Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: 1IGantdSncIXVkFqDZjDGgdl96tPrw1RgGgGC/QJd1I=
Subject key identifier: FC:49:49:48:85:D0:B5:DB:3D:BE:A0:4E:5E:D8:53:5E:D2:D9:1A:8A
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01A084F84B25B4C873F2F37B5EFA63D40904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0EAF
Signing time: Wed 09 Sep 2026 07:00:59 +0000
Manifest this update: Wed 09 Sep 2026 07:00:59 +0000
Manifest next update: Thu 10 Sep 2026 07:00:59 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: m2d5MWxV6UwSC+yHplnpUbRjwP8Rl+jFtFN0JkbyiXY=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:f8:4b:25:b4:c8:73:f2:f3:7b:5e:fa:63:d4:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Sep 9 07:00:59 2026 GMT
Not After : Sep 10 07:00:59 2026 GMT
Subject: CN=fc49494885d0b5db3dbea04e5ed8535ed2d91a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:a7:23:1a:55:86:cd:62:90:7c:56:40:44:
c7:a4:6c:40:d2:3c:d7:42:d9:92:58:e7:d7:df:ce:
f3:ff:a5:14:97:b9:7e:f8:37:77:86:e2:fb:1a:4c:
0a:09:0e:d9:45:9b:c3:e9:fd:a6:47:4f:f8:8a:75:
87:9f:81:a3:e4:14:60:29:0a:85:bb:10:7c:cc:74:
5d:10:01:75:d6:32:f5:ce:4e:cf:c6:8e:e9:f4:5f:
f2:17:ce:0d:c0:f1:16:07:3d:24:ef:e4:3f:83:eb:
b0:80:68:fb:82:06:45:d8:30:4b:1e:f4:53:b9:e1:
d0:37:ed:c2:1b:aa:1a:5f:a3:57:42:fb:38:a5:35:
0c:44:d7:e2:6b:27:3d:f6:53:18:e7:d8:0c:49:8a:
69:ab:58:c7:2f:68:bd:42:cf:fb:c7:46:0a:95:13:
47:2c:9a:06:28:8a:97:07:a8:eb:28:79:45:20:bc:
c4:27:33:1a:96:31:78:70:0f:d3:2c:8c:62:30:76:
03:e2:f5:5a:13:f9:c6:c6:83:9d:40:59:4f:a2:f7:
7f:9d:9e:4a:a6:f3:76:c7:f9:8b:ad:aa:24:ee:fe:
22:dd:ce:a0:45:d0:6f:19:e3:3b:88:58:6e:88:76:
9d:6b:3f:81:78:43:02:4a:fa:e7:12:73:9b:ee:c4:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:49:49:48:85:D0:B5:DB:3D:BE:A0:4E:5E:D8:53:5E:D2:D9:1A:8A
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:13:58:c8:df:fa:97:20:cf:3a:2c:2b:75:74:9a:d5:2f:
96:e4:17:eb:76:1c:94:c3:38:9c:5b:37:45:20:8f:8b:f2:74:
8e:46:ba:bd:45:72:ca:9f:68:07:82:d4:34:c6:7b:69:0f:3a:
85:1b:95:55:3c:4a:76:8f:fb:be:44:d3:16:61:47:37:b9:1b:
d9:9b:0e:9d:c6:bc:70:f9:4e:6d:59:6c:27:77:72:6b:f8:48:
52:54:c0:84:0e:0e:a2:10:11:8b:b8:7f:56:e4:d3:40:99:78:
30:5a:6a:72:25:80:f9:76:86:e1:bd:38:2e:66:61:29:9a:1b:
cf:b5:0b:59:3a:c3:d5:e7:80:06:56:be:5a:41:0e:78:fc:26:
46:e0:cd:ef:3c:c1:5c:71:61:68:7b:d3:ab:dc:52:8c:28:8e:
cf:5d:21:36:0f:ff:d3:06:1c:b9:d7:d3:0f:15:fb:05:2b:e0:
7f:96:c0:ff:81:5c:aa:b7:75:a3:39:a6:37:bd:56:d2:b7:a2:
5a:c8:c6:b2:fa:57:2b:6e:79:70:a1:68:06:98:00:42:4b:16:
c9:73:49:5a:45:81:23:b3:57:6d:32:80:e5:db:ca:d9:60:cb:
13:f1:a0:7c:26:be:dd:9b:1e:fe:a6:1a:6c:0d:e1:ee:c7:1c:
1d:38:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:21:28 2026 by rpki-client