Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
File: eA-Kp9juLNFxq6aAElVCf5qr5UY.mft (raw, json)
Hash identifier: iOlqh4eXu92qOPN5iLtPAKVqai3GDm8B52XKIcakFIM=
Subject key identifier: 39:A3:35:CC:A1:A0:CF:2D:54:83:26:4D:9A:55:AE:39:D5:35:24:F9
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Certificate issuer: /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial: 01A1287A7FCC487FB32F7080CA1206F2CEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
Manifest number: 01CF
Signing time: Sun 11 Oct 2026 01:01:18 +0000
Manifest this update: Sun 11 Oct 2026 01:01:18 +0000
Manifest next update: Mon 12 Oct 2026 01:01:18 +0000
Files and hashes: 1: 00GxFGgSEySvshhLvY9ijcX9cHQ.asa (hash: XgApdRt20J6F9KR7+CzL9K2aoKUuYUpSKhKCy3ZojEY=)
2: eA-Kp9juLNFxq6aAElVCf5qr5UY.crl (hash: SArX8a8/vfw0aA5rV5jG5vM8rVNhMhtR6Cc/qLSB1Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:7f:cc:48:7f:b3:2f:70:80:ca:12:06:f2:ce:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Validity
Not Before: Oct 11 01:01:18 2026 GMT
Not After : Oct 12 01:01:18 2026 GMT
Subject: CN=39a335cca1a0cf2d5483264d9a55ae39d53524f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:2f:91:b3:97:ef:fd:9b:f9:14:d0:f4:2e:
ee:af:40:ae:d0:74:b3:88:68:55:f5:b0:84:b4:99:
d6:0f:c4:79:62:a0:f2:d3:f0:f4:09:fb:d0:aa:4a:
5b:80:de:45:52:7e:a2:de:fd:bb:43:82:44:a0:ab:
b6:32:18:26:5a:bd:c0:c1:00:c6:a7:65:54:b6:15:
ba:eb:e8:d6:a4:68:be:3d:29:a1:47:eb:55:b4:63:
72:70:7e:30:6b:18:5f:25:5e:03:6d:88:51:05:ea:
48:0c:48:b9:28:79:fb:79:27:8c:13:ce:8f:fd:03:
d6:79:73:94:5f:ca:cc:e7:ef:2e:4f:2f:06:4f:ee:
12:d1:b1:de:7f:4f:12:e5:c0:d8:e2:e4:dc:a0:33:
ea:56:d5:f4:58:77:24:d2:a7:da:f9:db:a5:34:60:
08:04:ed:0a:11:82:9b:89:5e:99:57:2e:e0:26:67:
84:5b:fa:6a:06:64:8e:d7:5e:63:07:fe:3e:69:d1:
1f:9c:31:23:b0:d8:f2:7b:62:d9:32:69:fc:31:73:
37:56:ce:82:50:f2:39:ed:fc:3b:37:10:cb:3f:d0:
21:5d:b9:05:75:9f:09:62:1b:3a:1b:ea:7d:2e:1b:
61:27:c7:9a:11:13:60:b2:51:d8:c0:e4:3a:b8:e7:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:35:CC:A1:A0:CF:2D:54:83:26:4D:9A:55:AE:39:D5:35:24:F9
X509v3 Authority Key Identifier:
keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:87:66:1c:5e:7b:c6:78:40:5d:e3:12:4a:0a:31:3b:37:
58:80:8b:51:12:92:77:30:7c:e5:91:99:87:7a:a3:82:39:20:
39:7d:22:38:a0:3d:e6:1d:42:7d:76:50:19:92:94:3a:72:2b:
9d:95:db:30:4a:a3:a1:36:0d:98:ae:48:3d:ef:e6:7c:dd:71:
df:bc:81:1c:25:53:8c:85:9d:03:84:cf:89:14:58:0a:7d:24:
41:60:a0:4e:a1:6c:6e:ff:85:3c:b9:a4:a6:79:b9:0e:d9:38:
3c:6b:38:f4:8c:75:51:ce:d0:b8:f8:8f:f2:14:c8:87:f4:17:
e5:6c:d6:07:ad:be:c5:53:66:a9:bd:68:0f:56:bc:e6:4a:7b:
14:df:53:f0:96:cc:81:f9:aa:77:70:e2:bf:ee:9b:28:24:06:
6d:1c:37:b8:e2:b9:a6:bd:49:c3:f2:7c:a8:a2:5e:14:cb:63:
cb:cd:1e:8a:b1:42:59:6c:43:a5:5c:9f:ad:2d:e2:d4:63:32:
ad:20:dd:08:5c:f3:9d:3a:b3:d9:43:e4:bd:29:3a:09:02:40:
2c:f6:35:2d:1f:80:75:9a:29:f7:dd:c4:4f:9f:10:3f:83:d7:
93:53:d8:8d:c0:ba:07:9e:1c:64:40:bc:21:b2:c2:b1:31:41:
b6:06:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:42 2026 by rpki-client