Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
File: e42xKSYaUs0SXzabHrir_w8Rsmg.mft (raw, json)
Hash identifier: Vl+JYRAyHeayw5J52VV2vEttyB/njU/q2PFSeuPHuSc=
Subject key identifier: 8A:FD:C9:99:45:D6:B7:EE:28:12:F6:48:2C:4E:52:C4:ED:75:E8:D5
Authority key identifier: 7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
Certificate issuer: /CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Certificate serial: 01A0035DEEB8C2B9B8651F54184029865D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:22 +0000
Manifest this update: Sat 15 Aug 2026 03:01:22 +0000
Manifest next update: Sun 16 Aug 2026 03:01:22 +0000
Files and hashes: 1: e42xKSYaUs0SXzabHrir_w8Rsmg.crl (hash: aiGbqV16jbEwxYw9Fk9SlZ2iGJoOiPTY+SH5//zScdc=)
2: gkzk0gvDg9I3VzGU5NaHexAuLU0.roa (hash: h5/p9RICRTcamiWva/eyrrucloMZMW61s6wicb+IUZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:ee:b8:c2:b9:b8:65:1f:54:18:40:29:86:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Validity
Not Before: Aug 15 03:01:22 2026 GMT
Not After : Aug 16 03:01:22 2026 GMT
Subject: CN=8afdc99945d6b7ee2812f6482c4e52c4ed75e8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:04:4a:49:c4:f5:3f:2b:86:64:23:3b:a5:
44:02:e4:5c:5f:62:ca:3e:28:41:15:dc:96:bc:c4:
a4:7f:17:b8:03:f0:9b:16:da:40:d3:b6:04:c9:bc:
ba:11:41:7b:78:b5:cf:da:01:ce:18:62:d1:33:57:
61:34:7a:c9:94:43:eb:91:3b:90:c0:f6:7c:b5:93:
cb:41:db:18:77:fe:88:64:e0:32:a7:29:0e:35:e5:
21:37:5e:93:6f:3b:e6:32:54:88:b1:49:f2:e1:e9:
de:88:2a:31:8d:47:fb:68:37:13:e8:32:c7:aa:ca:
fd:9f:5f:35:3e:d4:ac:8d:84:be:e7:92:47:0d:cf:
13:ac:0b:52:69:af:c8:87:c9:ee:37:42:fa:0c:3b:
5a:d0:9f:d9:44:b1:6e:38:49:f6:ab:56:d3:ef:1a:
e3:8e:70:69:56:2b:32:50:77:7d:47:af:ad:35:ef:
bd:60:27:c1:90:e8:31:64:1c:3e:d4:9e:ed:48:d7:
1d:8e:2b:6a:aa:21:5a:c7:68:6b:1e:e3:0e:91:21:
b5:52:44:68:0a:4f:3c:d4:98:a0:87:80:53:ce:42:
53:fe:d3:aa:20:7f:42:09:cc:91:3d:9c:82:0e:86:
28:f3:03:8b:b0:5e:ab:76:f9:e8:cb:78:ad:80:ea:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:C9:99:45:D6:B7:EE:28:12:F6:48:2C:4E:52:C4:ED:75:E8:D5
X509v3 Authority Key Identifier:
keyid:7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:41:ca:83:5e:4c:a8:8b:b1:d4:e5:b5:2a:29:d5:5f:fb:
d9:bc:d9:33:ad:bd:e9:63:34:c4:42:16:1f:e7:90:06:ab:dd:
32:e4:80:b1:c2:95:9d:8b:20:62:a1:09:9a:87:67:ef:e6:df:
03:51:fe:36:3a:6e:48:d5:a0:f9:96:d7:18:64:09:77:62:84:
30:59:6d:09:82:61:80:6e:48:ec:4c:7d:69:dd:fc:59:5e:d9:
d6:6f:72:32:9d:38:77:53:63:fd:95:f9:4d:46:7b:99:56:cd:
4f:95:a1:2b:ba:36:71:40:24:d2:04:1c:e1:8f:ae:21:ba:b8:
c2:1b:5c:ba:39:8e:42:d1:2b:8d:b8:9a:89:10:5e:59:ba:26:
f2:63:54:9c:1b:9a:3a:de:d5:7c:6e:91:81:ec:37:39:a6:1b:
26:f9:65:c3:cb:23:8f:83:ff:c6:55:b0:74:9d:e1:25:49:65:
9d:c8:08:aa:40:0a:3b:d4:c3:fe:f8:5c:31:d0:23:4a:3d:90:
98:48:b7:c1:59:4b:bf:e2:d4:07:bd:31:5a:c8:8a:40:4a:17:
b5:14:7b:c1:1d:d9:2e:17:81:de:b1:1c:74:b1:e3:5f:dc:fe:
1e:c0:f5:33:b6:c8:10:ac:f7:d0:00:13:39:c2:7d:d2:77:12:
c8:a6:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:39 2026 by rpki-client