Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: zhbXgArmukuLeUq+DNpzFtWy4cXHEGGr+da5KbzTjXY=
Subject key identifier: 77:24:0D:DD:FA:17:E4:71:7E:F4:6F:1B:5E:87:4C:3D:17:0B:76:73
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 01A17C28DE0A910816B712C3D09765664AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 1878
Signing time: Tue 27 Oct 2026 07:00:15 +0000
Manifest this update: Tue 27 Oct 2026 07:00:15 +0000
Manifest next update: Wed 28 Oct 2026 07:00:15 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: gaOAFK2+go8A7KzLNHgyWJWiQ6xF40MV8sy3TGaaojk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:de:0a:91:08:16:b7:12:c3:d0:97:65:66:4a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Oct 27 07:00:15 2026 GMT
Not After : Oct 28 07:00:15 2026 GMT
Subject: CN=77240dddfa17e4717ef46f1b5e874c3d170b7673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:ad:03:99:c2:f8:15:cc:47:cc:e1:58:c8:
9a:bc:5e:9f:58:14:fc:30:f0:56:51:6c:80:af:5b:
f0:50:70:70:35:c3:51:c3:84:c3:c3:9f:f9:2b:7e:
41:ff:7e:6a:ae:fa:92:15:e7:07:f7:ae:ef:a1:1e:
cd:2c:fc:9b:09:cd:96:1c:d5:e0:5f:36:99:77:3e:
cc:36:f8:12:43:2e:e6:43:b6:e8:0d:64:0e:4d:90:
b9:6c:81:da:91:e8:52:cd:ce:c6:5c:64:46:ec:c4:
cf:87:b5:75:de:89:3e:2d:08:b4:6a:b5:43:b2:bf:
85:1f:04:50:c2:31:c5:6e:7a:54:f2:31:39:44:e7:
49:22:fd:bd:cb:54:b6:c5:e4:2b:0c:76:33:3b:db:
d0:a6:02:1c:cb:e7:e7:9d:3c:ce:6a:60:bb:8e:89:
13:4a:c7:a9:67:9c:c2:e5:e8:c2:8f:ba:62:c0:c8:
89:a9:19:c0:d1:7d:1a:14:7b:cc:49:1b:b6:fc:fd:
e2:e9:1b:f6:bc:ab:ea:19:d5:77:49:62:8d:cd:dc:
4f:b3:db:74:ea:df:82:1b:0e:e1:c4:f7:24:e8:fd:
ab:0b:9e:05:11:98:dc:ce:65:fa:34:5f:1d:6b:84:
97:d3:8a:df:2a:fe:55:df:71:54:95:2f:67:a7:bc:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:0D:DD:FA:17:E4:71:7E:F4:6F:1B:5E:87:4C:3D:17:0B:76:73
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4d:bb:cd:48:39:5f:df:cd:79:d7:9f:bb:87:59:5a:68:dc:
6d:b2:41:29:1a:8a:68:53:7c:c8:f2:9d:54:60:c9:d3:af:4b:
f9:b6:f2:97:a5:d1:df:cc:33:ed:03:3c:d9:06:53:e9:fb:64:
8a:bb:af:c8:70:86:77:0e:29:b6:c5:71:3f:9f:83:c6:a5:11:
4c:0d:38:0f:65:d9:c3:58:31:97:22:3c:1c:af:f2:1b:35:ca:
a5:4b:74:21:85:d4:10:d1:3e:e8:11:d6:84:07:e7:6c:ba:18:
0f:70:a3:55:3f:58:df:25:45:a5:bb:0c:a8:95:d6:92:cf:bf:
49:5a:d6:21:59:9e:df:ed:c6:b8:1d:81:20:1d:28:2c:ce:de:
b6:f5:69:1a:eb:a9:30:2e:ff:7b:8b:64:47:aa:46:21:1a:a3:
75:06:02:c4:22:1e:43:70:40:89:22:15:2b:a0:23:a0:90:ff:
1d:aa:85:e7:5b:97:11:b2:34:95:78:1b:0f:b2:2c:46:a2:b4:
1c:13:19:2c:65:75:5d:10:ee:71:33:43:b9:bc:17:21:13:13:
bb:89:8d:f3:72:e0:ae:f7:2b:8d:a5:3e:00:95:ea:9b:42:68:
4b:7f:84:16:bc:f1:57:35:54:37:cc:03:5d:77:3c:43:43:e4:
9e:de:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:08 2026 by rpki-client