Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: zX89fHx6kgHqGPEhuQzOBpJDptK+5XnctwlWaLxTG2o=
Subject key identifier: C7:77:BE:82:BF:E9:F7:BD:24:AB:36:E9:94:BD:ED:B6:36:34:EA:96
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01A10994D397759874254F040175127F6C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 1AB1
Signing time: Mon 05 Oct 2026 01:01:50 +0000
Manifest this update: Mon 05 Oct 2026 01:01:50 +0000
Manifest next update: Tue 06 Oct 2026 01:01:50 +0000
Files and hashes: 1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: 7ApOrh1FKQjhZhto50+7Y4u+h12dgxxn7Q3xBwQzs8Y=)
2: S9k_0IlINL-KeGXzKJG1-aE0tUw.roa (hash: O/mE/4dpTNBbXj9EMpbseAy+oyk2TkWYstcB6Otmbbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:d3:97:75:98:74:25:4f:04:01:75:12:7f:6c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Oct 5 01:01:50 2026 GMT
Not After : Oct 6 01:01:50 2026 GMT
Subject: CN=c777be82bfe9f7bd24ab36e994bdedb63634ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:27:d2:f9:dc:32:cc:75:c6:2a:b3:b8:cc:
02:ab:16:fe:af:d6:46:75:f7:8f:97:38:09:2e:e0:
86:62:fb:0b:38:ff:69:1d:82:a3:03:8a:ca:8a:b1:
31:7d:88:f5:31:4f:c6:b7:ca:0f:7a:09:f9:7f:06:
cd:b0:11:c4:2a:57:28:9f:78:20:f0:61:3d:62:ed:
32:76:41:69:b0:9d:4c:6e:f5:21:41:41:bf:a0:b8:
8f:44:33:b6:95:b1:5e:5e:e8:d6:97:46:ba:26:01:
52:36:a9:0a:e8:43:28:2e:0f:70:8e:af:93:f1:70:
ca:f0:93:f5:93:f9:e5:f7:87:17:a4:96:92:56:bd:
23:05:03:24:ef:b6:c4:48:b6:e3:ae:6c:3c:3c:08:
27:b6:43:de:b8:75:21:87:d6:cc:3c:53:fd:42:86:
58:78:33:d7:a5:59:2a:57:2c:60:7b:f0:e1:fa:0e:
a4:db:e8:17:06:6b:6b:83:17:cd:97:c2:29:33:1b:
51:bf:87:e5:ba:75:9b:d5:a9:f0:6e:38:3f:a8:11:
81:66:77:a1:7c:2c:83:a0:36:26:e3:e5:91:8d:1e:
df:2f:59:80:1c:f4:ad:60:8a:74:c2:c4:44:74:3b:
41:8a:af:9e:6f:43:06:21:b8:08:c5:0b:98:d8:d4:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:BE:82:BF:E9:F7:BD:24:AB:36:E9:94:BD:ED:B6:36:34:EA:96
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d5:31:8e:8e:f8:f7:00:2f:d6:5f:6c:bb:4d:24:19:5c:b8:
8c:6e:04:f1:56:c4:10:29:45:cd:07:d2:37:c6:f2:a7:96:2f:
67:4a:78:a6:d4:32:57:65:53:1e:6c:16:fe:f3:a0:c5:33:6e:
22:b0:a1:2b:00:bf:fd:a9:db:bd:95:d2:a5:01:43:89:c1:ae:
64:58:22:f5:df:dd:a2:0a:7c:6f:0a:82:7a:ad:60:11:ec:47:
6e:30:6b:0a:86:be:b0:a7:06:dd:b2:87:28:94:3f:7d:c0:1e:
86:c2:15:5b:b0:d0:78:08:39:8f:3e:7b:9d:41:34:93:a3:62:
f3:94:1f:35:0e:2c:82:82:46:52:2b:43:5c:ff:72:a2:a7:80:
3e:f3:d7:83:81:1f:04:dd:9e:ce:fd:d5:ef:22:60:9a:da:9e:
84:cc:2a:e1:86:41:9c:9c:aa:88:9b:84:59:29:e4:09:b4:56:
b4:9f:35:ff:cf:47:d0:65:f7:ef:04:67:cf:84:fe:85:1c:5d:
a5:82:96:ce:bf:a2:b9:e8:d6:85:c1:97:46:bb:77:7d:58:bf:
1f:79:a7:57:62:18:6a:11:40:26:94:aa:bd:04:4f:eb:77:48:
b6:92:67:2b:b7:c2:92:40:b1:bf:93:b0:0a:50:89:7f:ff:34:
51:79:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:47:43 2026 by rpki-client