Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: BbMDCK+jKcQeT7E+bvUqVZkf9i2IzPYeXG/9xkuSmF4=
Subject key identifier: B7:2D:B9:E3:95:C1:C9:17:AA:A0:75:CA:33:81:01:01:48:AF:04:EB
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 01A13DB7C2882CA0DDA68CC8F13F381073FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 17E6
Signing time: Thu 15 Oct 2026 04:00:15 +0000
Manifest this update: Thu 15 Oct 2026 04:00:15 +0000
Manifest next update: Fri 16 Oct 2026 04:00:15 +0000
Files and hashes: 1: 35j3JWPy_gfQ8IJydes2T32UfD8.roa (hash: bFANH4u5HSUaBdCzSi590NOIRbkFqZQOQ4XUrZaOIMs=)
2: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: TTNK6ra62LfqFoRzpRi2conpUpSDxTYNNLMgaQHFgw0=)
3: XK0m0Pr_M1n7_9Re4oco76jlzZc.roa (hash: BSQbeCjlRQr5nCR6DSa7bFG7b34dlUTtYp0pj5h5oMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c2:88:2c:a0:dd:a6:8c:c8:f1:3f:38:10:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Oct 15 04:00:15 2026 GMT
Not After : Oct 16 04:00:15 2026 GMT
Subject: CN=b72db9e395c1c917aaa075ca3381010148af04eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:48:bc:de:65:dd:45:2f:3b:a8:49:6b:ca:
5f:2d:f4:dc:a1:b6:c3:94:64:af:95:e5:db:99:b4:
9a:79:e5:a9:59:6a:b4:30:8a:5a:0a:10:8b:c4:42:
5e:62:91:c9:8e:24:60:55:43:52:c7:b6:56:ba:bf:
b9:18:f9:67:bb:90:fb:4f:11:a1:95:47:74:c3:b3:
b2:0f:0f:52:3f:84:4e:c3:28:5c:69:da:1e:45:2b:
96:20:12:20:70:d8:62:3a:ea:a8:f9:3a:47:87:ce:
af:42:45:a5:05:d1:2b:bf:61:93:e5:68:88:f8:d0:
86:bb:d8:3a:06:b7:0a:21:9c:64:f7:8a:0a:bf:78:
0f:f1:4f:40:3f:1c:65:c5:24:8d:09:7c:ab:0e:2d:
f3:35:37:59:07:c0:93:a9:be:66:ba:2d:63:87:b7:
28:fe:e1:d0:9e:86:ef:da:ec:90:ec:72:6f:1f:a0:
96:bc:2c:ad:05:88:2b:f2:87:4f:a9:d9:05:69:6b:
d6:0f:ea:39:4f:45:cc:50:d8:47:77:ea:22:3f:e4:
d0:f0:8f:65:99:f9:39:67:de:68:db:4b:09:b1:f8:
59:80:70:d8:43:60:31:87:2c:ae:73:f3:9d:2f:05:
50:ca:87:6e:64:9d:e6:cc:24:c0:87:dd:c2:a4:0d:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:B9:E3:95:C1:C9:17:AA:A0:75:CA:33:81:01:01:48:AF:04:EB
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9e:c0:65:8f:bf:f3:c9:4a:1d:0a:8b:b8:4c:77:3b:7a:a8:
20:dc:46:ba:12:ec:64:9a:e5:c2:79:fa:fe:35:28:89:7f:74:
9c:c9:c3:f8:28:c7:af:bf:a3:11:87:34:d3:a3:ff:4b:f0:84:
bc:f6:1b:86:66:ba:a1:1e:e6:fc:89:87:1f:9b:a4:8a:57:f9:
af:c3:c7:6c:3b:d7:5d:30:28:be:b2:d5:3a:3f:84:f7:02:6a:
7c:c5:e4:dc:5b:c0:12:4b:4d:94:2c:c9:0a:09:f4:58:fe:7b:
4f:24:bb:93:ca:59:8e:31:aa:7e:78:01:42:57:f4:c8:87:30:
d9:63:32:34:5f:8c:4b:c7:79:28:e1:5e:bf:36:31:2a:9b:fc:
a3:c4:af:a2:93:f3:be:bc:89:aa:bb:8e:ee:95:3d:8d:b6:9b:
ca:ba:95:86:52:18:bf:ce:eb:25:c9:1f:bc:34:91:08:e7:e8:
d7:50:4d:0a:b2:a5:ee:18:25:db:33:27:6b:8a:1b:6b:c3:7d:
0b:54:d3:18:51:91:6e:14:6d:5d:9e:bd:0b:52:e5:58:aa:4d:
9f:8c:1f:15:53:7f:96:e9:eb:d8:c4:56:64:54:71:67:0a:38:
ea:c8:35:be:c2:d1:bb:15:15:ec:74:a2:04:9f:41:ee:eb:ca:
fe:51:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:52 2026 by rpki-client