Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
File: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft (raw, json)
Hash identifier: nzZ340OQHAyTDpKRb7m6UYmuCJ9Gb9J0n7TnV3/0wWQ=
Subject key identifier: 72:44:1F:8A:D2:00:FC:8E:1E:A8:E1:F4:61:DC:BD:6E:1D:3F:80:16
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 01A0D3EF59CBAF5C265AEFC56E79664A5FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
Manifest number: 0CF5
Signing time: Thu 24 Sep 2026 15:01:13 +0000
Manifest this update: Thu 24 Sep 2026 15:01:13 +0000
Manifest next update: Fri 25 Sep 2026 15:01:13 +0000
Files and hashes: 1: CAK35QTuEq8p5pMHpRsy6hrVFwE.roa (hash: 8N51l78zHWxXNaX9bCrXu1hYb7x2qMh5r0r2xumunCQ=)
2: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl (hash: 09mgAdjVA4WsayHgV1ghpnyqP0KG8fi2hDI/Y2+23Mc=)
3: vV3xBVfkG0M0NoQ2SxPY7yKei30.roa (hash: MMyfN4QSow3i88Wo+okKaUSdkHZvrx0YE/Konxtq/wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:59:cb:af:5c:26:5a:ef:c5:6e:79:66:4a:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Sep 24 15:01:13 2026 GMT
Not After : Sep 25 15:01:13 2026 GMT
Subject: CN=72441f8ad200fc8e1ea8e1f461dcbd6e1d3f8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:18:dd:1e:af:5e:1c:56:ec:a7:e7:97:85:
41:48:29:16:72:fb:43:80:78:90:84:5c:b0:ac:2f:
f4:db:e7:03:b8:f8:80:28:4d:74:78:05:6e:2e:bb:
40:c6:c8:76:85:2b:72:59:d5:3d:47:e3:39:3c:51:
8a:03:85:2a:db:ff:84:a6:f9:9b:d3:a7:61:1e:da:
da:bf:d4:a8:3a:87:fe:05:69:34:ee:ee:c1:e2:cc:
21:5a:37:11:75:cb:c3:16:bf:53:97:b8:d7:50:c1:
6f:a2:9e:73:ff:24:86:08:3d:96:9c:ad:47:6d:1c:
bc:af:20:b0:c6:c2:56:76:dd:db:f9:8e:b4:08:ee:
1b:b8:97:81:57:0f:3a:83:a4:ff:70:0e:19:2f:10:
0c:18:fd:42:de:be:03:cc:6f:e9:90:43:09:31:3b:
e1:7c:49:ef:ef:f6:7e:c8:b2:a0:9d:d0:51:3c:15:
cb:2f:37:c0:bd:65:6e:57:c7:1c:87:65:22:c5:2f:
a2:a8:71:7a:16:f5:89:a5:c9:0c:e1:5b:d0:03:e7:
8c:6a:93:14:49:0f:2c:a6:c3:e7:ae:fc:47:93:f3:
74:c8:e7:fc:97:d2:df:81:c8:0c:3d:ae:13:89:a6:
e3:d6:36:a9:97:cd:f0:99:2c:12:bd:62:d1:49:c0:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:1F:8A:D2:00:FC:8E:1E:A8:E1:F4:61:DC:BD:6E:1D:3F:80:16
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0e:4e:17:81:3b:1a:b2:22:35:f8:e9:b6:ec:81:46:4e:a1:
10:0e:29:55:a2:74:d6:b6:af:13:93:e2:2a:52:fa:3e:51:fc:
69:2e:6b:2d:c3:b1:4f:52:46:70:4b:15:f9:37:48:66:d7:6a:
bf:67:ba:99:c7:af:83:07:b9:1f:fc:95:2c:8a:d4:77:a6:c3:
69:38:64:2b:d8:6d:16:25:cd:77:51:a5:ba:8b:6e:90:20:a5:
b1:e6:e5:d0:91:78:4a:f2:f0:f6:c2:3c:6a:a6:f8:c0:fd:52:
5a:03:e5:4f:37:39:ff:f6:c2:9a:d1:76:28:23:42:e1:20:67:
99:07:a6:cf:ef:47:60:25:77:ef:b4:d5:23:47:fa:9b:0a:05:
f4:bf:57:4c:ae:19:e2:bb:ba:f1:b4:93:cf:a2:eb:dc:0b:f3:
17:c1:0b:0b:ce:84:88:ec:cc:d6:25:c6:a3:c0:41:f8:12:7a:
21:51:2c:58:47:82:c0:6b:40:06:99:74:60:40:0a:95:69:54:
e0:11:9f:f3:63:e6:88:30:2b:21:8d:56:5f:c1:4d:28:05:33:
c2:d7:cd:2a:4d:5d:96:9a:da:00:cb:54:88:3c:a6:09:eb:eb:
bb:bc:b1:e2:eb:e3:24:a8:6d:74:26:d3:b6:9c:8c:19:4f:db:
28:a1:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:07:03 2026 by rpki-client