Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.mft (raw, json)
Hash identifier: 0LXqJx7LjMCiS1dwBo6DJGLYa0WSKabK9t8dckK3AsE=
Subject key identifier: C9:23:59:42:0A:8F:01:B7:06:0C:B6:10:AD:47:01:28:53:18:B1:93
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 01A0D3EFC542ADD0A10C69403EF951654B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:41 +0000
Manifest this update: Thu 24 Sep 2026 15:01:41 +0000
Manifest next update: Fri 25 Sep 2026 15:01:41 +0000
Files and hashes: 1: RkxGEP2HKa933gOwWZ56ZY2Nos0.crl (hash: 7fuFFAKdS3CmKslVsanJAj4xP+WPITBSnZGVkdbvCy8=)
2: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (hash: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=)
3: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (hash: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:c5:42:ad:d0:a1:0c:69:40:3e:f9:51:65:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Sep 24 15:01:41 2026 GMT
Not After : Sep 25 15:01:41 2026 GMT
Subject: CN=c92359420a8f01b7060cb610ad4701285318b193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:0d:1b:25:d5:ba:b5:2d:ee:78:35:36:e5:
8a:bf:21:35:1f:c7:e7:32:aa:e2:10:2e:e0:e1:55:
b6:77:41:66:20:03:5f:ab:d7:78:79:fe:16:bf:02:
a6:a9:23:c7:e5:39:45:61:25:1d:1b:6a:cd:53:25:
82:03:ea:89:d3:d7:e0:87:11:e0:9d:55:df:22:ad:
5e:3c:ec:eb:24:8e:1a:13:46:ec:dd:dc:f3:47:b2:
1a:92:72:ef:44:3e:4f:b8:9b:d7:df:cc:b3:a2:41:
ec:ee:d3:68:e4:f0:f6:29:a6:d8:e1:09:03:72:f8:
cd:31:d3:05:f8:71:05:29:8c:bc:54:f7:a4:37:13:
04:63:54:0e:6e:0b:97:3b:c0:99:96:ad:04:de:c5:
24:7b:36:b0:e8:79:ca:3e:85:b5:47:17:75:78:4e:
4e:e9:61:16:91:d2:fa:17:da:26:32:e0:73:6d:73:
bf:8c:51:bc:b8:c7:8a:0a:96:d1:11:c8:8f:7b:50:
d4:63:6b:b8:d3:73:c2:c2:d2:45:50:18:3f:94:11:
09:6a:3b:e5:7c:0d:d4:36:a3:8e:65:dc:81:ce:21:
07:d4:26:f7:63:f4:51:b9:7f:a0:33:2e:3d:7b:95:
a2:45:d9:52:cc:b7:e9:59:c1:5f:10:cc:f4:2f:93:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:23:59:42:0A:8F:01:B7:06:0C:B6:10:AD:47:01:28:53:18:B1:93
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a1:48:bd:5b:c1:4a:6e:de:3a:91:02:7b:59:28:ed:3a:27:
8e:f9:d6:0a:ff:8f:5c:e0:5d:09:d0:53:da:d9:c7:73:43:5b:
4e:f6:51:df:61:f2:8e:6e:7f:2d:d6:fb:d0:ad:bc:c3:5c:4a:
cc:1f:69:fa:df:69:14:b0:8d:1c:e0:47:38:b1:44:7a:6e:9b:
16:e1:7e:79:41:47:be:dc:db:c7:af:4d:14:1c:0c:74:63:83:
08:e4:1f:09:44:79:cc:fe:44:38:24:14:7c:a5:b2:37:c0:3f:
a6:d7:ef:b7:42:95:9a:ca:4c:f0:af:45:a3:6a:cf:55:a2:ee:
2d:2d:10:4c:e8:33:59:19:07:d2:d5:3a:e9:b4:08:04:8b:c8:
7c:dc:7c:54:33:fb:27:9a:cd:9c:70:5b:7d:2d:82:90:86:c5:
d4:cb:d9:d6:d8:9c:ec:8d:f5:5f:09:9d:33:e7:06:a7:88:2b:
cc:82:a8:e9:2b:f7:af:35:a9:b9:13:e7:32:dd:0b:85:ab:50:
a9:7f:e2:73:33:14:a4:e7:f3:5d:78:49:5d:8e:00:5d:98:6c:
29:91:79:6e:47:92:df:ec:15:5e:15:15:60:b7:92:df:93:e5:
8c:1b:68:db:a9:70:81:fc:32:7f:89:ec:14:b4:ee:cc:e5:72:
2b:b1:40:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT78VCrdChDGlAPvlRZUtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGM0NjEwZmQ4NzI5YWY3N2RlMDNiMDU5OWU3YTY1OGQ4
ZGEyY2QwHhcNMjYwOTI0MTUwMTQxWhcNMjYwOTI1MTUwMTQxWjAzMTEwLwYDVQQD
EyhjOTIzNTk0MjBhOGYwMWI3MDYwY2I2MTBhZDQ3MDEyODUzMThiMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuwNGyXVurUt7ng1NuWKvyE1H8fn
MqriEC7g4VW2d0FmIANfq9d4ef4WvwKmqSPH5TlFYSUdG2rNUyWCA+qJ09fghxHg
nVXfIq1ePOzrJI4aE0bs3dzzR7IaknLvRD5PuJvX38yzokHs7tNo5PD2KabY4QkD
cvjNMdMF+HEFKYy8VPekNxMEY1QObguXO8CZlq0E3sUkezaw6HnKPoW1Rxd1eE5O
6WEWkdL6F9omMuBzbXO/jFG8uMeKCpbREciPe1DUY2u403PCwtJFUBg/lBEJajvl
fA3UNqOOZdyBziEH1Cb3Y/RRuX+gMy49e5WiRdlSzLfpWcFfEMz0L5MEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkjWUIKjwG3Bgy2EK1HAShTGLGTMB8GA1UdIwQY
MBaAFEZMRhD9hymvd94DsFmeemWNjaLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmt4R0VQMkhLYTkzM2dPd1daNTZaWTJOb3MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt
MWIwZjI1NGRlNjE5LzEvUmt4R0VQMkhLYTkzM2dPd1daNTZaWTJOb3MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5
LzEvUmt4R0VQMkhLYTkzM2dPd1daNTZaWTJOb3MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKFIvVvB
Sm7eOpECe1ko7TonjvnWCv+PXOBdCdBT2tnHc0NbTvZR32Hyjm5/Ldb70K28w1xK
zB9p+t9pFLCNHOBHOLFEem6bFuF+eUFHvtzbx69NFBwMdGODCOQfCUR5zP5EOCQU
fKWyN8A/ptfvt0KVmspM8K9Fo2rPVaLuLS0QTOgzWRkH0tU66bQIBIvIfNx8VDP7
J5rNnHBbfS2CkIbF1MvZ1tic7I31XwmdM+cGp4grzIKo6Sv3rzWpuRPnMt0LhatQ
qX/iczMUpOfzXXhJXY4AXZhsKZF5bkeS3+wVXhUVYLeS35PljBto26lwgfwyf4ns
FLTuzOVyK7FA+g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:31:28 2026 by rpki-client