Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: XPEkspREs+tXdSiESnVtbHKZ+QCYGUChoW7eiCM9ZMk=
Subject key identifier: 28:87:DA:8C:1B:E0:43:19:55:AD:57:99:66:8A:A1:B8:1B:8A:29:30
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01A0E0CF6CB86E63D54BB88D7687D0EE217E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 099F
Signing time: Sun 27 Sep 2026 03:01:25 +0000
Manifest this update: Sun 27 Sep 2026 03:01:25 +0000
Manifest next update: Mon 28 Sep 2026 03:01:25 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: dTNGMigPooTL7Lq9SpBCXQ2g1VZNEWstAgO+I+7jeGI=)
2: p1HhV_xExOgF_LW43FQ2o3eSKCw.roa (hash: EeJPVb/oMvTuXI5wGaDjHDOoSEBzaJvAr0PnvP4ZgTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:6c:b8:6e:63:d5:4b:b8:8d:76:87:d0:ee:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Sep 27 03:01:25 2026 GMT
Not After : Sep 28 03:01:25 2026 GMT
Subject: CN=2887da8c1be0431955ad5799668aa1b81b8a2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:47:c0:29:e5:15:71:29:9a:0e:c9:e1:ff:
7c:5e:bb:ea:d4:4d:2b:37:ad:17:11:a9:51:cc:7e:
0f:32:47:83:e5:e8:b1:0c:76:a8:6f:ff:c2:fa:a4:
94:82:45:20:18:5c:6c:7f:e3:5e:26:f8:c6:e2:d8:
11:bb:1e:d6:45:58:c0:a8:ea:72:31:95:21:c4:ee:
6b:f3:84:ee:f6:9c:81:69:f2:89:b4:4c:ba:a9:43:
ae:47:8a:e6:11:47:73:d0:47:22:27:8f:c3:1b:48:
b4:a0:f4:79:38:b9:60:20:ef:19:ea:31:c1:3d:a9:
ff:27:fd:98:fb:8a:92:24:26:f7:b9:ed:3f:a7:75:
cb:2f:d1:3c:da:31:dc:0b:59:56:fe:ed:c0:fe:8f:
5f:72:d7:fe:4c:15:57:c8:11:10:1c:9d:6c:b4:7f:
66:31:61:7a:20:83:4d:e3:97:a2:76:7b:d5:74:b8:
d8:14:8a:55:f0:6c:6d:6c:46:96:5e:da:40:3d:70:
08:bb:c8:ce:a1:a7:53:d6:03:51:14:24:e5:5d:4a:
15:a5:af:8e:f0:31:5f:73:2c:d9:9b:78:36:01:1a:
7b:a6:ff:5b:65:88:52:b8:06:38:bd:e5:6e:0c:53:
a8:f8:72:0a:54:43:c4:b8:21:02:f7:01:ad:30:7e:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:DA:8C:1B:E0:43:19:55:AD:57:99:66:8A:A1:B8:1B:8A:29:30
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:3b:e3:67:b2:c3:38:ce:c6:dc:39:a7:5a:59:7e:ea:dc:
62:e5:bf:15:46:30:09:ad:31:43:7f:e4:21:6b:c4:b9:21:f1:
90:19:e0:90:f9:4b:61:ee:88:44:99:fc:49:77:40:55:9f:8c:
ca:b7:4a:9e:22:58:51:e1:f5:df:d6:6a:c6:76:86:9f:6a:9c:
f5:63:a1:9c:4e:b6:38:b0:b7:a9:a1:e3:1c:14:80:6d:c3:21:
2a:d8:23:85:e8:e3:de:96:65:e0:c0:7f:19:bf:36:a8:df:5a:
65:7d:3b:d8:1a:3e:83:d3:33:0c:f2:be:ba:1e:4a:37:2c:69:
0d:47:9d:7d:f4:28:67:9c:5e:cf:20:15:f5:5c:18:06:01:a6:
a4:2c:58:cb:98:0a:95:1b:21:54:a9:de:75:69:48:cd:00:b1:
d4:f1:8f:99:9d:f5:42:88:f7:e2:fc:85:78:d5:35:9a:a6:2b:
bd:2d:5a:f5:20:35:41:f9:65:50:87:2d:43:68:57:4c:ee:51:
d2:6e:a6:4e:ba:54:c8:f9:7a:80:7f:7b:ae:ad:d1:7c:ab:7c:
ec:5d:0e:2c:1d:13:04:f5:cf:5b:0a:48:79:a9:a5:b0:7f:47:
99:7a:10:d9:a0:8e:35:a6:4d:94:88:4e:c4:a1:05:b2:e3:66:
83:47:0f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz2y4bmPVS7iNdofQ7iF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjYwOTI3MDMwMTI1WhcNMjYwOTI4MDMwMTI1WjAzMTEwLwYDVQQD
EygyODg3ZGE4YzFiZTA0MzE5NTVhZDU3OTk2NjhhYTFiODFiOGEyOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ClHwCnlFXEpmg7J4f98Xrvq1E0r
N60XEalRzH4PMkeD5eixDHaob//C+qSUgkUgGFxsf+NeJvjG4tgRux7WRVjAqOpy
MZUhxO5r84Tu9pyBafKJtEy6qUOuR4rmEUdz0EciJ4/DG0i0oPR5OLlgIO8Z6jHB
Pan/J/2Y+4qSJCb3ue0/p3XLL9E82jHcC1lW/u3A/o9fctf+TBVXyBEQHJ1stH9m
MWF6IINN45eidnvVdLjYFIpV8GxtbEaWXtpAPXAIu8jOoadT1gNRFCTlXUoVpa+O
8DFfcyzZm3g2ARp7pv9bZYhSuAY4veVuDFOo+HIKVEPEuCEC9wGtMH5p3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiH2owb4EMZVa1XmWaKobgbiikwMB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqw742ey
wzjOxtw5p1pZfurcYuW/FUYwCa0xQ3/kIWvEuSHxkBngkPlLYe6IRJn8SXdAVZ+M
yrdKniJYUeH139ZqxnaGn2qc9WOhnE62OLC3qaHjHBSAbcMhKtgjhejj3pZl4MB/
Gb82qN9aZX072Bo+g9MzDPK+uh5KNyxpDUedffQoZ5xezyAV9VwYBgGmpCxYy5gK
lRshVKnedWlIzQCx1PGPmZ31Qoj34vyFeNU1mqYrvS1a9SA1QfllUIctQ2hXTO5R
0m6mTrpUyPl6gH97rq3RfKt87F0OLB0TBPXPWwpIeamlsH9HmXoQ2aCONaZNlIhO
xKEFsuNmg0cPgQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:16 2026 by rpki-client