Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: 0z70hif7hUufrs+p5lUKDEVAWjIHHyw3wcgsPM11wzA=
Subject key identifier: 0F:3F:35:D9:4C:D7:D8:FB:1A:C4:2C:9C:DE:99:67:28:1E:70:BC:D5
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 01A13E26352FECEA24F9A5448810FAED33EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 06:00:53 +0000
Manifest this update: Thu 15 Oct 2026 06:00:53 +0000
Manifest next update: Fri 16 Oct 2026 06:00:53 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: tgcHgXxC3BhusjPMAvbBLaxW5N+NPzGLlSSJMrwt9pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:35:2f:ec:ea:24:f9:a5:44:88:10:fa:ed:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Oct 15 06:00:53 2026 GMT
Not After : Oct 16 06:00:53 2026 GMT
Subject: CN=0f3f35d94cd7d8fb1ac42c9cde9967281e70bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:2d:a1:dd:13:8d:32:3d:fc:ba:d5:dc:14:
c0:f2:38:75:93:e2:f6:86:77:bd:5b:a9:c8:4b:31:
4f:3a:14:7f:a5:b4:ed:7a:a8:c7:71:b7:fc:59:d9:
b7:0b:ef:71:82:f3:e8:8b:52:d6:3b:f4:1a:5f:e1:
28:45:f1:eb:5d:7e:13:c6:4e:37:8c:59:ed:bb:48:
8b:99:ca:c8:3c:33:f8:bf:a8:68:75:17:04:a7:bd:
d7:c4:46:7e:b7:b7:24:c8:5a:08:62:e2:57:74:70:
32:94:99:57:e8:9d:a3:16:48:35:20:9f:5c:fb:35:
f2:11:45:e4:7c:4f:c5:d2:94:c9:09:ec:cb:87:f6:
23:51:f8:82:20:12:5e:3b:17:d7:b0:09:06:21:ec:
7b:05:c4:61:1d:0c:7a:e1:de:82:a2:7e:78:65:7a:
0b:94:fd:94:5a:97:8b:f5:d8:6b:bc:7b:99:e4:2c:
70:80:d1:96:ac:fa:bc:2f:35:32:38:e6:16:86:e7:
6d:04:1b:0a:31:b4:aa:f7:5a:3e:8e:8c:39:51:9d:
04:5f:55:be:06:05:d7:6a:a8:21:53:46:87:47:46:
72:fa:af:21:bf:35:17:e9:89:84:e0:a1:96:f0:f8:
e7:a2:31:3e:8f:9b:e0:85:5b:d5:e6:46:ed:42:0d:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:35:D9:4C:D7:D8:FB:1A:C4:2C:9C:DE:99:67:28:1E:70:BC:D5
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:a6:2d:2b:a2:24:da:3d:ca:2f:77:46:80:08:a5:50:a8:
ec:fd:3b:da:1f:d8:44:90:5b:46:23:3d:ab:1e:bc:73:af:c2:
d7:a9:31:ae:7f:09:41:4f:01:2b:fb:86:58:94:85:f8:5b:c2:
90:d7:ec:9c:bf:0c:46:34:0d:7c:3c:90:74:a8:d8:22:dc:95:
81:07:7d:ce:ac:8d:fe:6e:bd:c2:e0:fb:15:9f:48:b1:37:57:
ba:e4:7c:72:f6:9b:c4:e5:0c:37:2b:58:89:db:18:2d:1e:e3:
21:f4:c9:62:75:35:f3:f3:cf:21:63:fa:bf:93:3b:22:70:3d:
a6:3d:ac:4a:6b:2e:f8:8c:e6:69:41:59:5a:09:d3:b3:a6:11:
0c:b9:1f:4c:1d:42:4c:69:a2:f7:12:23:e6:85:02:ed:fb:f6:
ac:be:3c:f0:8c:8f:9c:00:4f:b3:23:06:ac:14:41:aa:53:9f:
e3:2e:ca:6f:4d:8d:0b:11:3c:36:aa:09:21:31:3e:3e:9d:e7:
0c:b8:9e:45:75:ea:32:9d:9e:e2:53:35:2c:d1:77:f1:16:e2:
a0:77:60:9c:2b:3e:6f:c2:79:43:f4:8d:5b:fc:20:65:e6:59:
f0:e1:68:7f:8c:11:6f:c9:1d:83:72:1b:d4:14:4f:f1:e7:46:
fd:64:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:10:48 2026 by rpki-client