Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.mft (raw, json)
Hash identifier: nZmCfLSWtGvQIAULgIXUsbGnE5n2uFKQVHuUpFmc71Y=
Subject key identifier: CF:E2:FC:88:71:60:19:CF:25:EE:F3:8F:74:BA:88:3E:F3:E9:57:F6
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 01A0889DB01D525B2B7E8D6D323F5D872297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:00:30 +0000
Manifest this update: Thu 10 Sep 2026 00:00:30 +0000
Manifest next update: Fri 11 Sep 2026 00:00:30 +0000
Files and hashes: 1: RkxGEP2HKa933gOwWZ56ZY2Nos0.crl (hash: ZfLTXz097x56GRSmkJeAAY0taVLJ8G3Khns9ScjscPQ=)
2: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (hash: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=)
3: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (hash: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9d:b0:1d:52:5b:2b:7e:8d:6d:32:3f:5d:87:22:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Sep 10 00:00:30 2026 GMT
Not After : Sep 11 00:00:30 2026 GMT
Subject: CN=cfe2fc88716019cf25eef38f74ba883ef3e957f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:a7:45:11:56:a1:b4:ac:ad:cd:66:1b:00:
01:30:6d:58:0b:66:80:b0:8a:b6:11:1d:d8:49:2b:
a7:dc:f7:46:45:0d:d8:ce:a7:cf:7d:88:4f:3b:dc:
4c:e5:bb:52:a5:f7:59:86:56:6d:99:ad:57:50:9d:
69:9d:66:d6:ba:48:38:ed:70:19:86:1a:f4:4c:55:
8c:55:05:e7:20:c5:1e:0c:87:4f:86:2a:49:39:91:
2b:c4:a3:cc:9e:63:f0:18:72:47:ba:fb:e9:1e:3f:
3c:6e:80:db:82:5d:34:5c:0f:d6:e0:99:6d:f4:99:
08:7b:2d:eb:68:90:f2:f3:7e:f6:c8:11:fa:f2:be:
52:6e:49:81:2d:3b:64:ae:74:3f:f0:eb:03:36:8e:
26:8c:b4:be:0c:d0:67:d6:a8:96:b5:6c:ca:f5:7c:
10:7a:ae:76:65:f1:e3:b4:78:89:ac:44:95:aa:ab:
8d:d0:f4:b6:19:9d:f8:e0:91:d3:d2:b0:5e:58:0f:
0b:3f:24:5c:ed:d8:f1:60:80:be:1f:5b:2c:43:e9:
ca:3e:fe:45:19:08:c5:1d:c9:28:f5:85:a4:b0:5f:
f2:d0:bd:3a:82:e7:f6:ef:15:74:09:00:22:b7:0c:
fe:de:d3:61:53:67:00:98:29:88:3a:f2:c0:90:9b:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:FC:88:71:60:19:CF:25:EE:F3:8F:74:BA:88:3E:F3:E9:57:F6
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:1f:06:56:93:1b:80:4d:36:e7:20:07:6d:4b:63:fb:18:
b6:7f:18:d5:e8:37:72:9a:46:95:22:40:90:e5:78:a9:0e:9f:
5b:8f:d8:fb:09:f5:61:59:9e:ae:1a:9c:20:54:4e:98:9c:e0:
28:6f:93:00:f6:5e:a3:02:82:5f:25:eb:76:7e:25:17:ae:2f:
43:5e:26:cb:02:10:98:11:44:a3:5c:13:08:54:ae:81:23:f0:
6f:cc:17:f4:89:78:ea:06:57:49:a6:a6:7f:a9:a1:12:cb:e2:
7b:18:7f:8d:9b:09:be:d1:c5:cf:9c:fc:70:02:0c:e4:fe:79:
62:c3:83:37:1c:5f:1e:36:ae:9d:2a:02:e3:48:cd:90:b6:47:
02:e5:6d:d1:41:c9:e2:3e:15:60:f2:da:70:8d:99:d7:0e:b2:
24:c3:16:2f:9e:8b:a9:df:15:3c:c2:9d:d1:0e:f0:9d:7a:d8:
81:44:a5:4c:b5:a4:1e:8f:13:24:a4:5a:9f:b9:1d:bb:7a:4e:
b8:c8:a4:db:1d:e0:97:71:79:e8:df:dd:c4:d3:9b:d5:ac:3d:
7f:54:b7:8e:81:fb:2b:e1:e6:81:8b:98:13:cb:e0:59:0c:da:
c3:5a:ca:7c:86:e9:44:bd:19:87:42:a8:bb:e2:75:7d:8e:bd:
a3:27:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:48:44 2026 by rpki-client