Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: hgjwdDD0aqkE2TcTZHxtBn/u+PQAUIuegsPm8FjCUQI=
Subject key identifier: 58:9F:68:B7:D3:15:FE:31:8C:AD:B5:C4:96:93:50:D3:70:75:B2:4A
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 01A13D4A67E21CC11CFF007F779C8E570EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 02:00:48 +0000
Manifest this update: Thu 15 Oct 2026 02:00:48 +0000
Manifest next update: Fri 16 Oct 2026 02:00:48 +0000
Files and hashes: 1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: F0icyfFxmu0sKONCgUN6HcQqEKuG2j/5P8EtXuYcC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:67:e2:1c:c1:1c:ff:00:7f:77:9c:8e:57:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Oct 15 02:00:48 2026 GMT
Not After : Oct 16 02:00:48 2026 GMT
Subject: CN=589f68b7d315fe318cadb5c4969350d37075b24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:09:93:0c:16:a8:01:27:ff:02:41:e4:3f:
23:3e:b8:b6:db:f3:92:50:1a:d3:3f:c2:69:82:04:
19:0b:21:eb:89:bc:44:53:6f:f7:ca:8a:ad:94:57:
30:d5:84:cb:a7:8c:d1:41:a7:a9:1f:ab:c9:da:c0:
98:f4:3b:b2:59:3f:6e:20:8d:88:21:28:7e:3d:3b:
8c:cc:60:bb:e8:fc:10:c3:90:15:ed:3a:db:08:0d:
eb:20:cb:2d:f2:95:9e:7c:82:e7:e9:16:68:2b:e6:
3b:bb:c7:e8:99:21:f7:1b:d8:0e:5a:bc:c5:5c:69:
45:22:54:2d:41:cc:f5:d2:f1:54:1f:15:f7:23:7b:
e9:4a:c7:0d:cf:64:e2:99:c2:c4:16:b8:f1:8e:d2:
4d:57:0f:67:5d:a6:b3:a0:5a:b8:4f:04:cd:d7:10:
f6:f8:88:b4:c0:43:cc:37:af:84:d6:b3:b5:85:39:
fd:51:4b:cd:8e:ab:b4:93:30:1c:93:6a:f9:f9:8f:
3c:5c:b2:1a:07:69:aa:d3:38:39:5d:ea:5d:a7:4a:
50:05:2d:a3:bd:ec:2d:b5:9e:3e:18:9e:a9:56:ca:
03:b2:c2:32:90:c8:38:7e:25:0e:93:e0:f5:de:40:
da:2a:24:6b:bf:a4:d5:4f:f8:b2:3d:03:cb:81:c1:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:68:B7:D3:15:FE:31:8C:AD:B5:C4:96:93:50:D3:70:75:B2:4A
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:c0:97:7e:6d:9a:56:81:24:6d:89:bb:62:89:dc:aa:3b:
45:cf:7e:92:85:93:d8:33:f4:7c:06:67:4a:55:c2:a3:00:32:
c8:dc:0e:e2:2b:92:11:8b:e8:38:d6:4e:dc:5f:48:8e:54:64:
05:d8:ad:d3:ac:bc:56:60:cb:ee:83:de:4a:89:4e:99:2b:4a:
8e:f6:19:01:eb:bb:86:0e:58:cc:28:26:b8:09:c1:79:c6:3e:
e5:14:9f:59:b8:bd:4d:c1:3b:d6:9a:84:d2:18:ed:cd:c4:60:
4a:1b:6f:86:b3:2c:07:b8:cd:06:c0:a0:df:db:e7:0c:4e:ad:
cc:e2:59:45:3f:4e:43:5b:42:48:73:f8:0c:03:18:7d:cb:11:
03:01:a1:bd:17:0a:a2:01:9c:47:82:fa:04:66:cb:14:d9:44:
4a:bd:fd:1f:53:a9:86:9e:2b:a8:32:93:23:c6:87:fa:1a:f7:
19:52:4b:f1:04:2d:34:6f:2d:ef:cd:86:ed:06:af:20:80:0d:
84:4b:52:9f:93:72:5b:2c:63:0f:ca:0b:a1:4d:cb:a0:70:ae:
8d:cf:c7:2e:47:2e:3d:c6:bd:6b:0b:66:85:df:24:4a:de:48:
21:b3:ef:9f:01:6c:e8:95:49:96:ff:03:3c:0c:89:0b:4f:7a:
7f:6d:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:46 2026 by rpki-client