Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: MoVfV2DvR7Y0Vvqk5hDhzID3gX1G8LPuX/WCaVQQiKI=
Subject key identifier: 65:77:ED:99:EA:16:F3:9F:E6:7C:8C:CD:07:46:07:18:48:CC:35:57
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01A03FA9A987779B03BA8B05CC990849CB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 1A25
Signing time: Wed 26 Aug 2026 20:01:18 +0000
Manifest this update: Wed 26 Aug 2026 20:01:18 +0000
Manifest next update: Thu 27 Aug 2026 20:01:18 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: hXQtPBz69B3zuVnVnp1CRRlB9Ig/SUZbOTZkA4/bVBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:a9:87:77:9b:03:ba:8b:05:cc:99:08:49:cb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Aug 26 20:01:18 2026 GMT
Not After : Aug 27 20:01:18 2026 GMT
Subject: CN=6577ed99ea16f39fe67c8ccd0746071848cc3557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:b3:c1:bf:63:03:d7:7a:d1:d4:c1:28:e8:
56:b9:7c:9a:cf:1f:29:b9:69:97:54:db:f3:0f:73:
e7:e0:27:eb:94:f4:e6:56:27:59:ca:98:90:79:77:
ae:f4:42:f7:c8:25:4f:e5:06:6d:06:f1:f8:ef:8b:
a8:cd:4e:9b:77:13:a1:bc:bb:a7:8a:7e:f7:ac:c2:
11:6b:9e:18:d0:2f:56:51:aa:60:f8:f2:2a:38:8e:
c0:dd:59:e7:89:e7:6c:45:aa:36:b8:83:ba:58:04:
3e:8e:56:5b:11:ba:99:0a:76:e2:6c:03:d0:4a:04:
7d:29:8f:11:32:a0:96:fe:a9:0d:80:f3:47:fd:2c:
7d:3a:b3:c6:1d:db:ea:9e:96:4c:66:cf:44:af:b2:
ed:23:9d:56:0f:0d:4d:4e:9b:a2:d5:f7:4b:49:16:
d9:f0:ae:db:bf:70:5d:b0:71:e5:fd:13:fd:b3:45:
0a:f5:38:c3:19:1f:85:40:f3:84:1b:09:39:52:79:
aa:0a:61:42:e3:28:6b:8a:e2:8a:df:f5:43:1a:49:
09:f3:23:3a:29:ff:30:c9:7e:b5:73:3e:47:7d:04:
4e:95:66:62:0c:85:9a:44:d7:3b:09:12:56:99:a2:
5e:d5:5a:11:cf:ab:f2:f0:7a:8b:cc:c1:d8:a0:f2:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:ED:99:EA:16:F3:9F:E6:7C:8C:CD:07:46:07:18:48:CC:35:57
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:34:4d:17:ea:27:b0:15:69:88:69:df:29:a1:a4:96:33:ac:
28:ab:3a:b6:ff:01:4e:d1:e1:cf:a5:8b:73:11:0e:2a:05:be:
c6:aa:a3:dc:0f:9a:4b:09:05:0c:b1:cf:a6:fb:bb:06:00:71:
87:bd:55:40:ee:12:c3:ac:ff:86:51:12:cc:93:5b:ee:d8:fd:
6c:46:8a:fa:f4:57:1a:7c:95:09:55:c6:34:2a:89:1a:0c:15:
c7:50:4f:ea:32:52:d0:83:32:a9:88:5f:af:16:e5:69:b7:5a:
1a:2f:9e:2d:5a:73:0e:51:2c:50:37:18:de:de:38:d3:96:e1:
33:86:0e:c0:ad:73:72:ee:a0:4a:82:ff:86:c4:88:46:3d:7c:
90:dd:9d:d4:91:f7:aa:44:32:45:75:ab:f5:f5:44:79:e4:5d:
64:db:c9:9c:2e:6b:c3:ac:b2:20:f2:2a:67:fc:2e:db:8c:1f:
54:7a:a9:13:2e:75:1f:5e:f3:93:24:9a:61:b7:69:ab:d9:ef:
0c:27:54:5a:38:88:dd:ed:a5:40:4a:da:b5:02:d0:a3:70:4f:
84:4a:5e:b9:b1:de:85:65:08:2e:6e:88:08:13:56:c7:de:aa:
bf:d8:d8:75:c5:b8:b5:00:d6:1d:02:df:89:dc:6a:02:06:e7:
7c:c3:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:04:21 2026 by rpki-client