Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: U+TiPME+pO+cPEsS80sxWLfPtqY8dap0yNWumQt00Cg=
Subject key identifier: 54:3D:CA:D5:EF:DC:FD:69:77:23:A3:35:D8:BE:63:D9:BE:5C:05:54
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 01A0D1926DEF0A21F79C006A9A5F37EBB2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0F93
Signing time: Thu 24 Sep 2026 04:00:29 +0000
Manifest this update: Thu 24 Sep 2026 04:00:29 +0000
Manifest next update: Fri 25 Sep 2026 04:00:29 +0000
Files and hashes: 1: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: t1UTutpldiq0opsaWmbLfAe8c9iUVxyMOygiwWubCHg=)
2: ryw8pANYiWDQuIyjdZ7oamR1t58.roa (hash: 2HMSeXqRqzVzH58INszxQlwSvF3HPks2TZimmKfWKr4=)
3: w1lnaXc0stYti4D5HKapAQ20wiM.roa (hash: dNDg8xo8m9AS8HO+Ntxotl19K7LOzsHs1ntt7tMGKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:6d:ef:0a:21:f7:9c:00:6a:9a:5f:37:eb:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Sep 24 04:00:29 2026 GMT
Not After : Sep 25 04:00:29 2026 GMT
Subject: CN=543dcad5efdcfd697723a335d8be63d9be5c0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:cb:6f:95:30:c0:a5:61:59:b1:84:20:69:
0d:af:a3:fa:e0:20:13:2a:59:92:0e:8d:fc:49:79:
b5:9e:ca:95:3e:dc:0f:d9:0c:fe:5a:f8:70:d2:aa:
d3:ae:93:ea:74:2e:84:f5:e4:f6:97:c6:af:f5:f9:
08:66:d3:cb:91:83:f8:15:a6:52:69:5a:3b:dd:23:
38:03:83:59:06:29:88:aa:cf:76:63:08:15:eb:9a:
2a:4d:bb:ad:18:eb:e6:b7:62:2a:4c:bd:1d:93:51:
62:48:a3:2b:f0:80:b0:27:2f:d9:bc:c0:38:65:cb:
6a:37:11:eb:5a:85:ee:76:74:17:ee:fc:f5:b9:35:
c8:88:aa:71:71:03:bc:ab:c9:8c:c6:bd:87:4b:58:
c3:15:96:57:2d:25:a3:7b:1c:01:d0:f0:03:33:c4:
05:e2:2f:92:f3:74:18:23:bc:50:37:5c:93:f3:10:
c4:93:91:ac:3d:cd:41:7e:84:c2:f4:cb:56:9b:df:
e0:48:3e:e3:fc:3a:05:a6:8b:75:3c:7e:58:60:13:
42:15:09:30:54:26:6e:e3:ab:fe:73:b6:15:89:a3:
6e:1f:48:a2:05:35:6e:9c:bd:f6:90:af:f1:2d:60:
58:d6:62:3b:7e:57:fa:0f:ee:11:5f:3d:39:9c:2b:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:CA:D5:EF:DC:FD:69:77:23:A3:35:D8:BE:63:D9:BE:5C:05:54
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7d:39:25:2e:e8:c2:9f:eb:9f:4a:1b:ff:72:e0:73:c8:2e:
9b:7b:02:11:97:05:bc:ec:38:f4:d2:a5:67:7d:3f:7c:a0:6f:
63:6e:f6:aa:39:77:7e:43:32:f4:10:45:08:11:c3:6d:30:c0:
0a:8e:31:23:bf:08:e0:14:3e:58:ae:bb:20:63:b4:13:a1:64:
a3:8a:79:2c:1b:7b:fa:9b:d3:a3:01:66:65:7e:87:c3:18:5c:
fc:bf:f3:59:b3:ae:2e:ae:a9:62:fa:29:09:21:86:40:3a:8d:
dc:eb:89:c6:fa:01:47:62:f5:8c:50:8e:8d:b3:ec:04:59:08:
88:c2:e7:27:bd:93:4d:34:32:3a:26:98:66:e6:3e:e2:17:a9:
56:80:65:17:ca:8f:6b:d4:6c:2d:04:59:97:af:0e:c9:cb:54:
f6:eb:5d:f8:51:0d:50:50:a6:fa:5c:ea:48:86:35:9a:af:b1:
c5:79:9b:4e:39:49:2e:2a:df:c6:87:b8:29:93:ff:0a:5d:92:
e9:66:37:75:3b:31:f6:b9:83:c7:5f:a4:71:72:ed:c2:18:13:
38:14:a9:27:bc:2b:16:c2:14:b4:ef:cf:f1:0a:02:e3:47:51:
c7:10:03:65:69:85:d1:c8:3f:6d:e0:6e:a3:05:3a:5d:f8:90:
53:d9:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:36 2026 by rpki-client