Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: yw2SeLwi9p51+axxQ7O2czadH0+ug2HS6OyeQsop7Es=
Subject key identifier: E9:14:71:62:E8:F0:DF:12:48:3C:BB:0C:88:EF:C2:D3:B0:A9:96:FD
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 01A1908C0B9044D80A3523C663342CEB6CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0F31
Signing time: Sat 31 Oct 2026 06:00:59 +0000
Manifest this update: Sat 31 Oct 2026 06:00:59 +0000
Manifest next update: Sun 01 Nov 2026 06:00:59 +0000
Files and hashes: 1: C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa (hash: 5oNWWP9JATtZbQ9s/+0aWJ+9EOmStquNZlSy9y4pgxk=)
2: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: /ZfTFy2HN/2ogiUKke4yqem79LDjkghW8CPQ7ebYciA=)
3: HNkiKtIomNoYZ41hjRiwhD40-iE.roa (hash: 7gzZ4thPtC/HiasIMZqtWoVWvXNMp0vHFfmmHuAr/UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8c:0b:90:44:d8:0a:35:23:c6:63:34:2c:eb:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Oct 31 06:00:59 2026 GMT
Not After : Nov 1 06:00:59 2026 GMT
Subject: CN=e9147162e8f0df12483cbb0c88efc2d3b0a996fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:de:50:ab:d3:7f:7b:ab:d5:9d:27:99:dd:
d3:b3:d3:94:22:c2:9e:7e:e1:10:4d:22:ff:fd:a0:
7d:99:64:53:f2:64:f3:76:61:fb:71:ad:5e:79:73:
cc:cd:8d:f9:2f:4f:9d:83:94:a3:40:c9:84:27:10:
eb:a2:f1:d5:df:da:0f:7c:ba:09:d9:02:bb:37:3f:
f1:ac:c2:1c:ed:ef:af:63:44:ef:d5:0b:f0:50:f3:
17:5d:82:02:32:34:51:3d:6b:b6:c5:f2:4b:7a:3e:
88:18:a7:8a:ad:6e:ca:3d:bf:88:78:c2:3f:73:3a:
72:f4:9d:49:fd:a2:b9:3d:ef:e6:4f:d5:62:32:1e:
d5:18:da:b5:17:2c:6e:5b:89:74:3f:7a:1a:aa:51:
a3:f0:e6:28:6c:9a:5b:e4:45:9f:bd:3e:bb:88:f8:
8c:88:83:be:69:da:29:e6:b1:17:35:b7:98:8f:21:
75:7c:ee:23:cd:4a:44:5b:01:7d:43:e0:24:d0:f7:
c0:fa:ee:69:25:ea:98:fd:8d:7e:a2:c0:fb:9b:06:
ee:45:98:0a:29:00:10:3b:a0:2d:7f:1b:8f:f8:fb:
01:11:d9:26:44:0e:32:b9:77:f2:ad:0b:18:5c:a9:
83:0c:e0:f7:26:2c:ac:b3:55:0f:93:19:19:49:66:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:71:62:E8:F0:DF:12:48:3C:BB:0C:88:EF:C2:D3:B0:A9:96:FD
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:2c:7e:60:35:d5:fe:a5:1b:4e:50:10:ca:98:b8:c9:04:
30:09:89:40:5a:14:d5:dc:f2:31:c9:f0:a7:34:b3:d0:8b:b0:
d1:92:23:93:99:30:e9:12:0c:7f:4a:fb:06:8d:08:b5:02:42:
53:fb:16:f2:aa:21:92:fb:78:22:71:11:18:66:1e:a7:04:bd:
df:6f:f3:91:0c:36:f6:e2:a2:64:81:3e:59:de:5f:e5:28:98:
8a:c0:27:95:f3:9e:32:bb:5d:85:27:66:10:f5:0c:d4:1c:09:
a3:a8:fa:41:46:3f:1e:6d:87:5b:12:74:44:7f:76:df:41:76:
0a:b8:e9:62:6b:73:a9:77:90:67:58:61:f4:c1:93:40:66:e7:
c8:4d:dd:91:23:20:75:a5:9f:d6:e0:a7:54:ef:df:06:af:fd:
6f:a6:54:a6:2e:17:4d:98:12:67:e6:df:5f:fa:68:5e:b7:92:
41:45:9e:a5:e0:26:f1:2f:09:b7:c2:ab:a4:2e:8e:d8:3f:a2:
c0:e0:f1:95:de:0f:f1:d3:97:84:7c:c8:df:60:8d:0d:3a:80:
ce:75:cd:58:62:2f:3a:75:fd:50:3d:99:17:ee:93:da:92:57:
f6:00:5a:36:2b:8e:05:68:53:b7:84:37:1b:ac:18:f8:f0:0f:
5a:6f:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:09:52 2026 by rpki-client