Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: mYp1IQSOuRhymMjBRPCnV8QFYqqjPEJUMfoMco9VsFc=
Subject key identifier: 20:78:6B:1F:B3:E5:C5:5F:6C:E6:71:B1:43:76:F7:BA:94:30:B2:1F
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 01A0D5396A2D819EA269D23383D8CA199B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 21:01:44 +0000
Manifest this update: Thu 24 Sep 2026 21:01:44 +0000
Manifest next update: Fri 25 Sep 2026 21:01:44 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: Qa0eG2f2SMx5iRwzSoFgkXOOYvIz68VJbwovUF6vFfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:6a:2d:81:9e:a2:69:d2:33:83:d8:ca:19:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Sep 24 21:01:44 2026 GMT
Not After : Sep 25 21:01:44 2026 GMT
Subject: CN=20786b1fb3e5c55f6ce671b14376f7ba9430b21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:45:7f:87:31:1c:4a:6c:aa:6b:04:26:64:4f:
b6:2b:bd:00:e0:a4:d7:56:3d:18:70:d5:8e:ee:c3:
83:69:ef:6d:be:4b:e4:72:59:97:2d:d2:fb:60:dd:
3f:70:f2:90:3c:56:ef:95:85:00:cc:ed:19:25:be:
30:c5:2c:41:d7:33:13:f6:55:81:4d:33:40:bf:11:
7b:55:2b:0a:6c:03:ab:9e:65:a2:32:8e:1f:67:de:
37:3b:14:37:91:8d:a2:bc:29:25:d2:88:97:6a:61:
d4:25:28:c8:98:2f:cd:40:81:ef:a7:ee:70:2f:9b:
c3:c7:cd:08:0b:01:23:f1:84:75:5c:5e:fb:15:e4:
71:49:01:e4:73:5a:24:77:24:8f:50:97:03:12:e3:
61:cd:85:4d:95:48:85:f4:3d:11:0d:c4:bd:fc:c7:
cb:29:94:7d:17:2b:56:3e:a9:58:e2:bc:c3:64:89:
00:de:be:78:83:17:74:1a:6f:df:35:40:62:8f:7f:
f6:74:86:48:48:db:e8:b3:68:71:4c:1e:d1:5d:5d:
e3:4d:25:fa:58:6a:08:fc:f6:99:5b:c2:6d:85:71:
be:c4:ff:2a:07:09:59:6b:90:66:78:45:4f:d6:f1:
5e:3c:d0:68:aa:ed:e0:57:52:6c:dc:11:d0:95:66:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:6B:1F:B3:E5:C5:5F:6C:E6:71:B1:43:76:F7:BA:94:30:B2:1F
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:b4:44:b0:65:05:e4:80:ba:1f:b8:ca:c3:53:79:3b:f9:
74:1b:af:22:82:31:bd:7c:71:e6:2f:01:0f:26:fd:7e:11:14:
6c:7d:0c:ee:2d:a9:3f:98:2b:fb:34:15:b0:99:bb:4c:39:72:
77:42:64:a5:99:1f:7d:ad:61:03:d1:57:91:df:4c:ef:2a:c5:
e3:42:10:19:f0:e5:2b:c0:b5:0a:cf:59:d5:65:d1:5d:6b:51:
d6:b3:83:9d:dc:03:c8:e9:46:3a:3c:9c:44:f5:b2:f3:7a:f1:
15:3e:de:56:25:78:cc:00:fa:4e:91:84:df:ba:85:2d:10:84:
18:bf:58:6e:b2:58:f8:f3:01:c6:56:ae:a0:26:f2:7c:b0:14:
6b:5f:0e:f9:b5:c0:60:23:0b:bb:59:42:bd:5c:dd:10:e9:53:
f7:e9:82:88:f4:f2:2d:bd:ae:a3:23:0e:6c:b8:0c:96:b5:df:
e5:e2:98:5c:c6:77:4f:0d:f0:92:91:82:93:90:73:df:8c:be:
2d:ac:fc:9c:9c:58:04:bc:12:24:72:65:ef:e8:52:da:6c:52:
f4:c8:af:07:6f:f2:8a:fe:fa:9b:fe:02:a6:56:1d:b8:e2:3f:
50:02:3a:0b:79:93:e3:b8:78:85:70:ae:ef:89:38:5a:6f:bb:
8d:60:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:14:06 2026 by rpki-client