Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File: Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier: u9G55zQtRzkcNEudVG5FG2LRT4S5P3lrKUoGcwbMIgI=
Subject key identifier: 32:4A:8A:77:F7:04:50:EB:C0:C0:5D:13:8A:E6:31:97:37:31:39:FF
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 01A165D9237B30C6A262D25AC226E345E88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number: 1ABC
Signing time: Thu 22 Oct 2026 23:01:31 +0000
Manifest this update: Thu 22 Oct 2026 23:01:31 +0000
Manifest next update: Fri 23 Oct 2026 23:01:31 +0000
Files and hashes: 1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: JlnUkVKY7adrfWg4CZFivdojBtDGjp17Q2BaquFkqCY=)
2: QQeKybyvUtPZq8rtSA1qJFplh-8.roa (hash: Q+OBW6DZJdlZ5hkFmp4+rBZr4bNQDjXlXvwILFLY5Hw=)
3: fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa (hash: pvDkmaTgQN4sNGe38GsqD+fJLQuvpfb1vbqdHC2CF7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:d9:23:7b:30:c6:a2:62:d2:5a:c2:26:e3:45:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Oct 22 23:01:31 2026 GMT
Not After : Oct 23 23:01:31 2026 GMT
Subject: CN=324a8a77f70450ebc0c05d138ae63197373139ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:aa:21:f2:d3:55:81:21:32:8a:dd:fb:de:
65:ee:45:ad:25:83:4e:23:1b:0a:57:36:77:e1:49:
f4:cf:98:40:e2:9d:c4:b9:d6:ec:de:75:3f:f6:c8:
bb:07:08:9f:bf:97:fc:7e:61:59:54:7a:05:71:0d:
f3:7c:7a:11:01:49:ae:b9:fb:a7:98:bb:a8:9b:47:
3c:e6:5f:2a:48:73:74:c9:ea:5e:b6:85:d4:dd:07:
d8:a5:a9:b7:c2:e8:d5:99:25:3e:a3:25:16:fe:65:
13:d8:b4:d9:a9:7f:51:59:89:5e:af:b3:5b:fe:7c:
7b:40:5f:42:27:fe:6a:71:85:15:65:d9:f3:4d:b4:
9b:be:d6:4f:c0:03:1c:ca:71:f9:2b:71:19:1c:29:
73:b4:20:e4:fc:1b:ad:8f:eb:97:0f:e1:2f:6b:3d:
c8:09:38:4d:d5:ec:74:cc:e1:21:b6:ed:75:a6:ed:
e1:98:53:9b:1c:ef:bc:0a:64:75:d6:39:65:3a:84:
89:4d:40:74:1d:3d:61:16:9d:84:7a:6d:7e:a1:52:
92:9d:18:67:0b:5b:e8:8d:0c:05:7e:93:ef:5f:a9:
2d:43:eb:16:b0:3c:19:8a:45:b5:82:e5:b7:c1:78:
b4:9a:02:ca:aa:c5:e1:99:84:48:97:ce:f2:49:1c:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:8A:77:F7:04:50:EB:C0:C0:5D:13:8A:E6:31:97:37:31:39:FF
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:67:62:19:f2:78:30:82:98:6f:dc:47:a4:af:f3:f7:40:c6:
9e:6a:d1:32:e3:ed:0b:b4:4d:85:80:3e:a7:d1:4a:79:45:65:
0d:5e:df:54:db:a8:a2:0b:32:24:44:51:5c:5f:0a:f6:23:f6:
fd:14:8c:4e:5d:da:2c:97:10:83:e4:10:41:68:66:36:fa:bf:
5c:88:13:6e:07:38:43:12:b7:d3:17:a7:7c:1f:27:69:c9:a4:
8d:75:76:ac:ba:6d:eb:e5:0d:a9:f8:8b:97:d7:bd:ee:42:aa:
65:51:ba:ff:99:1f:8f:9e:4b:23:b9:ca:66:9f:6b:cb:18:62:
ef:90:1d:a1:d6:06:49:e4:5b:c3:5a:11:af:ba:a6:22:c4:71:
44:52:36:7e:5b:5f:ea:f4:99:94:33:f1:ac:8f:c1:c1:f8:c9:
8c:51:7e:d3:df:8e:77:3b:4e:e3:0a:66:47:fa:77:22:ce:35:
c7:40:e8:98:b7:c5:ce:e2:62:fc:f4:06:4d:11:5b:2c:63:e5:
7d:da:87:12:e5:6c:ff:f3:a9:a7:a8:c6:61:97:de:45:ca:df:
70:4f:bb:9b:f9:18:8e:de:96:1f:ea:8a:75:48:be:2a:4f:09:
d4:cb:fd:c7:1d:40:3c:0e:26:cd:68:3d:59:d7:5f:54:71:d8:
6b:c0:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:10:35 2026 by rpki-client