Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.mft
File: 1iWDepuWqYA0tkZb4g6pgiM7Wdc.mft (raw, json)
Hash identifier: BceTdsRa8m8ksSMDI0Mq0ymIgZHkOSkemvLRFvRYRJg=
Subject key identifier: 06:F9:81:B1:1F:CB:16:ED:97:80:8B:A2:54:0F:A8:EC:0E:1C:ED:C6
Authority key identifier: D6:25:83:7A:9B:96:A9:80:34:B6:46:5B:E2:0E:A9:82:23:3B:59:D7
Certificate issuer: /CN=d625837a9b96a98034b6465be20ea982233b59d7
Certificate serial: 01A0CB5920E7D16E3A58CB8A84EE0280617B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iWDepuWqYA0tkZb4g6pgiM7Wdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 23:00:10 +0000
Manifest this update: Tue 22 Sep 2026 23:00:10 +0000
Manifest next update: Wed 23 Sep 2026 23:00:10 +0000
Files and hashes: 1: 1iWDepuWqYA0tkZb4g6pgiM7Wdc.crl (hash: evenObgENyNCvkALqZxIg57bRLh1oRm+t4KRqU44nQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iWDepuWqYA0tkZb4g6pgiM7Wdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:20:e7:d1:6e:3a:58:cb:8a:84:ee:02:80:61:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d625837a9b96a98034b6465be20ea982233b59d7
Validity
Not Before: Sep 22 23:00:10 2026 GMT
Not After : Sep 23 23:00:10 2026 GMT
Subject: CN=06f981b11fcb16ed97808ba2540fa8ec0e1cedc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:09:cc:79:41:f9:99:d9:ca:ab:e7:5d:57:
d3:5b:ce:d9:64:74:4e:af:54:75:5f:ce:df:3f:da:
21:19:02:19:07:cb:7a:e1:c0:9b:95:a4:ed:c2:71:
a9:aa:f5:52:8f:1d:45:79:48:12:ff:2e:1b:ad:f9:
3e:5a:ac:ba:a5:e2:fe:8b:fc:2d:61:bf:75:67:92:
e9:7f:90:c3:a5:5e:a3:e2:8a:2b:d3:23:82:4e:ee:
7d:2a:46:21:9e:5d:69:6a:a5:f4:28:3a:69:d9:10:
33:7e:2e:46:67:a3:77:83:6a:8d:6d:88:90:33:fd:
64:e9:3a:93:19:a2:6a:ac:da:75:de:8f:e9:ce:2b:
57:d7:e9:29:70:cd:d1:2b:e8:cb:43:26:c6:4d:36:
58:7e:93:8d:ff:f3:d7:fc:09:e2:aa:90:b7:f9:62:
d8:a1:25:9b:ca:0e:9f:d7:ea:ef:a8:e4:c4:e2:ba:
d3:5d:56:18:65:1a:13:55:57:45:4e:07:e0:65:31:
44:14:27:16:0a:d7:bc:2a:2d:71:79:1b:72:b3:74:
1d:e3:a7:3b:a4:e4:36:b6:86:b1:ba:8a:81:3d:db:
c0:a0:91:d6:f1:5f:6b:06:12:e9:0a:d7:52:7c:f9:
a8:c4:d1:8b:4c:e8:51:b8:29:07:6a:2d:2f:b6:6a:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:81:B1:1F:CB:16:ED:97:80:8B:A2:54:0F:A8:EC:0E:1C:ED:C6
X509v3 Authority Key Identifier:
keyid:D6:25:83:7A:9B:96:A9:80:34:B6:46:5B:E2:0E:A9:82:23:3B:59:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iWDepuWqYA0tkZb4g6pgiM7Wdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/1iWDepuWqYA0tkZb4g6pgiM7Wdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:1e:4e:de:a3:0a:b2:78:70:05:6f:ed:1a:0d:52:7f:2b:
1b:4e:6a:2f:7a:41:c8:e4:4a:3e:b8:77:64:1a:3e:d9:ef:0e:
db:d2:f7:71:89:ec:ed:f4:b4:4e:92:7b:a2:5f:c4:2e:28:b2:
d4:e5:17:3a:af:78:97:be:2e:af:f0:7a:64:07:81:15:9b:63:
5d:f2:5c:93:c3:cd:ee:e8:fa:4c:13:fd:ed:bb:43:77:fb:7b:
88:66:ec:8a:94:e0:95:b2:0a:ca:50:3b:f0:b2:0a:00:a3:96:
df:15:f5:7a:20:48:41:76:b8:d8:5c:ca:38:c8:dd:41:bf:e3:
44:67:88:c1:ed:41:cc:53:1a:65:fe:bd:eb:2a:97:9b:fa:c7:
85:17:11:e3:1e:50:1c:36:0c:6c:1a:00:fa:c3:ee:00:ea:91:
76:88:85:11:4f:80:4b:54:d2:c7:1a:69:4e:ef:d9:13:7d:54:
03:48:96:4d:0e:8a:f7:ed:cb:89:60:04:da:86:7d:75:db:aa:
bf:2f:14:92:16:25:f0:51:54:44:9a:18:e7:2c:27:94:e7:88:
ab:7e:b3:47:f3:17:f0:2f:f3:2d:e2:96:c9:4a:c6:49:cd:b1:
db:7e:a7:c4:5b:43:de:0d:e7:fd:17:4b:2b:1e:55:9d:b5:72:
83:10:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:29 2026 by rpki-client