Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: iLgSWQH1h+p/sXMOmxg9IqVZwd+c9t5ThbT8Z38nWjc=
Subject key identifier: 09:4F:A4:82:26:16:AB:21:12:88:8C:64:77:4F:77:57:1B:45:F9:FE
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A0D048C5C2D0649F441633CEBF4AC1944A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 11A4
Signing time: Wed 23 Sep 2026 22:00:25 +0000
Manifest this update: Wed 23 Sep 2026 22:00:25 +0000
Manifest next update: Thu 24 Sep 2026 22:00:25 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: 0vHEOGEP1kaVpCrhFHW8Y0Y/IKvkImCB+5rDYHLyn4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:c5:c2:d0:64:9f:44:16:33:ce:bf:4a:c1:94:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Sep 23 22:00:25 2026 GMT
Not After : Sep 24 22:00:25 2026 GMT
Subject: CN=094fa4822616ab2112888c64774f77571b45f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:1d:89:59:d9:27:f9:24:f9:ce:1b:92:60:
76:34:69:81:d6:aa:eb:b7:65:06:9e:dd:97:ea:54:
f8:cf:07:76:2e:6e:bc:87:6b:e7:4e:9b:60:85:fa:
80:ee:bd:37:b5:57:7d:1f:8b:7c:8f:09:6c:76:1a:
11:6c:58:0a:32:bf:52:99:a8:94:87:3f:61:23:2c:
34:b4:ab:71:d6:6d:d0:d9:79:a7:d3:a8:9d:0c:de:
5e:ec:1d:5e:25:3f:85:d2:bd:e9:40:42:cc:ec:f5:
ef:e8:ef:ff:cd:5d:92:ed:2b:11:2f:23:47:d9:94:
bd:9f:a2:2a:a6:c5:8e:b9:81:30:87:cf:a5:96:42:
61:76:21:ee:2d:09:33:9e:92:66:ec:0c:dc:dd:9f:
b9:24:be:dd:f5:35:21:5a:a4:7c:07:00:2c:02:d5:
73:dd:1d:ed:39:2d:49:9b:71:dc:65:a9:84:01:75:
5f:c4:33:8d:22:8d:15:56:7a:06:c2:0a:0b:bd:50:
a0:5f:75:7b:0e:c4:ed:b4:e5:d0:1d:ef:4c:19:1a:
50:63:db:5f:28:90:43:7b:d9:f7:19:62:c8:bb:28:
22:0f:dc:25:03:91:aa:a8:15:aa:a4:09:93:f5:6d:
34:4b:7d:13:23:2c:a0:23:82:00:d7:aa:ed:c8:09:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:A4:82:26:16:AB:21:12:88:8C:64:77:4F:77:57:1B:45:F9:FE
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:e2:20:4e:37:7f:87:2f:72:ba:98:6d:70:e1:51:33:6f:
36:e3:11:22:5b:fa:0f:03:d7:aa:49:4e:86:58:56:2c:0c:01:
83:b9:0a:48:b5:23:d1:b8:43:69:70:84:4e:71:6e:ed:f1:35:
44:4a:19:da:f6:3e:d7:91:06:a3:99:2a:a6:70:fd:98:0f:06:
c2:82:b3:01:95:e5:77:97:04:44:cd:de:9c:9e:a9:80:bc:75:
02:39:50:d7:b0:d7:59:0f:5f:e3:59:6b:b7:89:bf:de:a8:26:
73:7e:b0:ba:18:b6:79:cf:bd:e4:ea:90:44:ec:5d:97:40:7f:
2d:d5:56:44:72:80:07:2d:7b:f5:c4:09:5c:9e:51:c9:5d:a3:
19:a6:f9:2d:c4:0f:72:02:5f:08:2a:80:3a:76:00:bf:c2:5d:
0e:de:40:23:7f:89:6b:ae:89:5e:db:fe:11:b8:47:8f:a2:46:
ec:f4:e3:53:e7:27:3a:80:c5:53:5d:50:37:3f:8a:40:c3:13:
e1:f6:34:bb:40:86:8f:0a:58:19:72:c1:18:83:11:e9:b9:d8:
02:fa:c4:8a:a7:b9:d9:0f:f8:9f:04:55:af:a1:38:be:bb:12:
ce:80:20:2a:a8:13:6c:84:2c:85:d8:05:50:20:33:88:07:6a:
f0:22:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:23 2026 by rpki-client