Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: 1RCtSWoGd+J4d3yEp8RJ7Z+vYZxcMIE+kHAqZmvCrEg=
Subject key identifier: 2F:57:11:E9:9A:8B:5A:E5:13:97:2E:5E:4C:70:1E:CD:63:D8:B9:89
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 01A0BCC2EBB885B2C06F1E12A6711D45BFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0EAF
Signing time: Sun 20 Sep 2026 03:01:25 +0000
Manifest this update: Sun 20 Sep 2026 03:01:25 +0000
Manifest next update: Mon 21 Sep 2026 03:01:25 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: tkW6UfaI/P394oAlwvrbe9SJs4rzg5rA1RQw9IDb+gc=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:eb:b8:85:b2:c0:6f:1e:12:a6:71:1d:45:bf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Sep 20 03:01:25 2026 GMT
Not After : Sep 21 03:01:25 2026 GMT
Subject: CN=2f5711e99a8b5ae513972e5e4c701ecd63d8b989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:79:11:3e:b7:db:46:1b:9c:cc:19:14:b2:
b0:df:ed:4c:f2:a6:78:52:34:4b:b7:ae:9f:c8:db:
27:5c:34:65:a0:43:24:83:40:3a:71:2f:5a:63:9a:
ee:a8:6f:eb:80:5c:3c:b0:fc:ad:fc:99:dc:5a:9c:
7d:96:45:78:4e:ac:4c:26:8c:e3:b3:56:07:90:31:
de:d9:ab:f1:83:30:aa:98:31:68:e1:ca:0c:2c:cf:
97:a3:8a:9d:5d:09:9a:5b:df:a4:8c:1c:76:db:92:
8c:ef:58:19:a7:fb:92:74:57:43:ca:76:26:34:64:
e3:60:fc:93:93:8c:8d:1c:21:4d:7b:67:24:87:65:
e2:8d:42:c4:d2:e2:8f:c4:6a:6f:79:7b:c7:2d:4f:
de:29:31:3a:20:ee:59:3a:87:4b:f9:a6:56:31:d4:
2d:05:4d:10:bd:81:ae:ca:d1:bc:ff:9b:17:b0:25:
ab:c3:ce:99:d1:b2:c2:60:53:1f:ca:44:44:b4:54:
65:b8:37:13:e8:e2:3a:92:18:67:e8:4b:d4:45:b0:
3f:c9:fa:02:72:0b:60:1f:3b:37:d6:20:cd:5a:42:
02:62:3d:c9:55:57:2e:aa:60:69:62:d7:a5:9b:7d:
78:cb:f0:48:df:c3:3e:89:8e:64:49:4f:a7:d7:69:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:11:E9:9A:8B:5A:E5:13:97:2E:5E:4C:70:1E:CD:63:D8:B9:89
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:48:ab:b0:9d:75:2e:b1:ff:ae:25:8f:46:95:67:c0:65:bb:
12:87:88:3c:1b:58:46:50:94:53:52:1e:0e:55:7a:21:4d:1d:
2f:7c:14:b4:fb:52:24:c8:f1:42:31:24:7c:3f:3d:28:f7:35:
4f:2e:48:a4:46:2b:7e:cb:4b:e4:20:af:c8:06:7e:d6:d9:e2:
f1:13:fc:7e:30:a9:82:dd:09:c7:bd:8b:d2:82:61:cc:56:d1:
ee:0d:af:3e:8a:e2:38:5b:b2:af:1d:89:5e:ba:0d:34:b3:5d:
07:d5:60:a4:4a:84:83:5f:50:40:97:1b:af:eb:b2:ab:a3:25:
36:af:60:2d:75:50:e8:33:38:1a:40:70:4b:4e:38:de:74:7b:
54:7d:00:d2:8f:52:b1:e7:3c:15:a1:c8:86:9b:40:13:f4:90:
2e:cc:c1:e4:98:d3:24:d9:4f:15:56:d0:10:8d:b3:db:66:84:
d6:f9:0e:d2:96:ae:d6:59:91:5e:34:d4:c5:2e:5b:fb:d2:f2:
dd:f3:ba:51:f8:71:4b:ee:55:88:ab:4d:c6:b9:c4:00:03:2c:
1b:be:88:5d:bf:da:85:02:33:e3:7d:88:8a:b2:6c:d9:01:f5:
ed:82:d4:c1:6f:48:43:df:f4:a1:f4:b5:a1:c8:2b:24:ef:fd:
8e:a9:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:40:10 2026 by rpki-client