Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: FLrKwQ1XSNkxxdSd6LRz97IPMB7Q7/q6CJfn0VpMe7Y=
Subject key identifier: 09:45:74:AE:3A:34:88:E1:66:F9:B9:0B:98:33:FE:6A:4B:1F:3C:F6
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 01A08A55385FCC431D27B22B34DCF1BA4A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0EBD
Signing time: Thu 10 Sep 2026 08:00:35 +0000
Manifest this update: Thu 10 Sep 2026 08:00:35 +0000
Manifest next update: Fri 11 Sep 2026 08:00:35 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: RtLRlRvEGqhiDdFUWaewNTDRUDh/7eoNXHr0wgjWGjg=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:38:5f:cc:43:1d:27:b2:2b:34:dc:f1:ba:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Sep 10 08:00:35 2026 GMT
Not After : Sep 11 08:00:35 2026 GMT
Subject: CN=094574ae3a3488e166f9b90b9833fe6a4b1f3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:97:af:fe:d9:49:4e:ea:5c:ca:33:c2:84:
70:c8:3a:07:9d:b1:ad:d4:9c:57:18:24:28:ce:83:
a5:f8:18:b6:5b:ec:b5:ad:e1:b6:0f:78:63:a8:e8:
1f:a8:2b:c8:5c:c5:61:d1:72:cc:b8:8a:3d:e3:37:
d4:20:23:60:d9:de:ae:7d:0d:62:28:ad:c4:d9:9f:
80:e4:c8:77:16:a5:90:76:ce:8a:1e:21:f1:4a:f0:
88:32:ab:80:31:45:41:a8:9d:4f:9e:1d:35:b2:80:
30:a5:dd:d0:9a:c8:a9:06:29:03:b0:1b:b0:db:d0:
95:8a:72:e4:7f:4a:60:16:ba:58:94:71:71:e2:6a:
22:0e:bf:31:d2:b1:fd:72:14:7f:b7:0b:f3:bf:2f:
83:35:8e:b1:4a:dd:3e:1a:da:13:59:50:49:41:cc:
9c:47:b2:c7:ae:22:a0:5d:22:ea:20:29:1f:cd:72:
30:fa:f4:89:26:b9:d6:2e:d5:3e:bd:c4:70:ae:f0:
6f:8a:95:e4:48:ba:d4:0c:ac:1c:14:bb:7f:98:80:
38:b9:fc:05:1e:88:73:e8:3d:c5:71:19:61:40:f1:
48:09:53:67:2d:be:f3:d2:be:f1:6a:06:f7:27:c8:
95:6f:a6:aa:b1:e2:89:c5:55:4f:5e:64:f3:11:53:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:74:AE:3A:34:88:E1:66:F9:B9:0B:98:33:FE:6A:4B:1F:3C:F6
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:38:7c:d3:cf:7d:52:64:f9:87:01:33:b1:06:68:91:56:
c8:89:26:37:89:e9:19:3d:5b:5d:c3:37:d1:0e:a9:cb:22:5f:
3e:57:11:3d:4f:3c:be:ba:7f:eb:8f:a0:3c:29:41:ff:b6:e0:
70:e0:71:c1:ff:a8:8a:42:bd:fa:48:de:94:d2:70:48:f3:10:
68:43:6b:07:92:32:d0:35:07:90:4e:cd:a5:a1:0b:a3:0c:fc:
b6:12:0d:20:ba:11:36:2e:da:ce:bf:9d:65:0a:d1:4b:6f:5a:
63:9b:72:e4:a3:a9:bb:0c:19:24:be:bb:fe:2d:62:1a:ed:a4:
22:2e:86:2e:0c:56:e2:fd:fa:1f:18:ac:8f:03:11:ae:f8:f1:
68:2a:7d:b9:c4:f2:82:14:7e:3d:52:d1:3d:d1:75:2a:5f:5b:
e6:55:b0:90:95:d2:80:80:f1:c8:1c:de:12:04:57:f7:78:ff:
e4:c3:eb:32:6f:76:88:c9:c0:4f:ae:67:3a:b3:1d:93:13:58:
b8:59:9c:47:f5:92:31:43:f3:46:b2:8f:e0:1a:74:ab:4f:e1:
46:9c:f5:e8:00:f4:cf:f6:f7:6b:c7:56:da:18:55:84:f4:84:
aa:56:04:74:d2:c4:2c:4e:95:d5:74:34:f0:d6:6d:bc:c8:d0:
7e:31:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:38:25 2026 by rpki-client