Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: DeVAb0+TQLk2ajHeORwv0vd6HwFT/F6h6+CBzx283lw=
Subject key identifier: 63:54:12:74:BA:84:70:BD:20:EF:69:84:64:74:C1:C3:97:BA:96:D0
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 01A112CDE8AF79AF41C74487383741BDF90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0C9D
Signing time: Tue 06 Oct 2026 20:00:46 +0000
Manifest this update: Tue 06 Oct 2026 20:00:46 +0000
Manifest next update: Wed 07 Oct 2026 20:00:46 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa (hash: 6RJCYSiIM4CZdaMt1QH6napTMQyBB8/2uvcNOS+XnT4=)
3: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: ealtOH6IoqtgUW2eCUdtMatDBsqVE+bYqSX6NJdAWjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:cd:e8:af:79:af:41:c7:44:87:38:37:41:bd:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Oct 6 20:00:46 2026 GMT
Not After : Oct 7 20:00:46 2026 GMT
Subject: CN=63541274ba8470bd20ef69846474c1c397ba96d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:05:80:8c:c3:66:61:d3:b2:a1:18:4b:84:
3d:35:d9:3b:33:45:d4:07:98:44:dc:b9:3f:45:d8:
8c:55:cf:60:9f:ce:03:a1:82:27:a9:0a:26:9b:b6:
91:bb:10:76:7d:c7:44:fb:93:2a:28:82:22:16:60:
e0:d5:66:d4:ba:6e:17:97:91:b8:bb:7b:0b:26:7a:
00:ea:28:74:e6:80:83:f2:11:03:f6:c9:dd:6d:cd:
36:24:10:de:3f:a3:60:09:8c:1f:10:3f:8c:1d:e3:
41:a7:18:73:29:aa:7f:0c:2c:e9:7b:d0:4f:1e:11:
ac:ae:3d:f0:bc:8d:ef:9c:2f:bd:ad:c2:84:b1:ed:
f4:4d:82:b2:06:20:ab:73:11:71:7b:e8:b1:de:51:
7a:c1:2c:9a:ec:c3:e9:75:74:01:c1:26:56:ae:81:
7d:e1:c6:24:48:a3:e7:dd:a2:6a:47:17:37:ea:32:
8d:e0:42:b3:c2:8b:b8:40:e2:49:5f:08:62:1d:d4:
d0:06:47:5d:c6:3c:a9:62:a5:a5:f9:24:36:32:aa:
38:2b:88:fe:40:fc:88:50:f0:5b:5d:e6:07:d5:d0:
b9:46:5d:a3:17:25:28:95:c9:d7:72:b1:60:cc:d2:
a2:69:8c:ea:ba:35:e2:ee:7c:0f:36:e1:91:b2:5c:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:12:74:BA:84:70:BD:20:EF:69:84:64:74:C1:C3:97:BA:96:D0
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:55:30:1e:87:6b:fd:ed:6c:cb:71:2a:e4:e6:ec:ba:cd:
53:ab:b9:72:48:ea:bd:1f:cf:8e:43:4d:24:47:5c:70:41:38:
6f:49:15:0e:90:b3:ea:66:c1:0d:68:65:bf:d3:28:ae:10:55:
20:09:df:19:a4:16:3b:bd:2c:1d:b9:1c:f9:a7:ce:28:c9:5a:
eb:b0:49:23:b8:65:14:f9:f6:78:d4:a9:a5:56:34:75:9f:03:
4f:02:2d:af:93:31:9e:f1:42:23:f4:46:8e:6a:03:d8:14:e4:
26:e4:d9:ea:2b:d2:37:9d:c4:d7:0d:c1:6a:cd:d7:e1:44:4c:
f5:2a:1c:ac:29:ad:19:e2:d3:1a:53:7b:cd:10:24:63:40:49:
2e:70:fd:13:01:c4:c6:04:38:03:8e:76:70:ab:7d:e5:33:58:
a8:f7:b9:99:05:55:0e:e5:eb:2f:fa:86:1d:8c:8b:c3:ea:1b:
37:87:45:08:f4:df:29:29:c1:71:cc:24:13:ad:a2:5f:f3:24:
ce:54:17:79:f0:4a:b5:61:f0:07:34:cd:8f:e8:b1:81:a9:c9:
0f:f8:07:cf:dd:ff:50:83:08:ed:e5:bd:6e:6e:68:6a:13:d7:
5f:e6:e1:4e:a6:b0:ff:ba:b4:b5:c6:cb:40:b3:63:d1:54:63:
54:45:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:14:28 2026 by rpki-client