Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: 2mGQfp44McdAUBcAAUZKzoTI9w45uHraB7eDCLKu1fg=
Subject key identifier: F1:3B:73:2B:8D:0C:D9:83:0D:CA:E7:C5:5B:95:29:DD:25:29:86:DA
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 01A08B30D8973690244D5D476EA2115B3B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 13AD
Signing time: Thu 10 Sep 2026 12:00:29 +0000
Manifest this update: Thu 10 Sep 2026 12:00:29 +0000
Manifest next update: Fri 11 Sep 2026 12:00:29 +0000
Files and hashes: 1: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (hash: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8=)
2: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: iZ++C4IphS4JvMbiCsmgpMRlHVnsVkxNeAJIUxjOELM=)
3: r4Hrg0bEs6gpKFTSd59isgxSeSk.roa (hash: /DPtXcMqR60C1x1kBS5/vOOh84pABE6/ZVLVmshPVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:d8:97:36:90:24:4d:5d:47:6e:a2:11:5b:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Sep 10 12:00:29 2026 GMT
Not After : Sep 11 12:00:29 2026 GMT
Subject: CN=f13b732b8d0cd9830dcae7c55b9529dd252986da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:24:5e:6d:20:0b:a8:34:28:c4:87:e9:bc:86:
4a:dc:14:18:4f:61:45:a0:30:38:1d:22:06:cc:50:
f2:ae:03:20:49:b0:d3:9f:a5:b8:3c:4a:5c:77:f0:
2b:11:62:f9:17:81:2b:24:f6:3d:59:e1:77:9b:1d:
76:ab:f0:8b:5f:56:7b:8d:5f:a7:4e:49:33:b3:8e:
93:4e:54:80:1f:3f:de:1f:ed:07:2f:6a:86:cd:e3:
b3:7c:45:ef:7a:cc:6f:13:4f:12:c4:c4:a2:13:de:
6c:bf:a0:cc:37:91:73:34:dd:ff:d2:0e:23:00:dc:
10:c9:4e:f4:04:99:3a:e5:84:c5:56:7f:53:88:02:
04:b5:70:13:88:f4:25:8c:1a:c7:1e:aa:42:18:8d:
91:3d:d3:c8:81:3d:f1:4e:8d:94:55:e1:d1:dd:3d:
3e:71:46:a6:2f:63:91:38:2c:10:d1:7c:e7:9b:e6:
65:de:7d:0a:07:07:35:42:61:c7:72:31:f9:24:5a:
bc:8f:c3:24:98:c6:6c:52:dd:7e:11:98:c3:40:42:
b4:ef:b0:2d:0a:79:38:a4:a8:59:37:b5:f6:af:8f:
af:54:88:68:02:b4:c4:14:4f:c8:31:77:01:36:82:
92:ad:bb:f7:f8:91:78:81:e6:98:f6:3f:8e:61:9d:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:73:2B:8D:0C:D9:83:0D:CA:E7:C5:5B:95:29:DD:25:29:86:DA
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8f:78:2d:dd:e7:95:26:3c:00:6a:11:22:ba:14:5b:9b:ca:
40:ea:97:06:5a:70:bb:dd:d2:12:e7:7a:c7:96:71:7e:9d:fb:
0f:4f:18:3d:1d:d5:fe:bd:a7:49:ae:e5:11:69:31:66:e9:bb:
27:35:a2:e9:ea:2d:44:61:61:7e:63:a4:d3:38:4f:d2:d7:69:
4a:06:8c:83:1e:8f:0a:29:93:46:7f:99:9b:c0:ed:22:a9:0d:
b2:84:73:0a:e2:33:5d:74:98:c0:85:d6:2a:fc:c1:6d:4f:96:
ef:61:7a:75:06:47:ff:46:01:d6:ff:8d:ab:e5:26:36:18:9a:
22:df:1a:7a:78:97:95:22:d6:c8:12:7b:51:98:0a:a5:20:24:
52:24:9d:2a:01:aa:9e:e6:10:ca:e7:7f:d4:19:b5:57:4d:c9:
1a:6e:1c:db:4d:ff:9e:77:50:0e:e1:ef:17:e7:4a:c5:09:ad:
74:a5:93:d3:b5:80:b8:7c:ff:df:35:a3:1f:92:07:69:4d:68:
55:e3:d2:7d:7e:ed:f3:0c:67:34:4c:14:fe:cd:03:15:55:df:
60:76:92:0c:46:77:e1:93:df:bf:d5:e0:6e:4a:16:04:66:4e:
23:df:13:94:fa:7d:5b:8e:6b:a4:22:fb:93:1d:1a:e4:0c:17:
66:bb:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:58 2026 by rpki-client