Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
File: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft (raw, json)
Hash identifier: n/ND402UDiBmrbpzb4TZBgoiU6MIpFGqxFCOG/EzU44=
Subject key identifier: FD:FF:E1:0A:2D:1F:43:12:4A:BD:88:20:1F:01:96:66:17:3A:D9:02
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Certificate issuer: /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial: 01A0D5DE84189C3D1478FB2212081C526F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:04 +0000
Manifest this update: Fri 25 Sep 2026 00:02:04 +0000
Manifest next update: Sat 26 Sep 2026 00:02:04 +0000
Files and hashes: 1: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl (hash: 0hUmRv5vPL9Ucn2SD9CEc7W8xbhNj6+vMSeUcbCBR8A=)
2: O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa (hash: NAJt8mOJoxYYW9MXtdTP+WC2VQ+5i9NPNpJvzgY1wPI=)
3: VNXUTkLhTELCHL_xYmLDqoTk_E8.roa (hash: Y3N0C2Cl9/mbPajcJg1hote0RwDtUuKBwQjft6/aYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:84:18:9c:3d:14:78:fb:22:12:08:1c:52:6f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Validity
Not Before: Sep 25 00:02:04 2026 GMT
Not After : Sep 26 00:02:04 2026 GMT
Subject: CN=fdffe10a2d1f43124abd88201f019666173ad902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:92:07:eb:1d:69:28:38:c7:65:b1:be:a2:
d0:53:f9:8b:2e:a6:8f:1e:4a:35:35:31:26:f0:76:
1d:0a:85:2e:cc:5d:93:d1:1c:ad:ea:05:52:d7:e7:
e1:ba:08:ab:21:a5:8a:ed:44:22:f3:bd:bb:10:43:
2d:ff:dc:f3:0f:98:9e:32:eb:5d:9e:c7:35:a1:c0:
14:18:22:61:c2:e8:e4:e0:82:1a:82:f7:ef:cb:7b:
ee:f0:aa:97:e7:49:5e:88:a1:20:dd:be:88:87:f7:
bb:8b:cb:17:4f:76:9c:dd:af:68:40:c6:87:bb:fd:
40:ba:82:cf:06:8d:2a:7f:d9:3a:7e:f2:02:4f:79:
83:07:10:37:4b:bc:61:00:e0:50:56:da:88:5c:7c:
ce:93:2a:9c:e8:6b:b5:56:d7:ee:11:cf:79:0c:ee:
11:6e:78:2e:25:f6:c4:10:fa:a1:01:d4:68:08:ce:
f8:33:ca:c2:1a:84:05:8d:14:5c:24:37:ee:1a:97:
cc:39:8b:99:b9:86:37:d3:6c:64:d6:55:ff:e6:8a:
ac:b2:70:c9:95:ba:13:88:ee:e7:b6:c1:43:70:d0:
cf:ee:6d:38:4f:ca:73:8c:3b:32:24:87:3f:a0:a4:
41:2a:3b:3a:1e:5f:de:1c:54:23:4d:69:f7:ed:79:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:E1:0A:2D:1F:43:12:4A:BD:88:20:1F:01:96:66:17:3A:D9:02
X509v3 Authority Key Identifier:
keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:72:74:5b:ec:c5:b2:50:86:b5:d6:4c:1d:e3:46:61:29:
8a:72:16:bf:dd:a7:6a:c7:9f:dd:22:9d:34:61:1f:5d:02:a8:
bd:cf:2a:2e:54:36:65:db:0b:60:09:d0:fd:2e:9d:d3:b0:e1:
80:98:58:7f:9c:01:86:ff:fe:aa:06:16:30:ca:18:4e:25:55:
bd:31:21:c0:a8:2d:59:74:03:13:0e:dc:d3:f5:ec:6f:ed:ac:
a1:8d:f6:97:f5:89:0d:b7:c8:cf:1e:e5:52:3d:02:a8:66:1b:
7f:b0:3f:59:4d:06:f8:31:55:9e:2f:c5:da:f8:8c:ef:ed:0e:
db:d9:09:41:8a:6a:eb:ad:fa:f6:16:f1:97:e0:4b:89:9a:55:
27:69:fe:f8:3c:ea:47:fc:bd:bf:52:a3:d6:f6:b4:d3:84:cd:
9a:95:87:cc:24:32:e2:fd:15:d5:2b:02:d3:44:b0:c6:16:67:
0b:cc:8a:5d:a6:db:59:ea:38:71:4f:72:38:19:9f:d4:a9:06:
50:79:53:ef:30:42:98:ed:ef:d9:07:5c:4a:3c:d5:39:d2:47:
b3:ec:ef:c6:1a:39:75:c1:62:b0:01:e9:06:c3:be:ab:1e:c1:
46:79:50:bc:ba:e0:82:9d:eb:09:12:9a:db:45:f4:02:3d:79:
4e:17:e6:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3oQYnD0UePsiEggcUm+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTRkZDhmODA0ZjY2Mzc1NjgxOTRlM2M3OTM5NWQ4ZWE2
MGJkNDkwHhcNMjYwOTI1MDAwMjA0WhcNMjYwOTI2MDAwMjA0WjAzMTEwLwYDVQQD
EyhmZGZmZTEwYTJkMWY0MzEyNGFiZDg4MjAxZjAxOTY2NjE3M2FkOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWeSB+sdaSg4x2WxvqLQU/mLLqaP
Hko1NTEm8HYdCoUuzF2T0Ryt6gVS1+fhugirIaWK7UQi8727EEMt/9zzD5ieMutd
nsc1ocAUGCJhwujk4IIagvfvy3vu8KqX50leiKEg3b6Ih/e7i8sXT3ac3a9oQMaH
u/1AuoLPBo0qf9k6fvICT3mDBxA3S7xhAOBQVtqIXHzOkyqc6Gu1VtfuEc95DO4R
bnguJfbEEPqhAdRoCM74M8rCGoQFjRRcJDfuGpfMOYuZuYY302xk1lX/5oqssnDJ
lboTiO7ntsFDcNDP7m04T8pzjDsyJIc/oKRBKjs6Hl/eHFQjTWn37XlWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3/4QotH0MSSr2IIB8BlmYXOtkCMB8GA1UdIwQY
MBaAFBPk3Y+AT2Y3VoGU48eTldjqYL1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0VydFvs
xbJQhrXWTB3jRmEpinIWv92nasef3SKdNGEfXQKovc8qLlQ2ZdsLYAnQ/S6d07Dh
gJhYf5wBhv/+qgYWMMoYTiVVvTEhwKgtWXQDEw7c0/Xsb+2soY32l/WJDbfIzx7l
Uj0CqGYbf7A/WU0G+DFVni/F2viM7+0O29kJQYpq66369hbxl+BLiZpVJ2n++Dzq
R/y9v1Kj1va004TNmpWHzCQy4v0V1SsC00SwxhZnC8yKXabbWeo4cU9yOBmf1KkG
UHlT7zBCmO3v2QdcSjzVOdJHs+zvxho5dcFisAHpBsO+qx7BRnlQvLrggp3rCRKa
20X0Aj15Thfm9A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:58 2026 by rpki-client