Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
File: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft (raw, json)
Hash identifier: rUfZSqzJ72i/CdP+GYghtCNmDPESvOadSvdFaqmCvls=
Subject key identifier: C1:B5:D6:2E:A2:DA:75:AC:A7:B4:81:F3:87:D5:F6:FA:94:0C:61:43
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 01A0B50921DE6B0BA99A5DCC68EB1211C85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
Manifest number: 0CE5
Signing time: Fri 18 Sep 2026 15:01:09 +0000
Manifest this update: Fri 18 Sep 2026 15:01:09 +0000
Manifest next update: Sat 19 Sep 2026 15:01:09 +0000
Files and hashes: 1: CAK35QTuEq8p5pMHpRsy6hrVFwE.roa (hash: 8N51l78zHWxXNaX9bCrXu1hYb7x2qMh5r0r2xumunCQ=)
2: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl (hash: pwnO1F75aDZxkdGtYYLy3916088sOZe+lKJUHwO2OBY=)
3: vV3xBVfkG0M0NoQ2SxPY7yKei30.roa (hash: MMyfN4QSow3i88Wo+okKaUSdkHZvrx0YE/Konxtq/wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:21:de:6b:0b:a9:9a:5d:cc:68:eb:12:11:c8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Sep 18 15:01:09 2026 GMT
Not After : Sep 19 15:01:09 2026 GMT
Subject: CN=c1b5d62ea2da75aca7b481f387d5f6fa940c6143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:81:95:1f:13:60:a0:3e:db:a4:8c:4a:41:
ec:62:18:5c:bb:6a:d6:65:4b:d5:0b:2a:cd:65:92:
b0:21:af:57:b8:74:20:9a:ec:75:dd:b8:1f:46:5f:
70:a9:0d:b5:31:b4:2e:b5:79:03:f7:c9:c0:6f:52:
da:45:03:e7:07:fc:c5:a8:76:0d:dc:04:3f:2a:34:
e0:26:60:57:e7:7c:6a:79:0c:3e:66:56:58:9d:53:
aa:47:78:32:b7:98:84:3d:9a:87:a9:c1:ad:3f:2c:
c4:e0:d6:bb:55:c9:e0:2a:de:ed:b4:00:3c:c5:19:
55:74:63:cb:b2:9a:35:6a:3f:3b:2e:c6:30:c6:74:
9f:3e:dc:ad:4d:f1:65:82:9d:e2:da:d6:ac:27:df:
ce:68:b9:e8:3c:ca:6e:97:0a:ca:bc:54:4b:84:02:
5e:eb:8a:53:eb:26:08:37:e9:0e:f6:f9:0a:ba:0d:
cd:f5:85:45:24:5d:4c:3f:76:6e:71:3c:be:23:3b:
5c:78:de:c3:d2:92:18:c3:4e:51:fd:26:30:ef:b7:
74:cf:67:58:f6:ab:10:c8:1b:6a:fb:4c:d1:62:1e:
9f:6a:1f:2e:21:ef:ee:d6:be:43:1e:8c:69:4b:31:
30:0e:14:b8:e4:70:72:5b:33:da:d3:42:b7:31:2f:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:D6:2E:A2:DA:75:AC:A7:B4:81:F3:87:D5:F6:FA:94:0C:61:43
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:2b:c1:b2:71:1f:9a:2f:ca:e6:68:69:cd:a2:6b:d2:53:
af:f6:1a:3f:31:19:65:38:27:40:02:b7:dd:e3:b0:a3:57:cc:
b8:6a:db:f3:aa:8b:3d:88:04:04:87:b4:24:10:82:af:47:89:
a3:90:ef:3e:42:7e:b8:12:63:d4:01:a0:26:a2:da:13:22:a4:
08:54:a5:db:8b:48:19:b4:38:d9:af:31:3b:35:2b:b4:3d:fb:
91:88:3c:26:ea:09:f3:b3:8e:88:d3:48:e8:57:e9:9f:7c:01:
54:74:d3:12:7f:76:af:09:68:96:03:e4:7e:aa:d0:58:ba:1e:
8c:1f:5d:a0:d7:b6:e5:c7:91:4c:2c:6f:ae:76:9f:5e:ad:f6:
0a:66:21:89:69:2c:8c:94:5f:98:95:7d:ff:64:01:53:62:b5:
96:f9:d3:02:dc:72:cf:d8:cf:c1:9b:b7:aa:e2:45:86:39:1a:
87:f3:2a:82:f3:f8:e7:00:e7:e9:42:e7:95:04:9f:71:58:74:
76:ff:11:6a:61:1e:2d:5b:2d:21:71:90:09:95:aa:bb:2b:04:
b5:9c:2e:54:78:f5:69:d2:b8:f5:9f:da:33:af:90:8d:90:b6:
3d:12:ce:7a:64:80:61:8b:e3:7c:4b:56:cf:77:79:11:7f:38:
72:65:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:07:41 2026 by rpki-client