b5:93:ee:f5:
b3:10:aa:e8:2a:9f:cc:d7:17:41:17:06:47:44:70:ad:64:e9:
56:70:b5:ef:37:aa:0c:92:bd:42:38:5e:ee:2a:0a:24:fd:ad:
37:7c:ef:64:23:cd:b1:ad:c0:bd:58:ed:17:a6:45:55:f6:64:
2f:03:9d:ff:a2:58:30:48:4c:e6:f5:f9:bb:c3:4d:0f:49:f0:
d2:67:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:12 2026 by rpki-client