
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier: VwpbhaNxSSlSBO3FfLoO1W2/uk41rJnpoAfSO6Wd880=
Subject key identifier: 27:43:2C:45:E5:C3:25:00:62:CA:9B:AC:7A:F2:53:9C:87:3A:5F:51
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 01A15F6936F41B6990A4DA86CDF77A6559D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number: 10DC
Signing time: Wed 21 Oct 2026 17:01:33 +0000
Manifest this update: Wed 21 Oct 2026 17:01:33 +0000
Manifest next update: Thu 22 Oct 2026 17:01:33 +0000
Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: wQwHk2HNlT0tLMQCYXxotkN3KlCZanE5pZMkQdPKJg4=)
2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:69:36:f4:1b:69:90:a4:da:86:cd:f7:7a:65:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Oct 21 17:01:33 2026 GMT
Not After : Oct 22 17:01:33 2026 GMT
Subject: CN=27432c45e5c3250062ca9bac7af2539c873a5f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:47:45:ec:89:59:75:c1:5a:53:3e:d1:1a:
b4:6a:3c:f1:7a:02:73:9d:7b:ce:e3:64:bd:8c:4e:
e0:dc:2c:7b:05:a7:7c:7e:9d:62:83:4d:7e:ec:b6:
40:b2:1b:0f:48:ce:51:77:dd:0e:b9:87:2b:9a:6e:
fa:d0:27:3b:05:d2:6f:64:84:e4:3b:68:a8:71:51:
5f:d2:10:b8:94:8e:9a:c6:95:45:82:8f:16:04:e8:
4c:a9:12:64:07:34:dc:ee:e9:23:14:47:ff:5b:05:
28:00:37:14:71:7d:1c:f6:59:47:87:c1:1d:e4:50:
c3:ad:d7:52:72:60:eb:03:90:34:e0:cb:73:ca:ef:
d0:01:21:5e:8b:8a:5a:04:69:46:54:95:5c:0f:aa:
60:9a:5f:0a:e4:ba:2d:9a:3b:ed:d9:a0:39:59:71:
34:d5:26:92:81:95:c0:b8:83:82:2e:47:f7:52:e2:
16:a2:53:ea:68:fd:c7:3a:7f:fd:a9:2b:65:e0:81:
59:d4:8a:96:f0:58:bd:6d:a1:9f:07:62:23:ce:62:
a8:ca:0b:c4:a7:ac:1d:d3:37:97:5d:51:7f:38:d2:
58:25:91:b3:b7:b2:1b:5e:ad:c7:dd:be:4f:cb:f0:
e2:20:2f:bb:53:55:a2:72:6e:9d:d5:21:ce:b6:e7:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:2C:45:E5:C3:25:00:62:CA:9B:AC:7A:F2:53:9C:87:3A:5F:51
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:9c:bb:2d:a1:6d:d8:7b:92:99:c0:20:76:40:74:c0:c1:
b2:eb:59:e9:7a:58:9a:c5:f9:11:e6:bd:61:58:36:9c:1f:ea:
7f:4e:41:96:50:77:66:11:06:10:85:1f:b3:a8:c4:76:3d:59:
7b:fa:d5:53:83:8c:5c:dd:d2:d7:3a:1e:9f:30:b5:e3:59:33:
36:1a:3a:7f:b4:0e:fa:6b:0a:38:02:ca:1f:48:ff:03:af:a0:
2e:4d:b1:31:0c:24:32:ec:a3:5c:be:0a:87:43:c1:96:5b:6b:
e2:23:91:aa:82:56:aa:b8:76:a5:2a:d9:db:74:80:eb:ff:64:
61:ad:34:15:a1:72:aa:c8:b8:a0:04:55:65:cf:2f:c4:ac:32:
63:1c:b1:9b:83:01:4d:20:12:6d:e8:39:20:c8:37:85:7a:ed:
5f:09:d2:aa:63:e9:44:c7:7f:23:84:87:d9:50:5b:ea:b6:ef:
43:0f:2f:81:72:45:e9:fe:68:e0:14:1a:b9:07:1b:8e:08:4a:
21:ce:e3:99:02:de:a3:ab:d8:db:01:5c:f3:ec:43:f2:17:b9:
a4:b9:8f:08:ca:1d:61:04:68:14:f6:c0:3f:0f:fb:96:98:b0:
74:25:7f:16:0b:c7:a6:d4:95:dc:9c:59:ab:b9:bc:34:55:cb:
6e:d9:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:54 2026 by rpki-client