Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: DYUA0Of+CEfuwi84UcTKALMBzRstbr4AjNvrNU/LXrc=
Subject key identifier: 3A:8C:95:98:3D:12:44:E7:7E:18:CC:E6:0A:03:A8:80:DB:38:FA:2F
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 01A0D7CCB73C78C423B76BFCD0E6140B9331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:52 +0000
Manifest this update: Fri 25 Sep 2026 09:01:52 +0000
Manifest next update: Sat 26 Sep 2026 09:01:52 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: sC9ALn2HcGA5cioDhcqH3bWVmHWA5vGJUvILCVBybkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:b7:3c:78:c4:23:b7:6b:fc:d0:e6:14:0b:93:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Sep 25 09:01:52 2026 GMT
Not After : Sep 26 09:01:52 2026 GMT
Subject: CN=3a8c95983d1244e77e18cce60a03a880db38fa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:a3:a5:57:06:b3:d7:4c:9f:5f:16:eb:7b:
c5:5a:7c:ae:6e:4c:c6:1b:50:1e:da:98:ec:08:2a:
34:c4:74:65:e5:e7:21:1e:2b:03:1d:c4:3e:91:5d:
19:09:0c:3d:08:8d:b4:88:f3:1e:d4:33:b9:68:2f:
04:77:b9:6d:b1:e1:15:61:2a:31:69:2d:d1:c4:83:
b5:fa:f5:b0:cc:26:45:c5:30:81:5d:94:14:ed:03:
b7:c2:05:44:d5:a2:e0:7b:8b:ef:d4:dc:21:e5:f2:
31:3e:3b:fd:62:a7:04:51:3b:a7:35:a1:4e:88:45:
c3:0d:e1:a6:55:68:3c:21:65:73:75:76:68:34:51:
21:6c:16:20:f3:33:f9:76:51:ad:6a:4b:fb:28:cc:
89:89:1e:7c:51:91:22:e5:9c:95:31:14:e7:a4:3a:
b0:79:5b:8e:7a:fd:02:90:3e:af:8b:12:e6:e7:63:
72:97:b9:31:84:91:fc:35:93:7b:d3:36:d6:b9:38:
ba:17:9d:61:f1:16:18:a6:75:41:a2:56:f0:aa:ac:
0d:86:34:af:2e:9a:2c:dd:b0:00:2d:80:70:85:bf:
98:95:15:96:a1:6a:e4:83:80:97:8d:d5:df:35:1a:
c3:2c:40:1d:32:de:e7:df:d4:f4:52:23:18:eb:d6:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:95:98:3D:12:44:E7:7E:18:CC:E6:0A:03:A8:80:DB:38:FA:2F
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:18:8b:bc:28:62:16:01:31:0f:1f:b7:34:55:c0:44:ab:
7f:dd:eb:82:d8:6d:4c:38:bf:17:a1:d5:b5:dc:79:1d:df:cd:
63:fa:e0:d2:99:e7:fe:e6:92:52:79:41:2a:68:e9:08:83:9e:
74:ae:2b:51:54:a5:b9:02:7d:76:0a:2a:e6:bc:62:9f:7d:14:
41:7d:f3:32:60:5c:81:a7:ba:4c:dc:08:02:13:7c:0f:fe:63:
27:55:ec:76:32:8d:fc:79:35:94:2e:9e:ad:00:56:f6:56:ff:
b0:22:ef:75:9e:a2:5e:32:2f:ac:21:d9:50:44:4a:4b:83:a8:
f7:b8:22:52:77:86:5a:4b:fa:56:84:15:c9:2d:7b:38:78:f6:
67:af:be:39:4f:6c:6b:a1:b1:45:1c:ad:66:bd:8d:a5:03:f7:
c1:ed:74:0c:d2:ac:4d:e6:db:a3:2d:66:f5:f3:1f:4b:d9:b6:
0c:69:f2:9b:0a:cd:b5:44:99:7a:f7:a0:6f:5e:43:07:f5:8b:
5c:01:74:70:79:bd:21:a2:4f:f2:95:1e:77:9e:f2:40:e4:46:
3d:0d:64:89:38:7b:13:63:93:18:db:81:36:d5:52:6d:f0:df:
05:d0:3e:04:15:d4:4c:c2:3d:eb:80:c7:f5:5c:9f:88:1a:4f:
8f:e0:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:34:27 2026 by rpki-client