Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: sJefR9P0S8+PAddJBqLtVYCAeaUGm1v4XKSx90LtqNc=
Subject key identifier: 75:3A:A1:91:48:6A:F3:A9:3F:D0:CA:BC:74:55:4D:A5:49:D4:6F:77
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 01A0D2DE7FD8CA6098EEBEDF62224AD53A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0BAA
Signing time: Thu 24 Sep 2026 10:03:12 +0000
Manifest this update: Thu 24 Sep 2026 10:03:12 +0000
Manifest next update: Fri 25 Sep 2026 10:03:12 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: pJ6Jib0s+J8ghZvQv6KIADxVk0ME5J56i+hG1/QobIo=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:7f:d8:ca:60:98:ee:be:df:62:22:4a:d5:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Sep 24 10:03:12 2026 GMT
Not After : Sep 25 10:03:12 2026 GMT
Subject: CN=753aa191486af3a93fd0cabc74554da549d46f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:78:d2:9e:7c:79:1c:9b:65:5f:3c:5b:47:
e6:40:f4:83:34:f1:78:04:3b:05:48:4e:bc:e1:c9:
e4:e4:fd:e7:08:3f:80:ae:c4:24:bd:bd:d0:3a:b3:
93:37:54:6c:90:cb:c0:f6:2b:45:63:40:a0:2a:30:
39:96:cb:3c:4d:a2:23:3e:8f:82:2b:8a:71:34:0c:
a2:90:0a:50:14:00:d4:98:8f:cc:0c:07:b9:3e:54:
b3:cf:97:52:de:61:49:9b:06:ac:ad:0c:c1:9d:41:
58:c6:9a:b4:81:4f:10:3d:67:91:e1:02:89:d1:4c:
24:8f:84:1b:2e:4a:bd:05:b7:9a:08:cb:1e:65:6c:
f3:89:63:78:00:7e:31:3f:21:2c:d6:6e:47:63:69:
64:a8:95:3c:32:1a:d4:cd:4f:4e:ba:e8:8a:4c:f0:
42:d9:88:98:e6:5a:0d:d5:3e:27:f8:0d:c1:e2:4a:
fc:6f:c8:e7:44:cc:04:b9:05:8c:a5:06:d7:f7:d9:
b2:a9:19:6e:81:22:31:2d:cd:c6:40:24:8c:fc:7d:
a7:5f:62:bb:b7:6d:76:c8:5e:5e:dd:0b:dc:51:ad:
60:27:03:46:5e:ee:ce:38:2e:6d:21:9d:b0:11:0e:
e6:b6:12:33:a4:bb:b3:5c:fc:cd:1d:67:96:4c:8b:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:A1:91:48:6A:F3:A9:3F:D0:CA:BC:74:55:4D:A5:49:D4:6F:77
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:9d:92:97:dd:90:bd:fc:c9:83:c7:ba:d4:bf:59:ef:09:
b2:f9:1c:b6:51:af:4c:2b:50:12:a8:7d:90:ed:45:10:95:b0:
5e:69:f2:8e:60:0b:cd:43:a0:f3:bc:7b:09:22:c4:3b:36:a1:
87:37:a5:50:00:54:fc:6d:c8:7c:e2:4f:a1:34:36:37:6b:69:
52:fb:ad:e4:8f:00:9c:2e:23:b7:6b:ce:f4:7f:1b:41:08:ee:
43:21:03:55:da:c2:8b:90:38:bb:3d:64:54:96:89:82:54:76:
d0:f8:e4:99:96:25:e3:c9:65:15:cd:88:c3:2a:30:02:5c:e4:
ca:89:3c:a1:53:29:a2:81:d0:5d:e0:ff:df:01:f2:c9:7b:8b:
40:e8:76:8d:13:6c:b4:35:cb:12:77:15:93:34:95:c9:c6:d0:
82:96:3f:fa:9b:0b:fc:91:e9:db:d2:81:02:bc:01:dd:60:19:
af:1c:34:ab:c7:be:2e:2e:c8:c2:1a:f3:b5:89:f6:79:a3:54:
3e:45:ad:53:a1:20:cc:0b:bf:22:3e:10:ac:dd:5a:84:39:88:
d6:e9:af:0f:fa:93:cd:0f:6d:79:49:48:b1:ae:42:7e:f1:75:
63:e3:a3:56:03:33:5c:1d:52:5b:85:50:5f:dd:0a:cd:53:c8:
1b:d3:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:33:38 2026 by rpki-client