Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: ILGR8J0SQmUO98lfsYHoti1sgjCCiu2T4J8EvmG6iK0=
Subject key identifier: 7B:CA:5A:92:7A:FF:0F:EE:3E:4A:18:E8:60:C5:1E:FF:7C:49:62:7D
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 01A08AFA861D01BF990AF8917B83664747C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:01:09 +0000
Manifest this update: Thu 10 Sep 2026 11:01:09 +0000
Manifest next update: Fri 11 Sep 2026 11:01:09 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: LL8e5ePhHGW0t5v8tn9pvY+2YAO5y2xxLreo5alKIuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:86:1d:01:bf:99:0a:f8:91:7b:83:66:47:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Sep 10 11:01:09 2026 GMT
Not After : Sep 11 11:01:09 2026 GMT
Subject: CN=7bca5a927aff0fee3e4a18e860c51eff7c49627d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:55:42:a4:ac:5b:dd:ec:4d:48:15:73:f4:
7f:1f:d9:a1:9a:9f:72:a5:b0:74:cb:0a:23:4b:3c:
80:e8:9e:77:77:60:d3:ad:b5:cc:ba:67:b2:4b:f1:
80:2a:d4:55:49:12:b4:4c:6e:64:b7:64:5b:d8:06:
a4:60:6c:a6:f3:57:61:46:6c:5b:03:6d:1c:0d:55:
07:73:a3:e2:c6:e1:51:78:39:19:bc:47:99:f1:b9:
53:22:40:bb:c2:91:06:dd:9a:02:b6:4b:54:5e:b7:
07:eb:02:63:58:43:a3:9f:fc:ec:00:fc:f7:4f:fc:
a3:36:3f:28:8e:7e:22:6c:f9:2d:c8:a2:67:cc:0f:
fe:d1:f3:d3:18:00:35:e3:3c:39:df:5d:0f:da:46:
f1:0c:00:b3:fb:62:c0:77:75:9a:b3:8a:90:ec:4d:
72:3c:41:0c:b9:f5:9e:87:10:85:8e:09:2c:71:f8:
29:dc:ee:9c:7a:31:f1:14:cd:2b:6d:a2:e8:1d:87:
2f:4a:ad:c7:77:dd:9c:56:dc:70:a0:5d:e1:f3:fa:
12:1a:aa:04:11:a7:b6:c4:e4:ec:2a:23:ca:9e:ae:
25:db:03:a6:30:a9:c6:06:a0:e1:b4:96:6f:c1:57:
46:50:ed:fc:9d:6b:82:97:92:4e:93:87:4d:6e:1f:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CA:5A:92:7A:FF:0F:EE:3E:4A:18:E8:60:C5:1E:FF:7C:49:62:7D
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:3f:3a:33:3e:c6:11:21:6e:77:14:20:d4:94:32:2a:5e:
d1:fe:15:2a:0b:e3:27:1e:b3:93:3d:ac:f0:03:0c:49:63:0d:
d9:6f:de:25:63:d2:d2:41:19:01:70:03:a5:6a:03:a6:58:58:
6f:97:7a:0c:8b:f2:4d:35:f5:c0:aa:00:1e:d1:fb:db:69:8f:
c7:a0:1f:28:c4:24:ea:c6:57:1e:4e:a2:90:29:d4:5a:d3:b1:
e7:7c:af:39:97:99:94:55:07:83:a6:95:cb:63:fc:02:1b:35:
67:17:fe:db:f4:dd:c6:b8:84:ee:42:f9:e3:b9:31:96:9e:d9:
9f:02:d2:46:13:1e:65:c0:d3:4b:4f:7b:b1:bb:ae:c9:f0:d9:
d9:a2:d1:1d:7d:78:a8:8a:27:c0:28:a9:c4:ca:db:c4:a9:cf:
16:c4:cf:6f:dc:95:45:fa:0e:6b:63:e1:da:59:0b:b0:0e:26:
4b:28:be:6b:ba:46:64:3e:d6:be:4d:e8:4f:ad:50:cd:2f:c6:
7a:bf:5c:f1:5c:fd:f2:14:53:ac:10:04:a4:42:a1:05:c1:37:
f4:0d:2e:78:1f:2a:67:d8:b1:bd:0c:c4:16:a7:dc:fc:99:d7:
63:de:3f:b9:7a:16:15:f1:c3:68:29:74:98:8e:f2:b5:a8:1a:
b6:e0:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:01:21 2026 by rpki-client