Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File: Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier: SBZyg06ijT219barb6OnMRlMeY2YZZIuX/kzY8yrZlE=
Subject key identifier: 35:3C:52:22:2D:60:58:8A:6B:36:70:0A:33:AF:C6:27:BC:84:A2:01
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 01A0D3154F4A500270FC22A32755F7F62760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 11:03:04 +0000
Manifest this update: Thu 24 Sep 2026 11:03:04 +0000
Manifest next update: Fri 25 Sep 2026 11:03:04 +0000
Files and hashes: 1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: H35KTabCZi9Zm4SViV9/jnnjksJXmnSrgXrPRzQvFyI=)
2: QQeKybyvUtPZq8rtSA1qJFplh-8.roa (hash: Q+OBW6DZJdlZ5hkFmp4+rBZr4bNQDjXlXvwILFLY5Hw=)
3: fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa (hash: pvDkmaTgQN4sNGe38GsqD+fJLQuvpfb1vbqdHC2CF7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:4f:4a:50:02:70:fc:22:a3:27:55:f7:f6:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Sep 24 11:03:04 2026 GMT
Not After : Sep 25 11:03:04 2026 GMT
Subject: CN=353c52222d60588a6b36700a33afc627bc84a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3c:ef:fe:c4:93:6d:5c:d5:4c:4f:ba:b4:6c:
79:19:bc:6f:ec:c2:7d:d9:ca:f2:2d:92:20:85:d1:
a2:48:33:c8:3f:8c:48:bc:2b:6e:4d:48:68:48:43:
ea:95:b6:4c:3d:d9:b8:e4:06:3d:6e:c2:f3:de:ee:
88:12:f6:39:25:d2:4d:e2:be:3a:4f:b7:9e:09:7b:
1d:0e:2c:49:46:52:33:b7:84:9b:10:cd:6b:f0:d9:
4c:f3:3c:b2:d0:e6:ae:3b:6f:18:d0:e9:8d:c3:f3:
20:6a:7d:a2:c9:3b:02:18:f4:d4:e0:16:07:d5:98:
a2:61:2f:6d:67:51:48:79:0f:e2:cd:a4:66:1c:5b:
8f:75:27:0d:53:fa:23:72:57:14:43:dd:ae:f0:fa:
b3:64:dc:2a:39:24:4d:12:79:2c:d3:f0:91:65:57:
b1:b3:d4:43:8b:f3:eb:bb:d2:e9:a6:71:f5:16:28:
97:47:33:de:af:1f:78:4c:ee:97:a5:c7:32:76:dd:
b3:de:75:3a:72:f9:da:1c:6b:5b:c6:e5:da:a2:20:
93:ed:7b:c7:f4:fa:d8:5b:4b:21:68:a3:bc:5d:50:
4f:be:6d:f2:9a:6a:cc:d6:94:d9:5c:0b:f5:c8:a8:
5f:15:2e:a6:71:8c:aa:87:c0:6f:67:d0:82:c7:14:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:52:22:2D:60:58:8A:6B:36:70:0A:33:AF:C6:27:BC:84:A2:01
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:19:70:b0:af:ae:09:8e:e5:dd:a8:1a:77:a1:7a:0c:55:
7b:24:90:f0:fc:4f:84:28:58:ed:dd:2f:39:eb:b1:e0:e8:9d:
48:7d:47:56:93:42:d4:53:50:13:2d:93:34:99:fd:4b:1e:20:
11:2a:03:ac:61:01:20:39:de:0a:6c:77:ca:89:74:bc:98:70:
f1:80:94:99:84:16:e1:2c:40:07:ef:dc:54:95:f4:a7:95:a5:
ec:56:d5:0e:b9:1f:49:14:47:99:17:d1:10:19:25:af:83:0b:
b1:d2:6a:89:69:54:be:b7:2f:c9:d2:6e:4a:c1:c9:cc:28:8b:
10:79:d3:ef:ea:e6:7a:be:f1:e1:94:ad:c6:75:f3:98:ba:3f:
e5:f9:7c:c2:ea:60:d6:a6:07:72:85:5d:73:f4:29:cb:7d:d4:
c8:d5:11:b1:5a:74:d4:1d:21:c3:e0:6b:69:cb:2d:64:60:f4:
4a:9d:e2:c8:01:76:ec:bf:af:a7:c5:94:6e:12:e7:21:ff:9e:
d0:03:ab:45:09:b2:c2:d3:ca:a1:d1:c3:95:ae:d9:61:23:bd:
7b:fa:35:54:76:d3:9c:f9:d9:c1:d8:1d:b3:0c:63:58:64:70:
e7:a5:4e:06:8c:a2:84:e6:6e:3f:fc:9f:a4:7a:4f:39:aa:c8:
82:dc:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:07 2026 by rpki-client