Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: +YCiHoWQdkkfNpSZs5/cOS+sPR//YdqKdXYpavSo0Lo=
Subject key identifier: 3C:8B:87:D4:D6:8A:9D:0D:C2:0C:33:BE:88:92:8B:22:82:45:62:2F
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 01A0E8F6AEED7EB41E1DA4117B879B326DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0EEE
Signing time: Mon 28 Sep 2026 17:01:15 +0000
Manifest this update: Mon 28 Sep 2026 17:01:15 +0000
Manifest next update: Tue 29 Sep 2026 17:01:15 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: CV+OBmKiAp86ETpcqHddb5tgNrgtd9uY0sDFZ07Ma/0=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:ae:ed:7e:b4:1e:1d:a4:11:7b:87:9b:32:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Sep 28 17:01:15 2026 GMT
Not After : Sep 29 17:01:15 2026 GMT
Subject: CN=3c8b87d4d68a9d0dc20c33be88928b228245622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:40:8b:1d:37:3a:3d:0a:5a:55:c0:22:6d:
6d:f3:1a:6c:36:b7:f4:b5:57:83:48:af:42:63:14:
a0:8e:e2:64:04:e6:26:42:82:b3:18:b7:e9:43:a9:
14:ec:13:9c:38:8e:49:39:6c:a6:6e:f6:8b:97:50:
28:63:f1:97:f3:69:68:6d:44:b5:14:8c:00:9f:4e:
88:d4:d5:e5:d7:0f:76:f3:5b:a7:e8:20:d2:10:e7:
51:24:5c:c2:7d:4d:b5:ae:49:23:4b:de:45:46:d9:
53:2d:06:ad:65:5a:f6:e3:ff:0e:14:45:75:58:7c:
9a:46:6e:c7:fb:07:cb:14:8b:bb:f8:5b:bf:23:2b:
ee:8f:00:28:ca:e7:cc:87:8a:2c:3e:91:2b:ef:5d:
4d:f2:07:c2:7f:d8:f3:d0:ea:97:cb:51:1d:c0:f6:
ad:6d:97:dc:30:e1:78:27:d7:f4:79:d2:00:59:ec:
bf:2f:f1:9a:4d:ad:49:ed:91:7e:42:4a:73:1b:80:
d3:76:d8:9d:21:96:1a:29:b1:09:9e:b0:52:06:9a:
b4:49:c0:46:1d:27:15:e0:9c:7d:35:6c:41:5b:a2:
02:d1:a0:09:83:3d:7b:1d:db:a6:ec:20:00:f1:a1:
aa:fd:15:d2:5d:2a:1e:5b:d6:87:f0:bd:80:ed:5e:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:87:D4:D6:8A:9D:0D:C2:0C:33:BE:88:92:8B:22:82:45:62:2F
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2a:d0:13:2f:39:58:14:1e:b4:8f:1e:89:6a:a2:f3:06:56:
b3:55:3f:08:81:02:d0:d5:d1:ce:a2:57:e0:17:94:8c:0f:6a:
3d:03:2f:c3:27:e6:d9:af:1d:27:a1:d4:09:37:ee:e9:67:e5:
ae:48:e3:7b:e6:82:d5:6f:2c:57:20:45:6a:ab:f6:50:30:15:
70:89:48:7c:58:32:48:15:d5:2b:23:ad:6c:06:34:ad:79:f2:
a6:c3:d4:0e:bb:53:39:f9:cb:b1:db:6e:1d:1b:a0:24:94:78:
71:bc:d2:58:3e:f4:47:82:b6:9e:df:da:a2:c4:e2:21:32:fb:
ee:f0:7e:fc:69:91:40:95:df:82:95:e9:d2:b6:e5:8b:d7:36:
cf:69:fc:6e:9d:86:26:0e:59:06:e7:dc:16:1b:4f:55:82:fe:
b7:28:76:a2:c3:35:40:e2:d1:50:c4:21:61:e2:14:67:0e:c9:
db:08:6d:fd:a0:9d:58:7c:7e:9a:ea:3f:e5:ad:24:f2:c6:a8:
df:7c:a9:66:bb:1e:85:13:de:37:40:0f:d8:20:b0:05:b2:35:
62:ca:54:48:df:88:89:8a:bf:3c:98:c1:f0:a4:55:71:3a:bc:
54:a2:87:5f:fa:45:1e:5f:e2:8a:8f:98:ae:61:26:1d:47:36:
37:dd:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:06:54 2026 by rpki-client