Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: MEjJ/gY7dd1jO0ztqvif1cPhaUKPXvRL30F/ORmZ0LE=
Subject key identifier: DC:F9:E4:26:26:55:39:7A:1C:29:E3:1C:0A:A4:93:FB:3B:9E:4C:A1
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 01A0D7CD1499441C9E5B5AA3B9F08AA55122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:16 +0000
Manifest this update: Fri 25 Sep 2026 09:02:16 +0000
Manifest next update: Sat 26 Sep 2026 09:02:16 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: u8gNhTkXww8144D/zu36MRVoxEVr1XZ3ObXVIz1ey8Q=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:14:99:44:1c:9e:5b:5a:a3:b9:f0:8a:a5:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Sep 25 09:02:16 2026 GMT
Not After : Sep 26 09:02:16 2026 GMT
Subject: CN=dcf9e4262655397a1c29e31c0aa493fb3b9e4ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:8d:02:bc:38:4a:c3:78:a4:1d:8c:80:ad:
5d:a7:83:e3:a1:db:73:6c:5c:ce:67:51:79:bc:87:
93:24:ab:74:fe:3c:db:79:2d:84:48:9c:44:3d:09:
9d:bd:2f:b1:c0:6f:40:d5:12:d8:79:9d:c2:c9:37:
31:e9:44:1e:3e:79:41:83:4e:44:ef:10:37:de:26:
4d:82:90:88:f1:c9:6f:d9:2a:97:2b:91:56:e4:f8:
56:e7:c2:e3:50:62:c8:34:9c:75:02:b4:60:47:b5:
67:20:3c:1c:e3:5f:1a:61:ff:d9:d5:93:78:73:c4:
08:5b:8e:44:0a:4b:f9:91:18:03:37:d0:06:74:e4:
a7:3d:c1:96:5e:54:f8:f8:63:56:f6:48:ee:de:b8:
dd:e1:41:f7:82:89:45:97:1a:9f:f1:c7:30:bc:b3:
de:ee:42:d8:6b:bb:22:ff:0d:03:11:01:cb:97:18:
eb:58:d3:97:aa:f1:38:8d:0a:58:07:c4:fa:b6:b5:
19:a6:37:04:c1:74:64:c8:57:cb:e0:fd:78:1d:da:
01:3c:53:54:ca:06:c5:69:6c:cb:6c:0a:c9:fe:40:
e5:39:6a:a0:48:55:10:6e:bd:83:2e:6b:c3:71:e8:
19:57:e5:40:64:c9:3f:b1:4a:5c:20:74:71:1b:aa:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:E4:26:26:55:39:7A:1C:29:E3:1C:0A:A4:93:FB:3B:9E:4C:A1
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:b6:c7:9e:1f:c2:9d:0f:44:0a:71:99:5e:f9:d2:2b:74:
df:e1:19:bc:8d:fc:47:2e:83:5e:84:d8:d9:99:20:b0:91:e7:
f3:8c:25:c7:86:aa:05:99:7f:a7:dd:d9:d1:d1:7d:3a:f5:ca:
82:7c:02:3d:bf:d8:ac:ef:33:22:e8:4c:6c:4b:07:dd:d7:3a:
1a:6d:30:f6:d2:10:01:c8:37:f5:9f:16:5a:9d:92:f0:ab:35:
de:20:a5:4d:08:a1:25:d9:48:6a:66:13:6e:94:05:5b:7a:ed:
41:62:7e:97:0e:f6:af:12:c2:b7:50:d7:5e:3a:90:e7:e6:de:
6b:da:f1:aa:7b:a9:b8:d2:d6:6c:cf:51:26:a7:93:aa:e1:7d:
30:58:7e:c9:f1:11:2a:cd:e8:43:0a:42:e5:d4:0c:02:0b:7e:
d8:90:f1:f7:5d:90:10:65:d7:25:89:e9:ca:a2:d4:e5:c0:7c:
52:e0:8e:43:b3:77:6f:10:5c:90:a0:86:6e:b2:a0:d9:7d:3e:
e8:24:af:63:c7:82:d7:51:5b:da:8e:a5:fb:2a:5d:d2:1d:42:
74:10:7c:45:08:f8:39:40:ea:b2:7d:14:e1:08:40:0e:70:19:
9e:18:74:fd:c1:6d:0e:a7:0d:4e:ae:27:af:47:bb:da:06:dc:
bd:17:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:23 2026 by rpki-client