Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: MY1+v06fQZchOKuOlnbOQ6boKDYb84UEWLWA+VOi8Zk=
Subject key identifier: A8:F4:17:5D:21:F0:8D:B0:CD:31:CF:21:53:8E:75:02:2D:A6:DB:EB
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01A12843BD9959DDA20789FCE7BE752612C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 09C4
Signing time: Sun 11 Oct 2026 00:01:30 +0000
Manifest this update: Sun 11 Oct 2026 00:01:30 +0000
Manifest next update: Mon 12 Oct 2026 00:01:30 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: cqCliJA/lS/TGKEcq9TJkn9O6yImrTzlYa8MFhOV23Y=)
2: p1HhV_xExOgF_LW43FQ2o3eSKCw.roa (hash: EeJPVb/oMvTuXI5wGaDjHDOoSEBzaJvAr0PnvP4ZgTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:bd:99:59:dd:a2:07:89:fc:e7:be:75:26:12:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Oct 11 00:01:30 2026 GMT
Not After : Oct 12 00:01:30 2026 GMT
Subject: CN=a8f4175d21f08db0cd31cf21538e75022da6dbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:16:c2:44:b9:dd:a7:44:c6:12:2b:bf:38:
31:0f:9d:04:cf:47:8a:1c:e2:5a:d6:3a:a3:bb:46:
df:82:3e:77:a6:e9:19:c2:37:70:f9:cd:35:9e:b7:
ab:b2:cc:d7:99:a9:30:c9:c2:fa:53:e5:30:f7:43:
87:a2:5c:ab:77:5c:b0:91:04:bd:d7:de:42:47:66:
67:3c:0f:f5:1b:02:a1:e2:cf:e8:d2:29:bf:08:6b:
17:81:fc:7d:83:a1:b4:d3:31:d8:b4:3b:04:95:89:
f4:73:1b:c3:63:cc:0d:54:b8:69:d2:fc:36:aa:ca:
d4:47:06:7f:de:46:3d:e8:0b:21:57:8f:6d:a2:c4:
d2:36:e6:4b:c8:3b:f6:65:c1:29:e3:82:82:de:2e:
92:26:cb:5b:03:e6:0c:84:a8:37:22:68:06:e3:d9:
9c:16:f0:98:b9:b2:01:44:23:5f:fc:73:49:bb:c8:
89:d9:ed:aa:70:e0:21:28:d5:54:03:b5:c8:0c:6b:
43:e3:c4:c6:20:2d:86:05:3c:14:3b:ad:6d:02:e8:
79:22:8f:a6:75:ce:40:c3:c8:f5:81:40:ec:2a:17:
ca:07:3a:d3:4f:8f:59:31:61:b5:8e:49:5f:e1:d0:
fd:f1:28:16:4b:65:70:ba:9b:b8:49:28:7f:c7:39:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:17:5D:21:F0:8D:B0:CD:31:CF:21:53:8E:75:02:2D:A6:DB:EB
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fc:19:c9:44:44:5e:3b:12:58:3f:52:4d:0c:c6:1b:f8:b3:
bf:ef:a1:2a:96:22:9c:06:18:3e:22:e7:9f:ff:f7:1b:ab:4a:
92:05:f6:46:35:c7:97:30:49:ed:8e:29:f1:56:8e:2f:aa:7b:
02:91:f8:89:f7:96:2e:1c:eb:97:75:83:b2:2c:dd:42:47:b6:
0b:ab:43:16:8a:5e:e6:31:36:57:09:27:7a:68:71:f2:42:7d:
71:dc:5c:79:ad:39:06:1d:00:cd:93:de:33:ec:08:ba:1b:73:
07:8e:0c:0a:62:19:11:58:4d:4b:38:54:c0:96:8e:2e:56:e8:
15:00:0c:96:50:69:27:a6:91:26:82:9a:38:8c:5b:94:42:ce:
3a:3e:ab:97:71:b1:c9:d2:f5:bb:28:8e:61:55:11:be:03:a9:
a1:ad:c4:a2:6f:f6:1a:d5:20:a1:f9:dd:9f:9c:e6:09:19:65:
1a:c1:98:c4:29:bc:e7:e8:03:fe:35:12:08:20:7a:dd:de:42:
a2:78:e1:1e:f0:67:0a:96:17:8e:bc:de:e9:b4:7a:74:82:58:
c6:14:76:30:e7:38:6d:29:bc:f5:b2:06:03:7f:ab:dd:ed:1d:
f0:d1:dc:1d:84:95:39:b8:bc:c2:7b:50:63:fe:99:b6:4e:4a:
5b:0c:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:49:39 2026 by rpki-client