Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier: VuOQLnl9kh+/i5FAbbPgM4YCFQw/kFaOkcDx/Yq7srQ=
Subject key identifier: 20:17:92:F6:E1:E9:E3:B7:E5:C9:38:65:0C:28:38:29:E6:54:1E:DC
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 01A1927A49E30F438672E66F8685F4AFB49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number: 1AD0
Signing time: Sat 31 Oct 2026 15:00:50 +0000
Manifest this update: Sat 31 Oct 2026 15:00:50 +0000
Manifest next update: Sun 01 Nov 2026 15:00:50 +0000
Files and hashes: 1: FFSRMxbJyfsa8mh_kLloo5bjp7Y.roa (hash: kU3+OjKBfwq6QhTYrLwZu6QdHOUi2oGU2lr/yF+BkU8=)
2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: SUyCaTqGcJ+6oOTJ99tGsyIYy6B+bGA1kNgEAAHCA8c=)
3: s8gjGJ-WJzuZLdxqVdLqNSUiNUI.roa (hash: 8bzzgBYcDhEMUDdhZY+J2KEoANX8KfVAi4iwlT+sdJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:7a:49:e3:0f:43:86:72:e6:6f:86:85:f4:af:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Oct 31 15:00:50 2026 GMT
Not After : Nov 1 15:00:50 2026 GMT
Subject: CN=201792f6e1e9e3b7e5c938650c283829e6541edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:81:3b:48:41:ed:3a:e3:b3:c6:d6:e7:7a:
e3:78:61:df:e5:3e:a5:f3:17:7d:77:b2:dd:fe:7e:
ca:52:07:dd:e3:f3:02:b0:5e:6a:e6:96:e7:a2:b5:
fd:6d:27:62:27:f7:0c:57:f6:3b:98:0d:da:0f:8e:
29:c9:bb:58:94:7f:a3:05:ba:4d:49:71:3d:4b:9f:
59:37:50:d2:f3:b1:1a:da:6f:35:3d:c4:b7:6c:da:
70:18:b6:86:b2:ca:30:7e:53:74:1e:12:b5:83:d8:
f2:4b:6c:91:15:34:29:69:c6:d2:85:eb:20:51:0f:
2d:a7:e2:f9:1c:76:c5:7f:ea:84:0a:f6:31:fc:a2:
ef:b5:02:2c:2e:e5:e1:f3:2f:4c:4d:3d:9f:35:d7:
a1:8c:80:b6:39:18:eb:fb:f4:d2:e0:0e:a9:b3:64:
b3:36:78:15:da:b4:62:6a:de:07:9c:12:96:55:9a:
fa:4f:ac:28:5a:c0:09:a5:6a:9a:66:48:5c:96:9f:
f1:00:99:a8:d7:30:dd:d7:e0:36:50:7b:0e:80:58:
cd:86:95:d5:6e:41:c4:e2:05:47:c3:1e:6f:4f:49:
70:58:51:15:ac:e6:c1:51:fd:ed:32:d7:f8:6b:30:
91:61:b6:96:d3:a8:79:aa:ad:d1:00:60:ff:dd:de:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:92:F6:E1:E9:E3:B7:E5:C9:38:65:0C:28:38:29:E6:54:1E:DC
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:27:a0:07:74:18:05:fe:cb:27:b3:55:10:e3:aa:12:68:b5:
da:01:8b:a8:be:b0:8b:e9:9f:97:6e:10:c0:81:85:45:e2:a4:
1a:ef:bc:b0:97:11:11:d5:e8:8a:a4:28:85:cd:29:4d:44:ed:
4a:3a:39:e8:42:88:6b:11:b8:17:c7:58:40:6f:69:b2:35:bc:
0b:6e:7d:0a:ac:98:e4:da:c7:74:7f:01:a6:83:34:51:35:78:
73:24:a4:f3:44:57:2e:3a:cc:af:c8:7e:ac:de:9b:8c:69:06:
96:af:c5:7a:62:67:11:28:53:2b:8e:0e:c0:32:fd:8d:23:4a:
84:77:70:3f:17:af:44:07:36:25:76:2f:8f:e1:62:38:87:fa:
30:86:97:60:31:5d:2c:dc:01:80:a5:92:67:d2:ef:07:f5:b9:
e3:3d:55:3c:c7:15:9d:b4:99:a7:8f:f2:1b:71:aa:ec:87:68:
b0:76:71:fd:ef:bf:79:43:03:76:06:b1:06:50:4f:b1:d8:9a:
e0:78:68:ac:fd:99:67:b5:53:f4:5b:bd:2f:dc:df:9d:4d:ec:
b0:7a:b5:2a:42:6c:ff:ca:19:c1:8a:ad:73:3b:60:66:78:73:
8c:a8:d1:75:05:f9:8b:b7:f2:1e:a6:13:df:d8:24:6c:59:8c:
63:64:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:59 2026 by rpki-client