Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: s+6F5zUqo+pkDTtwDUHfi8S8UrS+yTuVT/Wf0KryqU8=
Subject key identifier: 88:E1:BD:84:13:95:61:51:6C:3B:D0:9B:8F:EF:A8:93:AD:8B:36:E8
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 01A06D26A4F70D331BAED1769F0AA29F08DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 11BB
Signing time: Fri 04 Sep 2026 16:00:43 +0000
Manifest this update: Fri 04 Sep 2026 16:00:43 +0000
Manifest next update: Sat 05 Sep 2026 16:00:43 +0000
Files and hashes: 1: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: vmGEWt/HgTxSDFgW7MauwSpmrRnkgH20gPEyI56cxRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:a4:f7:0d:33:1b:ae:d1:76:9f:0a:a2:9f:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Sep 4 16:00:43 2026 GMT
Not After : Sep 5 16:00:43 2026 GMT
Subject: CN=88e1bd84139561516c3bd09b8fefa893ad8b36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:c2:dd:64:01:41:ab:94:5e:db:74:1e:dd:
7f:fb:98:e4:09:59:69:68:3e:6c:bf:9b:13:c9:2c:
bc:6b:9c:6e:fa:6b:aa:5a:b4:b9:25:36:cc:f2:b2:
8c:70:34:99:b9:81:01:79:92:6f:22:18:5f:ad:e3:
67:10:ed:06:b0:32:cd:4e:73:fe:32:0d:79:15:6f:
66:47:92:b7:24:08:6a:36:a8:fa:05:36:da:79:f8:
62:e4:e5:d1:26:ff:06:56:d7:0c:d5:2a:03:e0:38:
fb:8d:69:28:0d:46:15:2e:5e:f5:4c:b2:5e:b8:5d:
17:e6:fd:d9:83:53:65:1a:93:7f:83:78:4f:0f:7a:
b0:9d:af:7a:4d:14:67:3d:aa:b2:3a:17:a5:9a:26:
6a:c1:d6:60:e4:6a:d3:36:06:88:ab:66:d2:30:cd:
55:3b:18:25:68:1b:3e:42:83:59:db:89:01:ec:67:
55:ec:aa:e8:3a:24:d8:ef:c2:f7:9c:97:19:d0:8c:
64:a9:4e:4f:f5:b3:34:de:bf:dc:2a:60:27:60:6d:
67:6c:d7:a3:20:0a:4a:f9:7a:56:d5:86:df:1d:57:
5e:00:fd:a0:94:b5:c2:ac:23:85:4b:7a:34:71:b7:
bf:af:97:2e:59:19:83:62:e5:0c:e5:7e:41:d3:ee:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:BD:84:13:95:61:51:6C:3B:D0:9B:8F:EF:A8:93:AD:8B:36:E8
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:af:33:bf:11:6c:2f:9b:e9:2a:9f:5f:48:56:ef:ad:ea:
63:89:09:db:2e:50:9d:08:5a:f2:ef:dd:df:f4:ec:ed:42:30:
f8:73:7a:52:d0:2b:95:a4:5a:ea:a3:fc:d5:1a:6c:b7:67:e8:
d7:9f:9a:c0:ce:ed:08:12:01:8a:07:5a:f6:a1:81:a0:91:e7:
d5:b3:1e:5a:a0:81:46:8c:35:cf:7c:8f:fb:f1:14:21:f5:39:
4d:79:24:eb:08:f5:ce:ee:f5:5a:cd:43:68:68:03:6f:48:73:
e9:76:19:bb:2d:20:55:db:78:96:a0:49:7c:42:ed:03:83:9a:
cc:7b:d6:91:32:f5:be:60:92:a5:d5:45:b4:03:66:df:74:fa:
7d:c4:34:8d:19:8c:f2:aa:3f:3f:69:0f:30:e3:a7:99:a0:0e:
c2:af:b4:ae:ee:5d:b2:24:20:7e:0e:88:f1:18:e2:59:18:7b:
71:7b:1e:75:a7:d1:72:42:3c:89:e9:4d:f1:15:a0:c3:a1:b7:
ad:a7:f2:b6:c5:23:a7:45:b5:fd:77:30:ca:af:d2:a3:ee:c2:
ad:45:57:a0:d7:cb:82:ea:1e:56:68:05:3e:52:34:78:cf:b5:
f4:62:f2:58:d6:68:5a:f3:d9:c8:e2:19:f6:23:38:27:a3:5f:
08:2d:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:55:11 2026 by rpki-client