Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier: YpD8tkQEJOQtFCcJeQPKTeiu5aV8oWbmdfasIx9sjvk=
Subject key identifier: E7:69:07:FF:F7:92:99:C3:DF:B2:5C:85:87:E8:26:B5:DF:CA:2C:86
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 019DB2EB79D2EFEBB599684F44DF6F75E116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number: 0EF5
Signing time: Wed 22 Apr 2026 02:01:09 +0000
Manifest this update: Wed 22 Apr 2026 02:01:09 +0000
Manifest next update: Thu 23 Apr 2026 02:01:09 +0000
Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: u2/3zx84yKI3zp0uMW2tpe+GXSuM3zMYz1wVC+dzcsI=)
2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:79:d2:ef:eb:b5:99:68:4f:44:df:6f:75:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Apr 22 02:01:09 2026 GMT
Not After : Apr 23 02:01:09 2026 GMT
Subject: CN=e76907fff79299c3dfb25c8587e826b5dfca2c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:3b:32:da:c8:83:27:b3:28:c9:9b:3c:a4:
05:12:49:79:1b:fc:51:5a:b5:52:de:b4:4b:32:c0:
71:9f:2b:a2:63:dd:11:6a:50:40:b7:eb:27:92:98:
e8:0a:03:ce:d8:d9:26:a6:31:3e:34:76:47:f2:75:
78:8c:79:c3:00:8e:b8:f2:8f:9b:39:95:8f:24:74:
c5:67:aa:16:99:85:bf:e6:7a:f5:7f:71:9c:fa:78:
2a:f5:27:a8:e4:7b:a4:08:44:4e:3b:fe:d1:c2:13:
a8:5e:1d:ce:63:01:c6:c6:4e:fc:c7:20:a2:8f:86:
64:5c:d9:04:28:a4:f4:26:0e:a0:6f:3c:f1:64:52:
ff:5e:8b:79:63:8c:c1:db:8c:63:ab:92:64:1d:ca:
dc:5c:1b:3f:c4:79:00:ea:cb:fe:b4:0f:79:b9:c6:
32:0a:48:93:2a:88:78:65:cc:62:64:ab:dd:8d:78:
f6:fe:39:08:fc:06:29:76:ae:f1:11:a6:20:ba:41:
38:2f:1b:43:38:4c:47:ba:71:4d:d8:fa:97:e8:0b:
42:b8:6b:01:d3:fe:1e:fc:00:2a:53:ff:d3:a7:d8:
bd:0b:23:78:fa:68:9e:7c:ab:6e:ee:8c:c2:9f:fd:
e1:30:da:29:6a:d1:38:10:18:07:04:32:0f:d7:d5:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:69:07:FF:F7:92:99:C3:DF:B2:5C:85:87:E8:26:B5:DF:CA:2C:86
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:43:37:b1:34:8f:96:c6:e3:dc:20:32:b3:cd:3a:a7:a3:
50:cd:21:ac:25:51:ac:d0:ac:f0:0a:1c:8b:f7:99:94:75:32:
43:5e:d8:19:7d:82:17:b0:ca:bc:5d:7a:0d:b3:07:28:f8:29:
aa:3f:a6:eb:9d:98:5e:08:82:ea:79:e0:35:2d:4a:48:6b:2b:
87:41:9b:95:84:73:66:e7:ed:d8:f7:13:42:72:4f:94:5b:f7:
9c:e3:b9:f2:e4:d7:0e:7c:00:93:09:cf:bb:32:3d:04:6d:f7:
be:b1:92:12:53:ab:46:3d:f0:b6:d5:d4:39:9d:22:22:cc:d3:
69:46:89:02:39:b1:76:ae:7a:fa:83:ce:01:4a:c8:a1:2f:f5:
74:49:e3:1f:03:3e:cb:a0:c6:32:61:c0:c6:b4:58:fb:7d:50:
17:45:8e:09:ad:39:6b:a8:34:c5:2f:91:d3:28:8c:3f:52:83:
bb:13:a7:9e:7a:4a:18:a0:27:39:51:d0:d8:ac:e4:4a:56:03:
fe:d3:f3:b4:87:88:cc:0c:78:40:6c:f6:90:ac:4a:6a:25:e9:
1d:39:0d:e4:67:78:ff:b3:f8:2d:8f:a2:dc:1d:b0:5f:8b:0c:
e0:c4:62:ee:15:51:97:5e:38:7f:58:93:4a:87:4c:1a:5d:b0:
25:60:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:40:03 2026 by rpki-client