Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: xn2Aq8OyVxio3VHl23heOOD5hT3ZHxa5Dp1aVEiIXE0=
Subject key identifier: 62:1C:BF:66:AD:4F:78:44:EC:0D:94:89:AA:27:7C:72:C3:16:05:15
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01A081F7354DF17DDFB0038300F91D682287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 04F0
Signing time: Tue 08 Sep 2026 17:00:56 +0000
Manifest this update: Tue 08 Sep 2026 17:00:56 +0000
Manifest next update: Wed 09 Sep 2026 17:00:56 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: B9UYnTHzRFP8qsDmK6x6QqfFj2rd3NwLa95+oOC0sbk=)
2: YC-FECHQIV84VcJM7yfc1SkYMLI.roa (hash: 0hAUUcU2f9GN8i7aVOo431zZ1PqLZtDBdJrYYAxZYjM=)
3: iFM7H25XsSx059D3mjtnWhxVPxc.roa (hash: udyBSE1gieDC+I/f9zEdjYiTYwaNPmtEekxBRhSF9Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:f7:35:4d:f1:7d:df:b0:03:83:00:f9:1d:68:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Sep 8 17:00:56 2026 GMT
Not After : Sep 9 17:00:56 2026 GMT
Subject: CN=621cbf66ad4f7844ec0d9489aa277c72c3160515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:86:2e:a5:5f:d2:5f:73:d5:b9:3c:32:dc:
72:e4:8d:7f:fc:21:b3:ce:f1:d6:21:1a:94:38:52:
14:08:00:4f:73:8e:69:4f:14:8c:0d:01:f9:6a:9b:
34:7a:0c:a5:c3:3f:b2:b4:1a:e3:b3:46:af:15:91:
54:20:63:69:a2:da:ec:87:bb:83:35:74:0e:b4:5b:
ac:c0:85:f7:ad:1a:8d:6d:64:6d:44:5d:92:95:dd:
7d:88:73:e0:a3:ca:ac:e4:87:6e:77:4c:ed:0c:c7:
fa:97:d7:81:1f:4d:c7:be:cd:6e:8c:cc:52:b7:f4:
f1:76:bc:8d:29:c1:88:9d:03:d4:b3:85:b8:66:68:
48:6d:1e:f1:6c:20:8d:b4:99:ad:d6:4d:fb:79:ea:
a5:1a:2f:bb:9d:49:ca:e6:29:cb:79:95:bc:c6:09:
39:db:dc:83:db:ac:5f:f5:17:fd:36:c4:cf:d6:0c:
6e:46:a3:cf:8a:71:6b:a1:42:e7:bb:66:b8:81:6b:
78:78:ab:71:d5:aa:7d:a3:18:f8:54:3b:a5:85:0c:
8d:fd:e0:e9:9e:a0:96:db:ad:11:e4:57:90:0c:ac:
af:b2:87:02:b8:47:f0:c9:73:8b:53:10:ed:39:5f:
92:2c:02:9a:e1:0d:de:26:24:ae:2d:37:ce:92:9b:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:BF:66:AD:4F:78:44:EC:0D:94:89:AA:27:7C:72:C3:16:05:15
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:1d:21:f0:48:3e:c3:0c:29:91:d0:f1:07:1d:e3:59:66:
23:01:74:16:0b:c3:6d:8e:1d:0c:67:32:08:56:12:5a:de:2a:
2f:7c:40:16:d7:fa:46:d9:3c:32:4c:94:e0:a5:f9:e1:22:e2:
8b:3b:c2:8b:10:0e:fa:52:78:40:68:4c:fe:9d:3d:0c:f5:eb:
c1:9d:94:c0:50:1e:89:5e:b1:6b:f6:9a:7a:9d:ec:75:f4:f3:
3c:f6:f3:2f:cc:4f:3e:a7:ae:fa:cc:6f:df:dc:69:a4:e0:ff:
c8:ea:7b:30:f7:f4:12:f0:0c:13:b9:ad:7c:4d:78:f3:36:71:
c5:4b:6c:85:ab:9a:52:97:a3:43:79:02:c0:cc:6f:91:26:4a:
85:d0:a6:79:37:51:13:3e:4c:8e:22:80:b5:db:de:17:89:c1:
c2:ef:cb:be:7f:af:4f:52:54:fd:8b:42:60:2e:76:69:a6:24:
06:5e:67:70:c7:a1:5a:17:b9:50:e6:78:83:6a:01:51:f4:21:
a7:54:c7:c0:3a:10:13:94:8b:4f:0d:4e:92:43:66:16:81:62:
05:ca:11:d5:45:5e:4f:d8:97:a0:a0:e9:a5:e9:23:2e:0f:45:
41:8e:0b:cf:88:b3:99:8a:03:51:be:7b:aa:0a:7f:a4:f0:b1:
aa:ba:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:12:31 2026 by rpki-client