Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
File: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft (raw, json)
Hash identifier: aPm+YadLIzoK9Y/u2DsJWhv1pFBj2pVhA9R+YhdDmGo=
Subject key identifier: AF:DD:19:72:C3:87:B0:B3:E2:E5:2B:5C:DD:61:F3:78:66:D0:8F:2D
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Certificate issuer: /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial: 019F85D6F557A58FE52D05CDDF4922AA0635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:24 +0000
Manifest this update: Tue 21 Jul 2026 18:01:24 +0000
Manifest next update: Wed 22 Jul 2026 18:01:24 +0000
Files and hashes: 1: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl (hash: cOh+Dc3UR2KteZGehtqvR74yCUU8b16uCFaehuaipik=)
2: O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa (hash: NAJt8mOJoxYYW9MXtdTP+WC2VQ+5i9NPNpJvzgY1wPI=)
3: VNXUTkLhTELCHL_xYmLDqoTk_E8.roa (hash: Y3N0C2Cl9/mbPajcJg1hote0RwDtUuKBwQjft6/aYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:f5:57:a5:8f:e5:2d:05:cd:df:49:22:aa:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Validity
Not Before: Jul 21 18:01:24 2026 GMT
Not After : Jul 22 18:01:24 2026 GMT
Subject: CN=afdd1972c387b0b3e2e52b5cdd61f37866d08f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:3e:ac:c8:34:c2:40:6c:4f:59:b9:27:76:
98:a6:02:3a:26:a4:13:63:46:31:e7:5b:74:4f:f6:
88:2d:93:d2:92:69:d4:9f:bf:28:f3:6e:d8:65:54:
cb:49:ef:73:94:a9:bb:da:e6:d4:07:25:16:e5:29:
c8:40:1d:f3:23:b0:cc:cf:19:8c:31:c5:fd:56:d6:
fa:aa:99:16:56:2f:75:2b:61:ff:f8:9e:72:ed:93:
5f:b1:9d:2e:11:86:97:26:6d:55:97:8a:26:2d:24:
b6:41:2c:60:c9:66:34:54:29:86:c2:ba:61:17:47:
53:5c:61:24:42:72:eb:90:5a:2b:6d:f3:3a:17:37:
28:bf:00:67:61:93:8c:82:8f:cd:75:44:af:62:45:
d3:20:fc:5d:f1:60:d1:6b:06:b1:7d:f0:8a:03:53:
5e:bc:88:4a:b2:1b:e3:6d:14:05:9f:3f:e9:d5:14:
32:68:79:c5:06:03:40:17:e6:86:9f:29:72:c8:d8:
21:2f:53:eb:1a:08:25:3f:eb:4e:f2:5d:4f:53:4c:
d6:53:d2:71:3f:de:dc:8d:39:a9:09:ae:a8:cf:3b:
5f:00:da:65:10:91:d4:66:2d:f2:39:44:68:92:b4:
33:85:b3:ae:0c:d0:65:bf:0c:74:76:44:e4:6d:b4:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:19:72:C3:87:B0:B3:E2:E5:2B:5C:DD:61:F3:78:66:D0:8F:2D
X509v3 Authority Key Identifier:
keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:88:7a:4b:72:f5:7c:4e:0b:06:99:27:30:6f:79:1c:78:51:
f8:4d:37:3a:eb:23:54:c3:25:51:53:5c:7b:39:68:a9:0a:87:
87:55:b0:8a:ef:77:5f:9a:8e:7e:7f:f6:c5:71:0c:48:1b:a9:
62:c0:44:59:bf:13:96:2c:02:91:f9:bd:e9:20:c3:f4:0a:71:
25:1e:b1:78:e1:9b:1c:ca:f5:0d:03:04:f1:87:1d:31:74:a6:
8d:d1:44:89:50:e0:ba:54:4e:4a:a0:6f:32:2b:6c:8a:c0:90:
5b:3e:38:ef:65:03:66:e7:9a:f5:a4:af:27:20:5c:5d:5f:f5:
c9:d4:6c:5e:6a:50:04:36:2a:31:f6:02:2c:46:f3:e9:f4:7e:
fe:18:36:e3:98:82:44:a6:c5:f3:70:fa:1a:e7:2e:7d:84:3d:
a4:c7:de:98:b8:18:7a:34:89:b5:bd:54:15:c8:07:6b:af:8e:
73:04:60:0f:88:cc:cd:e6:19:c6:59:e6:b3:0e:b7:a9:4b:4d:
21:cd:6e:29:a5:45:09:e3:71:8e:85:e8:53:c8:47:f5:cd:5d:
f0:a3:cd:ed:3e:83:b8:d7:a6:ef:66:84:5a:18:4d:e1:42:50:
d8:d5:26:d0:1d:ea:08:6c:ab:87:bd:a7:bc:a6:c8:7f:75:5b:
f2:00:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client