Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: N5kNFkEfQYPWnAdBBO5D7OkMi2rMv9qoU6pbBH1t5vc=
Subject key identifier: A9:F4:B4:6E:17:92:9B:75:62:9D:BB:7F:C1:40:CF:63:43:CD:97:FA
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019F9323BE7B4CC704832A2E00D310E77BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 08F1
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: 7rMuWuXk8lI3qH2/et5Lb01IR4JIUHUvcheN0BY9EWk=)
2: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:be:7b:4c:c7:04:83:2a:2e:00:d3:10:e7:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=a9f4b46e17929b75629dbb7fc140cf6343cd97fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:fc:59:1b:0a:94:c4:26:e3:ff:8d:76:cb:
f7:9a:37:4d:00:7f:45:38:4b:0a:05:8e:8d:4d:b0:
06:15:68:3b:08:11:cf:58:54:34:b6:80:25:f4:73:
0c:de:2a:a1:a5:de:7e:6c:fc:07:26:4b:a7:bd:3e:
55:a5:8c:97:bb:20:36:58:b6:53:40:4a:3a:fa:9b:
2e:99:d7:b5:89:54:d7:3c:10:19:07:49:44:01:f8:
36:a0:92:b2:b6:1a:12:0b:ef:d9:70:2f:00:c6:02:
5a:6e:0e:2c:9d:e6:71:43:aa:be:a9:0f:49:20:0b:
08:2e:65:99:6a:11:6f:c5:9b:a9:f4:95:a3:11:e9:
80:41:c8:6b:a1:41:75:fd:2b:c8:db:45:4d:bd:9d:
3d:9b:1b:b7:c8:c3:c0:8e:c9:00:fa:3c:b7:d0:d4:
0d:4b:bd:b9:a4:95:77:68:59:41:93:12:89:be:62:
18:fa:67:e5:8f:12:56:2e:4d:9f:a4:22:e7:c6:44:
77:31:02:3f:b8:5f:02:73:00:ab:aa:8c:d6:f3:97:
1a:d3:85:cf:c1:ad:b9:4a:e8:9f:a2:b5:db:15:f0:
90:67:0c:67:9e:8e:18:ee:82:88:82:ac:80:6a:00:
0f:91:b2:6e:74:6c:89:63:ed:0e:7f:fd:dd:1f:eb:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:B4:6E:17:92:9B:75:62:9D:BB:7F:C1:40:CF:63:43:CD:97:FA
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:c7:e7:db:b1:ef:c5:5d:71:07:fa:61:bb:62:05:ab:25:
6e:63:34:e3:07:f7:9d:7d:bd:33:1c:e4:01:09:0a:f9:fa:25:
f7:f6:69:10:f0:8d:2c:3b:3d:4c:27:5a:0b:46:91:1c:c6:6e:
01:21:13:e9:69:e5:d4:f1:46:2f:2f:a1:74:df:6a:3c:05:88:
f8:4b:ec:50:af:71:80:c6:83:85:47:b0:f0:d6:fb:bd:64:d4:
92:0b:eb:95:73:23:98:b1:c2:ae:1a:a4:f5:bf:82:ae:f6:78:
19:e9:e6:a7:57:ec:0f:37:f2:f8:14:96:f9:70:ff:89:86:ad:
48:3f:e4:2a:82:1b:11:1e:fc:da:67:d4:b1:60:f4:06:98:d0:
1d:8b:e4:55:3f:fd:4e:19:a5:f9:be:55:df:7a:a2:74:45:dd:
e9:61:bf:3e:62:d7:d6:39:ae:a6:e6:cf:a6:f0:52:fe:01:aa:
e9:cc:e3:e6:3a:24:32:e1:e9:71:7a:3e:24:49:7b:b5:fe:d5:
8d:64:aa:28:1b:71:0a:e3:b7:b8:f9:10:98:bf:32:72:90:22:
4e:74:25:30:78:7b:f3:90:63:2e:ba:5d:63:fe:f1:b7:3c:ff:
f4:42:2f:57:df:88:ba:55:d4:ce:36:50:f1:e3:01:8f:56:a3:
b3:1b:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:27 2026 by rpki-client