Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: 5Zk+jWb2fYTP7bR6hbNmKkSKb+1kNxFF9T3HzEedSzc=
Subject key identifier: 22:C2:54:86:7B:67:5F:B3:EC:2C:A1:68:A5:F9:E8:42:67:35:B8:CC
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 01A0CB90B640B37CF680097727E36A363C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 00:00:53 +0000
Manifest this update: Wed 23 Sep 2026 00:00:53 +0000
Manifest next update: Thu 24 Sep 2026 00:00:53 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: uuHk5gzMDW8ItfFchGr2OUHQ4ZJX9C0O2aWvwxgvJis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:b6:40:b3:7c:f6:80:09:77:27:e3:6a:36:3c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Sep 23 00:00:53 2026 GMT
Not After : Sep 24 00:00:53 2026 GMT
Subject: CN=22c254867b675fb3ec2ca168a5f9e8426735b8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:df:12:7e:93:da:44:40:d7:3b:91:58:4a:
ef:08:67:06:04:b7:2e:cd:bb:0d:95:40:42:8f:25:
f5:09:76:a7:43:30:a5:cc:7d:67:50:6a:a6:aa:da:
b2:95:b2:fa:0a:30:a6:f9:25:60:25:57:fb:47:f2:
01:43:a1:4e:39:1c:c2:2b:42:dc:03:0e:3f:f8:20:
14:1e:b5:f0:0d:95:8e:b2:3f:7b:28:3b:2d:33:d9:
52:9e:d8:37:f0:83:41:07:9e:c4:01:7d:c3:fb:b3:
b6:bb:a0:7e:13:bd:17:8f:84:5b:e3:c0:f7:6d:7a:
7f:36:66:3b:9e:3a:5b:14:3a:54:fa:c8:09:62:1f:
17:5a:86:ed:e4:76:06:9c:ab:1d:14:92:b9:e0:da:
14:2b:36:f1:52:a7:23:94:02:f3:6e:6f:ae:6f:93:
f2:f0:80:2a:66:39:ae:f0:59:40:4d:52:29:96:0d:
58:40:c4:90:53:45:8d:f0:f4:d8:fd:94:80:e7:cd:
16:2c:b3:77:43:82:77:c8:2f:2e:1c:e5:32:88:b9:
c3:70:4a:a8:3d:82:c0:ee:ca:5b:94:cc:0b:d7:0f:
e3:57:9b:a5:d8:8c:f3:1d:77:22:b7:7b:07:02:dd:
38:21:e9:2f:4f:40:14:98:c5:e9:66:da:1e:ff:59:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:54:86:7B:67:5F:B3:EC:2C:A1:68:A5:F9:E8:42:67:35:B8:CC
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4f:1b:72:7e:99:eb:da:65:07:ad:eb:fe:6f:9b:90:10:2e:
3c:41:c4:78:20:8e:12:e6:be:99:b4:e7:98:73:bd:49:e4:b5:
89:8f:91:e8:c3:43:e5:0b:96:e8:03:2a:0c:02:60:46:eb:2e:
10:50:4a:21:18:03:34:0b:90:f7:ae:ea:3c:dc:2a:65:9a:50:
7d:ba:40:7b:24:41:35:74:ee:40:e5:dd:48:22:b9:33:fb:91:
66:fe:8e:9b:aa:ba:7b:d9:a9:65:45:fa:92:21:d7:58:37:4e:
07:ad:b4:b1:96:b8:4e:81:29:1e:45:33:68:ff:1c:35:ba:32:
b8:e8:21:85:b4:64:4e:88:93:e5:c7:fb:8e:fc:66:10:31:7e:
88:bc:cf:3b:a2:74:09:62:e3:0f:7d:de:51:02:f9:da:6b:6d:
5a:b1:9d:62:1e:54:19:8b:f2:46:d0:f4:fa:35:a0:d3:f9:20:
68:88:07:5a:b8:37:55:54:0f:5b:78:77:cb:4a:38:c5:de:61:
ee:ab:eb:d6:b0:64:f5:4a:28:48:1a:18:8d:34:53:3d:36:c3:
94:29:82:b9:b1:53:cc:6e:e0:32:ad:06:c5:45:ed:85:04:73:
98:b2:cc:7c:4d:4e:c5:73:72:dc:24:99:a7:d5:89:eb:9c:8b:
18:07:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:48 2026 by rpki-client