Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: ZRNztOyzr279lHTmYkEGvwVIEOaZctbLTLOY8cDNSXs=
Subject key identifier: E4:EC:1A:29:28:16:69:74:91:6B:14:EA:B0:D0:DB:4D:5F:51:83:59
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 01A10A70724443BD4DAA8AAC533DA83ACAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1A86
Signing time: Mon 05 Oct 2026 05:01:43 +0000
Manifest this update: Mon 05 Oct 2026 05:01:43 +0000
Manifest next update: Tue 06 Oct 2026 05:01:43 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: 0xGDqxXymprT6vV7AyoQieTZN2Iad5W2Ur5BQdG15RY=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:72:44:43:bd:4d:aa:8a:ac:53:3d:a8:3a:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Oct 5 05:01:43 2026 GMT
Not After : Oct 6 05:01:43 2026 GMT
Subject: CN=e4ec1a2928166974916b14eab0d0db4d5f518359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:4a:cd:19:5c:51:3b:57:9c:5f:cb:fb:03:
49:c4:45:25:d9:ee:32:ad:db:62:97:bf:53:25:21:
d8:84:f5:de:93:c1:8d:c0:47:cf:b5:3c:52:2c:e6:
3f:ee:43:8d:ad:59:31:8a:cc:fe:57:ad:c1:e0:c7:
87:a1:1f:1b:33:36:58:c0:5e:33:60:a2:69:d3:18:
8e:a8:59:a5:e4:11:e4:b0:b4:63:d8:d3:0a:11:21:
69:f9:91:7b:b7:60:57:79:ae:36:a8:6f:30:27:ef:
c5:ea:72:7b:64:81:1a:b3:5d:8e:d3:7b:5e:2f:d9:
e0:9f:80:c9:3f:dc:0e:5e:02:f0:80:2b:e0:c8:2a:
35:ce:ea:03:18:dc:ca:bb:ac:0b:02:fb:ec:b2:77:
85:d6:ce:88:b6:5d:dd:ea:4b:ee:30:eb:7e:6f:10:
6f:c8:b7:a1:af:e1:28:cc:ce:ca:e2:0f:72:d0:90:
df:f1:79:28:67:3e:82:3f:17:5e:38:d9:b1:30:9a:
51:1e:41:f7:61:0b:43:3d:35:8b:62:d0:b0:b6:6c:
53:31:84:1e:03:96:96:4c:98:08:1a:82:e9:77:87:
53:fd:50:21:8b:cd:d8:e4:22:c1:8c:34:49:69:99:
52:f8:a8:a8:d1:58:88:0e:6a:d7:a7:4b:35:2b:0f:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:1A:29:28:16:69:74:91:6B:14:EA:B0:D0:DB:4D:5F:51:83:59
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:15:22:72:59:6f:c4:40:5b:d3:37:9d:58:f7:39:a4:b7:bd:
7e:25:87:ab:e7:24:bb:74:95:eb:21:d6:9b:03:60:cc:2c:88:
39:7d:03:7e:48:63:73:3b:4f:0b:fc:f3:78:8c:34:5d:19:e1:
77:db:5c:f4:17:0c:a1:f9:e5:d7:f4:d9:36:57:4f:38:7d:5b:
74:4b:d3:12:4b:d2:83:95:04:18:22:bf:25:ed:30:f2:21:09:
36:de:15:7b:84:99:a0:55:bf:30:86:84:b8:19:9c:4d:9f:6d:
6a:99:1f:a9:87:36:ca:0d:49:c7:6e:de:3e:10:c0:bb:e4:29:
91:57:85:c7:87:5e:45:46:fc:72:39:9a:0d:c9:45:0a:49:53:
1d:cc:f9:51:66:65:3f:7a:7a:6a:e1:e5:91:09:46:26:21:f7:
69:a0:2a:c3:78:3a:34:b6:17:ba:52:3a:6b:f5:d7:41:78:5f:
1f:65:10:a9:33:8d:5b:24:79:0f:eb:1b:8e:b4:64:20:3f:99:
8d:92:85:30:f1:db:5b:cd:cb:4d:15:47:48:22:66:63:58:c1:
ae:4b:20:fe:59:3c:ba:1d:e7:aa:4f:48:fd:11:31:5a:fc:30:
48:b3:16:f0:70:26:4d:4a:38:fc:82:7d:c6:2d:ec:94:80:74:
d7:17:7d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKcHJEQ71NqoqsUz2oOsrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNzA0MDA3ZTIxMzVjOGIxMjc4MDM1YmE3NjQyYjk5MTU5
NDQ0YjEwHhcNMjYxMDA1MDUwMTQzWhcNMjYxMDA2MDUwMTQzWjAzMTEwLwYDVQQD
EyhlNGVjMWEyOTI4MTY2OTc0OTE2YjE0ZWFiMGQwZGI0ZDVmNTE4MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19hKzRlcUTtXnF/L+wNJxEUl2e4y
rdtil79TJSHYhPXek8GNwEfPtTxSLOY/7kONrVkxisz+V63B4MeHoR8bMzZYwF4z
YKJp0xiOqFml5BHksLRj2NMKESFp+ZF7t2BXea42qG8wJ+/F6nJ7ZIEas12O03te
L9ngn4DJP9wOXgLwgCvgyCo1zuoDGNzKu6wLAvvssneF1s6Itl3d6kvuMOt+bxBv
yLehr+EozM7K4g9y0JDf8XkoZz6CPxdeONmxMJpRHkH3YQtDPTWLYtCwtmxTMYQe
A5aWTJgIGoLpd4dT/VAhi83Y5CLBjDRJaZlS+Kio0ViIDmrXp0s1Kw/u9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTsGikoFml0kWsU6rDQ201fUYNZMB8GA1UdIwQY
MBaAFHpwQAfiE1yLEngDW6dkK5kVlESxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEt
Zjc3MTBhMDMwZmEyLzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEtZjc3MTBhMDMwZmEy
LzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhUicllv
xEBb0zedWPc5pLe9fiWHq+cku3SV6yHWmwNgzCyIOX0DfkhjcztPC/zzeIw0XRnh
d9tc9BcMofnl1/TZNldPOH1bdEvTEkvSg5UEGCK/Je0w8iEJNt4Ve4SZoFW/MIaE
uBmcTZ9tapkfqYc2yg1Jx27ePhDAu+QpkVeFx4deRUb8cjmaDclFCklTHcz5UWZl
P3p6auHlkQlGJiH3aaAqw3g6NLYXulI6a/XXQXhfH2UQqTONWyR5D+sbjrRkID+Z
jZKFMPHbW83LTRVHSCJmY1jBrksg/lk8uh3nqk9I/RExWvwwSLMW8HAmTUo4/IJ9
xi3slIB01xd99A==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:35:04 2026 by rpki-client