Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
File: EfINU1CpXCygwyvx5E3yyNatAGQ.mft (raw, json)
Hash identifier: kPdxkQPOXpYdWo8i6nNhxOhvj8q5DuTQ0z4vxtH54aQ=
Subject key identifier: 3F:A8:4B:18:5D:66:F3:6E:57:04:56:E5:4B:0C:2D:A8:0E:C3:04:25
Authority key identifier: 11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
Certificate issuer: /CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Certificate serial: 01A06F162F9B2A45727516E1A3C5FE909098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
Manifest number: 0148
Signing time: Sat 05 Sep 2026 01:01:59 +0000
Manifest this update: Sat 05 Sep 2026 01:01:59 +0000
Manifest next update: Sun 06 Sep 2026 01:01:59 +0000
Files and hashes: 1: 1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa (hash: pb2HK064WqlbzVnuT66ZkPVqqfQuNm50utehXBp8M/I=)
2: EfINU1CpXCygwyvx5E3yyNatAGQ.crl (hash: aA0I4gaB0vW3v0/znYxDL5aziWSaFVyyJjdNdC6UfaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:2f:9b:2a:45:72:75:16:e1:a3:c5:fe:90:90:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Validity
Not Before: Sep 5 01:01:59 2026 GMT
Not After : Sep 6 01:01:59 2026 GMT
Subject: CN=3fa84b185d66f36e570456e54b0c2da80ec30425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:82:94:8c:60:fb:6e:6d:a2:53:8b:a3:dc:
f8:d9:35:52:f9:2b:b9:29:fb:84:8c:83:a4:f1:24:
a1:40:31:a2:1e:57:1e:cb:0a:86:ad:35:13:c6:06:
d1:f8:8f:b0:28:8e:cc:e9:a4:e4:b6:af:52:cb:fd:
17:b4:a0:c8:dd:7e:97:e6:e4:3d:e5:78:ea:91:f5:
72:5d:c6:80:4f:3b:b2:a7:57:1e:fa:12:23:80:18:
bd:ef:c5:4a:29:b9:62:2b:51:66:78:46:40:cd:b4:
13:3e:36:69:b0:7e:9d:27:c9:8d:57:78:8a:ae:ff:
f3:60:e7:d8:5a:0b:75:7c:08:94:f9:f1:6d:9d:89:
3b:46:08:6a:8a:c2:ed:48:09:b0:5a:b5:9b:d4:fc:
72:76:e9:0d:85:f5:b5:7e:80:20:10:12:dd:2b:91:
12:6b:39:dd:cd:68:4a:cf:03:3c:09:ef:9d:ad:8e:
7f:e1:ea:30:a2:d4:01:f7:9c:35:4f:e0:36:98:5b:
24:11:23:89:d7:ea:88:2c:ec:16:98:1d:c2:43:54:
08:14:2b:10:66:52:c2:3d:53:1a:47:f7:dd:c1:bf:
3b:64:ff:62:7b:f6:43:69:c7:12:fd:50:64:49:7c:
ab:05:7c:d2:17:c5:7c:18:b1:94:ca:f9:b9:19:8b:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:4B:18:5D:66:F3:6E:57:04:56:E5:4B:0C:2D:A8:0E:C3:04:25
X509v3 Authority Key Identifier:
keyid:11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:8b:f8:e3:48:53:a4:ee:20:af:30:ea:14:8b:c2:36:b9:
6d:4e:af:ea:0d:8b:53:ce:72:e3:72:f4:82:43:cb:e5:fb:c3:
a9:95:77:95:d9:66:2b:f2:ef:26:9e:ab:0b:6d:b3:70:7c:87:
9d:fc:6c:dd:86:ba:20:43:b0:2c:99:48:be:19:71:ba:32:61:
ee:07:12:19:76:1d:f2:43:00:55:f6:99:20:6d:2e:83:11:2e:
36:ee:3a:fc:40:4d:34:83:25:08:44:01:bb:99:e1:a7:7a:67:
dc:12:fc:9f:2b:a4:98:45:32:bb:44:ad:bd:46:23:59:7b:54:
67:a7:7e:b5:6e:02:b9:bb:8f:f8:e5:23:15:86:90:8c:76:ae:
d4:48:bb:14:2c:19:d6:58:c2:03:3d:78:ed:3a:f1:1f:e1:aa:
d4:6e:36:8d:26:6e:f9:32:49:a2:62:5c:77:e1:ab:ba:cd:5d:
82:dd:55:b7:88:14:fb:89:9f:9b:9f:93:9a:9f:2c:52:35:da:
ef:c9:c6:3f:11:7b:0e:0b:29:83:67:01:95:79:c2:8a:44:08:
bf:36:f9:1c:aa:e3:7b:04:24:c3:39:53:0b:c5:0c:bb:01:9a:
97:f0:67:24:fe:3d:05:ca:ca:eb:d4:72:74:60:b1:06:47:02:
04:bf:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:58:54 2026 by rpki-client