Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
File: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft (raw, json)
Hash identifier: aq/pJ2czVQWGQYuL7XI9lm6yTx8sXBnMSkc6hQMW92o=
Subject key identifier: 3B:8A:D9:25:D3:1D:0C:A2:EF:0A:B5:BC:E0:26:E0:F2:CE:84:7C:1E
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Certificate issuer: /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial: 01A16E6ECBD2D90F16DC9BEA4B157758918F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
Manifest number: 0137
Signing time: Sat 24 Oct 2026 15:01:57 +0000
Manifest this update: Sat 24 Oct 2026 15:01:57 +0000
Manifest next update: Sun 25 Oct 2026 15:01:57 +0000
Files and hashes: 1: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl (hash: jGbwzXx0YVuo7s0+wKDZpGcCoa6DASWDHUtPx9avdWA=)
2: O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa (hash: NAJt8mOJoxYYW9MXtdTP+WC2VQ+5i9NPNpJvzgY1wPI=)
3: VNXUTkLhTELCHL_xYmLDqoTk_E8.roa (hash: Y3N0C2Cl9/mbPajcJg1hote0RwDtUuKBwQjft6/aYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:cb:d2:d9:0f:16:dc:9b:ea:4b:15:77:58:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Validity
Not Before: Oct 24 15:01:57 2026 GMT
Not After : Oct 25 15:01:57 2026 GMT
Subject: CN=3b8ad925d31d0ca2ef0ab5bce026e0f2ce847c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:a5:b7:ce:1e:b1:5b:83:07:04:b2:0f:d3:
89:15:dc:a0:d5:d3:df:55:7c:44:84:c2:cb:8b:ff:
29:4d:67:c4:d4:21:90:39:0e:6a:55:92:f2:a4:27:
f4:63:e0:3a:e4:d6:36:d9:11:78:1f:55:36:8f:68:
69:6c:2c:56:76:91:aa:4a:71:77:c4:5f:76:e8:0d:
15:7f:95:3e:33:46:67:66:57:7d:8a:66:95:a1:41:
b4:c1:4e:f1:79:89:36:5c:e9:c9:6c:4e:53:bf:aa:
a6:f4:73:19:9b:03:1d:38:3d:28:fc:b2:26:65:45:
6c:5c:b3:c1:2e:3f:09:8e:38:aa:cd:4e:98:d6:a3:
f8:cc:e0:a2:e3:be:cb:5f:11:b4:53:dd:33:41:f0:
8b:d1:0c:37:95:ff:37:0c:04:3e:01:71:78:02:f7:
b6:98:67:89:c7:8d:05:1f:b2:81:8e:57:60:d2:72:
63:4e:35:b0:a7:d4:67:78:84:66:ff:e8:fe:08:23:
ff:e9:85:03:25:30:1e:be:f6:b7:5c:3c:fb:1b:37:
00:cb:ef:8a:fc:05:86:ac:56:ff:5f:34:f9:20:7e:
d9:3f:3c:28:d1:69:46:9e:ce:2d:ac:9c:77:27:54:
f4:e7:36:d4:af:6b:31:4b:88:57:b1:fd:1c:52:68:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:D9:25:D3:1D:0C:A2:EF:0A:B5:BC:E0:26:E0:F2:CE:84:7C:1E
X509v3 Authority Key Identifier:
keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:10:ec:b8:f2:73:d7:42:f7:37:30:44:d0:29:96:6d:18:
56:4a:dc:a7:1e:74:69:51:7f:90:fc:28:06:67:73:df:8c:94:
d4:ff:49:d0:d6:3f:66:7b:fb:f1:bb:45:13:cb:9a:bd:b9:a0:
7f:21:6c:28:cc:55:2c:f9:b5:a3:4f:fc:f1:21:5d:39:59:b1:
6e:1d:27:be:07:26:3c:b0:fb:98:d7:b9:04:d7:16:db:88:54:
95:c7:c8:4e:4c:40:63:17:12:29:53:16:f4:e6:b6:13:ed:6a:
eb:82:59:07:c2:b2:41:5b:42:a8:2d:35:e3:b3:be:c1:f6:fd:
fd:48:de:42:82:0d:63:c1:5a:1d:73:ac:5b:97:f8:46:31:ee:
bd:49:fc:26:14:f8:04:d8:59:d3:94:89:1e:e9:69:ae:66:cb:
ec:e4:77:97:a8:a6:21:2e:c0:23:1e:8a:4b:a0:dc:b0:da:28:
0f:98:c2:c7:27:46:b0:87:e6:9e:22:18:65:9e:a5:bd:6f:79:
c6:d0:07:60:30:13:4a:88:18:f8:24:87:91:23:96:54:7d:3b:
01:25:d8:4e:b5:6e:9a:33:eb:6a:d1:17:b8:a6:23:eb:07:71:
2a:15:b1:61:c7:a3:f5:2f:78:06:61:f2:6c:1d:7b:ae:bf:e9:
c3:8b:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:35:55 2026 by rpki-client