Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File: EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier: cRTznKG3pDZVblFdpH8sqdegHDVBC43si0hV0aoQNqs=
Subject key identifier: 3A:8B:F1:51:1A:A7:ED:C7:79:EA:05:6C:42:93:6A:6B:90:27:26:AB
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 01A0E0613806EF73587DC0C860017CCBE22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 01:01:02 +0000
Manifest this update: Sun 27 Sep 2026 01:01:02 +0000
Manifest next update: Mon 28 Sep 2026 01:01:02 +0000
Files and hashes: 1: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: RqJ1mKkhrTTFogA5nDpMEAExrgVvrBjJEdyPk4xHfZg=)
2: gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa (hash: M/QSynOO9yMEtpC0jJjvRUrMUkRrfua7Bs0F5lyd2Z8=)
3: oxS76504E-QOeHkwlIpZj9zrXis.roa (hash: FkDF/lt7EB2+x6Go/eHE5SAyhxY1+M2DCQUU47W6MiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:38:06:ef:73:58:7d:c0:c8:60:01:7c:cb:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Sep 27 01:01:02 2026 GMT
Not After : Sep 28 01:01:02 2026 GMT
Subject: CN=3a8bf1511aa7edc779ea056c42936a6b902726ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:1b:78:41:1f:19:41:92:8e:7f:20:0f:93:
bd:58:05:bf:99:bb:c8:50:73:22:22:58:44:35:31:
7d:7b:dd:75:57:6d:04:6f:17:da:7e:3c:07:7b:49:
48:a7:b8:29:79:47:5d:c9:0b:18:e6:a9:ea:22:3c:
70:20:ea:d5:e2:3a:ce:a2:02:13:03:37:1e:37:61:
c7:37:cb:26:0f:2d:b0:5c:ae:ad:e0:a5:c1:d6:2c:
62:9a:eb:86:e3:10:aa:04:a4:62:50:53:3d:52:9d:
04:82:84:44:eb:a3:04:97:e8:23:54:d8:1f:ae:89:
e1:66:6e:c2:f3:47:83:c6:c3:e0:d0:b5:01:92:57:
3c:1b:a7:eb:51:a5:c0:b1:4b:1d:bc:40:38:ff:21:
67:56:aa:9c:96:ea:f6:09:67:54:7f:f5:6e:f7:b9:
ad:b3:b2:af:72:53:9d:65:6d:7d:fc:e6:0c:37:d2:
32:ce:1f:39:f0:ba:6f:60:45:bd:12:d3:f4:90:3f:
57:94:54:4c:e2:2a:a2:45:08:ca:d3:20:1b:ad:b4:
b3:5c:b7:5b:cd:a9:4d:a9:c2:bb:27:e3:ea:a6:e9:
2a:fe:7d:25:be:aa:49:d4:ff:6a:89:33:fe:57:3c:
1b:19:00:1c:7e:8f:78:91:c2:3b:5e:16:c1:8f:04:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:F1:51:1A:A7:ED:C7:79:EA:05:6C:42:93:6A:6B:90:27:26:AB
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:50:17:a2:e4:2f:9c:63:b1:af:c9:5d:59:33:f7:e4:63:
96:0d:1a:34:bd:e7:5a:62:41:42:40:6f:db:60:99:36:c3:a2:
28:5c:bc:92:0e:43:0b:61:ca:9b:b5:11:81:24:bb:bd:2d:c0:
b5:de:8b:35:eb:50:0a:2f:d7:e4:76:7e:7f:6b:88:fd:bf:ac:
2d:03:4b:25:5c:8b:25:87:75:9a:0e:b5:70:61:43:9c:64:bc:
7a:a1:a8:34:80:15:27:1d:41:59:1d:25:2a:f3:6e:30:e9:6e:
22:6e:61:b2:48:28:bf:86:4a:a8:ef:15:58:11:dc:0a:71:f3:
55:f7:33:39:b6:41:36:fa:ee:88:b5:ec:b4:54:99:23:86:f3:
2b:70:ca:26:b8:a2:52:3b:bb:85:81:7c:b0:2f:55:53:51:c4:
84:ec:99:88:80:37:52:db:b8:98:6a:59:44:df:24:b3:5c:94:
42:87:d1:81:fa:cc:af:1d:20:3c:3a:0c:65:8b:ad:57:08:63:
a1:23:0d:b9:9f:26:c4:17:1c:5a:cb:64:52:24:c1:0d:a7:4b:
b2:14:44:63:f6:ab:8a:9f:83:c1:d8:ec:10:4a:5d:03:b8:df:
e0:f3:0f:ae:7b:53:c7:52:53:11:f0:d0:87:91:00:ff:b8:c8:
73:ab:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:53 2026 by rpki-client