Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: GH7hAiQusvp3ejzR0kku7MVsy6pa4prU2UmOQkm72p8=
Subject key identifier: 09:8D:D7:0E:57:2F:52:47:2A:87:43:BC:8E:9C:D6:98:7F:4C:3E:6C
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01A1769592746973BF9EEEFF7EDAA2BDF1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 05:01:16 +0000
Manifest this update: Mon 26 Oct 2026 05:01:16 +0000
Manifest next update: Tue 27 Oct 2026 05:01:16 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: /lZ0OIuuQUdbKTwJzKDXqLIPnhCzsMabvqHlPtIvD3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:92:74:69:73:bf:9e:ee:ff:7e:da:a2:bd:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Oct 26 05:01:16 2026 GMT
Not After : Oct 27 05:01:16 2026 GMT
Subject: CN=098dd70e572f52472a8743bc8e9cd6987f4c3e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:8a:38:e2:d1:91:d5:7e:bd:0e:50:c5:8c:
0d:7e:9f:b5:5e:77:80:2d:0b:0f:78:1d:a6:8f:85:
1e:9f:53:ea:a9:4b:4b:8a:35:46:e2:eb:1b:56:cb:
72:19:7e:d6:5f:29:30:16:b1:49:ad:23:ff:66:fa:
3f:ea:8f:6d:98:e4:81:c9:c9:13:24:d5:63:04:f3:
8b:bc:e8:0d:80:1a:c3:c2:6f:f9:df:c6:3a:74:d4:
89:f9:4f:3f:ee:5c:29:05:93:93:0d:92:95:ef:1e:
7d:7d:40:bf:bd:bd:5c:b2:75:e6:b1:fe:80:24:a5:
a6:46:65:e5:45:58:0a:38:67:fc:f0:ce:d4:c8:4c:
94:5f:41:12:48:ca:bd:d7:cb:bb:79:af:83:d5:46:
ce:6a:01:08:dd:f2:f2:75:db:89:f9:71:7d:0b:16:
81:6f:70:50:c1:0c:ed:ae:2d:06:a7:f3:4f:c7:87:
22:88:19:65:d3:01:30:e3:67:32:c3:40:a3:db:87:
db:b4:0f:a7:b0:8b:b7:17:a9:0a:4e:47:15:90:29:
a1:70:96:85:74:fe:a8:72:3b:2a:0d:5d:ca:07:21:
3d:24:ba:f9:16:3e:cf:07:0c:ae:58:64:30:76:c5:
94:33:c2:72:09:5c:f6:00:58:ca:54:e5:c0:ff:c2:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:D7:0E:57:2F:52:47:2A:87:43:BC:8E:9C:D6:98:7F:4C:3E:6C
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a6:9e:27:dd:dc:03:e4:23:e9:79:23:2a:8f:ab:ab:d4:9f:
14:0b:b2:e7:0e:01:5e:0e:31:66:67:c6:24:4c:10:1c:3a:c4:
4b:da:ca:9b:ae:1f:97:9e:5a:3c:2e:ca:00:88:33:04:a3:d5:
9c:22:30:5e:29:5e:09:6b:fe:92:e0:35:d5:2a:21:35:5e:3c:
7e:f2:b2:ef:97:46:0e:01:70:f9:04:db:1f:6c:e9:57:18:b3:
bf:a3:3f:c0:f4:18:61:58:65:43:30:8e:2e:3b:58:2f:b6:6b:
7c:b3:42:e9:9b:b6:d3:d1:74:42:9e:40:4e:ee:98:97:f2:40:
57:7d:fb:68:e7:e6:5b:fe:ef:00:ff:6e:1b:ef:c2:d6:86:33:
a0:ae:91:4e:49:c0:a1:15:a6:34:d4:c4:ee:78:2f:2b:16:a2:
2f:20:61:42:ee:a9:db:67:b4:4e:c7:37:87:d6:09:af:fc:e0:
b4:73:78:54:07:e1:1b:51:12:85:bc:18:34:8b:76:64:e6:1c:
ac:89:a4:f5:78:ee:8d:85:20:f0:5d:e7:fe:5d:8e:c8:97:7c:
97:11:e6:55:a1:e9:7e:c0:8c:38:e5:2c:28:0c:3e:2d:06:22:
7e:13:e9:8a:8a:04:88:8a:44:01:cd:f0:dc:d0:b9:e0:b0:9d:
98:0b:e4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2lZJ0aXO/nu7/ftqivfH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3
ODhlZjUwHhcNMjYxMDI2MDUwMTE2WhcNMjYxMDI3MDUwMTE2WjAzMTEwLwYDVQQD
EygwOThkZDcwZTU3MmY1MjQ3MmE4NzQzYmM4ZTljZDY5ODdmNGMzZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEaKOOLRkdV+vQ5QxYwNfp+1XneA
LQsPeB2mj4Uen1PqqUtLijVG4usbVstyGX7WXykwFrFJrSP/Zvo/6o9tmOSByckT
JNVjBPOLvOgNgBrDwm/538Y6dNSJ+U8/7lwpBZOTDZKV7x59fUC/vb1csnXmsf6A
JKWmRmXlRVgKOGf88M7UyEyUX0ESSMq918u7ea+D1UbOagEI3fLydduJ+XF9CxaB
b3BQwQztri0Gp/NPx4ciiBll0wEw42cyw0Cj24fbtA+nsIu3F6kKTkcVkCmhcJaF
dP6ocjsqDV3KByE9JLr5Fj7PBwyuWGQwdsWUM8JyCVz2AFjKVOXA/8IjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmN1w5XL1JHKodDvI6c1ph/TD5sMB8GA1UdIwQY
MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt
MjMwN2JiNTkyMjVmLzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm
LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1KaeJ93c
A+Qj6XkjKo+rq9SfFAuy5w4BXg4xZmfGJEwQHDrES9rKm64fl55aPC7KAIgzBKPV
nCIwXileCWv+kuA11SohNV48fvKy75dGDgFw+QTbH2zpVxizv6M/wPQYYVhlQzCO
LjtYL7ZrfLNC6Zu209F0Qp5ATu6Yl/JAV337aOfmW/7vAP9uG+/C1oYzoK6RTknA
oRWmNNTE7ngvKxaiLyBhQu6p22e0Tsc3h9YJr/zgtHN4VAfhG1EShbwYNIt2ZOYc
rImk9XjujYUg8F3n/l2OyJd8lxHmVaHpfsCMOOUsKAw+LQYifhPpiooEiIpEAc3w
3NC54LCdmAvkhg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:07:47 2026 by rpki-client