Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: tcUjD0aTKDGtYBQYFXgYhp/egM9Vm0yMJLO6AYh/5a8=
Subject key identifier: F8:CF:D7:2F:44:9A:F0:15:55:DC:2A:5F:51:5C:72:46:08:A6:A5:A8
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01A107A68E2403D1EAC67E3A8BF9728B5D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 1AB0
Signing time: Sun 04 Oct 2026 16:01:58 +0000
Manifest this update: Sun 04 Oct 2026 16:01:58 +0000
Manifest next update: Mon 05 Oct 2026 16:01:58 +0000
Files and hashes: 1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: YBpVehdVeX2YU70Wb5kz200dWhi/dCmg3w9UF7zGnsY=)
2: S9k_0IlINL-KeGXzKJG1-aE0tUw.roa (hash: O/mE/4dpTNBbXj9EMpbseAy+oyk2TkWYstcB6Otmbbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:8e:24:03:d1:ea:c6:7e:3a:8b:f9:72:8b:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Oct 4 16:01:58 2026 GMT
Not After : Oct 5 16:01:58 2026 GMT
Subject: CN=f8cfd72f449af01555dc2a5f515c724608a6a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:dc:34:cc:48:42:7a:47:6f:d2:09:a1:9f:
5e:8e:4f:99:25:3a:30:09:f9:f9:08:d5:d9:c5:14:
aa:ed:4a:d8:97:b6:b4:e6:87:fb:6e:c5:9c:76:61:
ee:a7:e0:0b:67:d4:f9:91:83:00:1f:f8:ee:c5:f3:
88:2d:0e:b8:c7:5e:00:4c:2e:29:e1:e7:48:31:98:
c4:50:d0:74:ba:4c:e6:e8:d1:1d:ab:a9:eb:7a:be:
39:a6:c9:f6:6a:97:58:1e:d8:b2:1d:33:6a:e4:56:
83:aa:66:2d:21:5e:51:b9:3d:da:f7:49:92:33:4b:
e3:3d:34:6c:a1:1d:4c:a2:6a:a4:f2:18:e1:23:0d:
37:29:d5:ce:d6:d6:02:01:81:ae:ce:34:5a:c6:78:
56:40:fa:3e:5d:92:31:d4:12:2a:69:e7:14:99:e5:
eb:b4:75:bc:b5:79:e7:86:fe:9a:17:91:6e:85:4f:
6f:44:03:cd:73:0b:73:f1:33:6a:7e:cd:48:21:01:
59:bf:b2:1b:2f:c7:75:27:3f:39:0d:84:7d:b0:75:
93:f7:cd:8f:7a:3f:5c:15:62:18:bd:c2:57:33:68:
78:65:fe:5b:60:53:09:21:79:a2:bc:0c:b7:dd:92:
80:91:fe:8b:66:f3:e4:0f:62:38:0c:58:dd:e6:7c:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:D7:2F:44:9A:F0:15:55:DC:2A:5F:51:5C:72:46:08:A6:A5:A8
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:f0:8e:8f:66:ce:69:c4:65:52:50:52:cd:ea:cc:cb:1b:
ca:0c:e8:04:d8:92:5c:32:6c:70:35:66:5c:b2:d7:4b:d5:89:
02:28:83:38:21:da:d1:61:a3:c8:06:78:b1:c2:4c:7f:6c:27:
6b:5b:2a:67:08:76:24:e0:8a:a1:0a:57:55:0b:3a:3f:b5:51:
20:6e:2e:03:cc:de:98:f9:58:31:a2:04:02:fd:18:c0:ac:a1:
3a:7e:64:ff:9d:d3:7a:87:fe:cd:46:05:59:e2:93:1e:e4:d3:
4b:ba:a9:24:d5:75:e2:25:45:13:25:bd:d2:8f:b3:7a:b6:19:
dd:7f:58:1e:a3:db:35:56:3c:80:27:cd:91:34:04:a6:8a:4d:
43:73:1b:67:fc:8e:d0:a6:90:e8:8e:62:6b:5a:71:53:2c:7e:
94:15:92:c9:53:e1:6b:18:7b:7c:0e:ec:d9:1b:e8:52:36:e5:
3a:69:1b:b3:0e:a7:a6:59:d2:b6:a7:d8:f1:a3:a6:66:11:cb:
c9:38:28:87:30:59:d2:e1:14:6b:11:ae:94:cf:d7:6d:9f:e0:
44:7a:f8:1c:d8:be:1d:7e:c5:bb:6d:a5:06:5b:77:6a:bb:4c:
31:f4:df:c4:50:e7:d6:02:1d:2d:bc:e5:0e:43:15:5f:b2:4e:
7a:29:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:35:59 2026 by rpki-client