Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.mft (raw, json)
Hash identifier: VQQC4WOjNC8dvR+Wg2Letkchm42sgFL56P51MUrARr0=
Subject key identifier: 30:22:23:59:A0:AE:E3:26:0A:CA:06:F3:FF:3C:31:3B:A6:67:47:2D
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 01A0D7CC2213C1044AD781E3887D3C778A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:14 +0000
Manifest this update: Fri 25 Sep 2026 09:01:14 +0000
Manifest next update: Sat 26 Sep 2026 09:01:14 +0000
Files and hashes: 1: RkxGEP2HKa933gOwWZ56ZY2Nos0.crl (hash: 1EeFEj0qO4OyYTi1AnZwIrC3NZGUND4Km3pQYSSp74s=)
2: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (hash: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=)
3: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (hash: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:22:13:c1:04:4a:d7:81:e3:88:7d:3c:77:8a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Sep 25 09:01:14 2026 GMT
Not After : Sep 26 09:01:14 2026 GMT
Subject: CN=30222359a0aee3260aca06f3ff3c313ba667472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:fa:bb:d3:70:0a:d2:ab:08:d6:30:04:46:
6b:eb:0f:ac:25:22:5e:b8:6c:44:72:f8:1b:e0:a7:
52:bb:28:b6:fe:b1:d7:0b:1a:ff:0a:bc:82:45:e5:
e9:7d:a7:5b:b9:86:67:74:46:fb:a7:08:de:a6:95:
b6:93:64:8e:d7:bd:d8:b6:20:45:41:21:28:31:4c:
84:d6:44:c8:87:1b:0c:0e:d5:88:d8:bb:54:64:c0:
a9:d2:e8:92:10:f1:93:2e:35:f6:26:7a:16:40:b1:
6d:b4:af:4f:47:dc:e3:2a:d0:f9:fb:02:16:82:a1:
ea:d0:ee:27:16:bd:6b:8a:5c:db:a0:32:07:b8:ee:
e0:3a:93:56:27:9b:c4:bc:bd:44:f7:97:fc:4d:28:
79:9b:b5:8f:fe:92:3d:0e:7a:84:63:4b:ea:d7:ce:
88:83:75:f4:e4:6c:df:de:06:f8:fd:86:2a:2d:b6:
ba:4d:94:5a:c8:bf:61:f8:3e:1c:ae:4d:06:23:3c:
90:81:7d:91:b9:dd:d5:69:ac:a5:3d:00:f3:8b:08:
6e:d2:47:5e:ca:4c:89:a4:c1:f0:a3:e8:5a:b8:ee:
b1:d5:59:87:96:21:29:f7:5d:7a:e8:b2:70:a8:5e:
b7:17:b2:cb:d4:6e:68:0d:44:20:1d:2e:14:77:cb:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:23:59:A0:AE:E3:26:0A:CA:06:F3:FF:3C:31:3B:A6:67:47:2D
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:75:8e:b6:ed:6e:42:4f:6b:c2:c1:c2:83:77:c1:0d:a6:
29:29:44:f4:26:d7:76:32:1b:ce:07:b4:8c:4f:06:1c:5c:cf:
20:49:66:63:d4:87:df:3e:16:38:6e:66:5c:31:ae:68:00:00:
28:cb:63:43:74:ba:89:cc:57:d9:9b:f5:70:93:ad:6d:f8:d9:
47:f9:63:cc:e0:6c:5c:b5:11:fb:3a:d4:f6:aa:d5:a7:a4:0d:
7d:5c:f0:2f:fe:36:15:53:5e:15:bd:11:5d:76:e2:20:b3:76:
b0:f9:23:c8:09:f2:7a:dc:40:c4:f1:68:ad:b5:dc:e3:14:0d:
28:79:7d:3e:a8:d5:4b:cb:3f:13:09:ce:05:b9:0d:f6:1f:5c:
11:02:cd:34:ee:89:35:d0:93:71:8a:6e:50:ae:8d:01:32:38:
6a:8e:65:bf:ff:4c:fe:37:6c:d7:bc:c0:f4:bd:44:14:a7:25:
dc:b5:b0:2a:7b:fe:b7:18:ec:33:e4:da:97:a2:75:62:e1:9b:
7f:0f:17:8b:30:8f:c5:0f:7c:e9:75:27:99:fc:2c:d3:c2:df:
d3:9c:57:46:9e:41:69:41:17:4f:ba:7d:58:a5:47:35:64:17:
b9:c4:00:f0:b5:f6:52:74:46:db:27:09:6e:81:86:52:b9:52:
ec:76:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:01 2026 by rpki-client