
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: TSDQ57FHWo9n9A5ASEYy6mCqa2YjcebPsgHRMekV6zY=
Subject key identifier: 21:CB:D8:A7:EC:A5:23:8F:C1:F9:08:BA:EE:11:AA:2F:7B:97:48:70
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 01A0CFA432ED5D3643703E229BBFADBD3C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:00:39 +0000
Manifest this update: Wed 23 Sep 2026 19:00:39 +0000
Manifest next update: Thu 24 Sep 2026 19:00:39 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: 06tGFZJ/k7mHV2wRI5wJHFu/u4GbLUWbgbnpEaIrtTw=)
2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:32:ed:5d:36:43:70:3e:22:9b:bf:ad:bd:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Sep 23 19:00:39 2026 GMT
Not After : Sep 24 19:00:39 2026 GMT
Subject: CN=21cbd8a7eca5238fc1f908baee11aa2f7b974870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:fc:be:46:ad:d0:7b:ad:d7:95:43:b4:03:
9c:3c:91:68:a7:f2:0a:7e:43:6a:9d:cf:51:b9:78:
8c:47:10:31:0a:a9:68:07:57:23:fc:4d:0a:77:67:
ef:83:82:e7:95:64:dd:36:09:00:f2:e8:af:8a:7a:
02:3b:be:e1:e7:54:2b:5a:fb:ef:e1:99:3b:b8:84:
75:c4:42:74:e9:0b:24:54:2b:9b:b8:ca:a5:3f:0d:
3a:4a:61:d8:3d:14:89:dc:d9:e7:f2:3d:51:76:bb:
9c:91:61:5c:e9:fc:b3:86:1e:ad:e8:94:9f:3d:7d:
74:f4:cc:1b:aa:d7:9f:93:94:6c:49:5d:bb:86:19:
76:07:be:89:88:93:4d:4e:27:a6:c0:e8:39:fd:3e:
0c:67:b5:ec:50:82:41:ba:f8:91:d4:ab:e7:c2:37:
21:75:47:60:62:0e:40:49:a2:ba:a2:f7:1c:bc:f3:
ca:f2:e0:ed:44:84:2c:7c:70:52:19:1b:7f:22:56:
60:16:f6:be:05:d7:48:5e:e1:49:d1:3e:d9:81:c6:
8e:f3:1f:6b:3f:e9:6d:ab:fc:91:00:d5:98:eb:20:
cb:07:79:22:3d:d5:b7:66:ad:40:5a:20:b3:9d:20:
34:b9:d4:d3:c6:ac:a6:84:86:31:b0:21:ec:68:ba:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CB:D8:A7:EC:A5:23:8F:C1:F9:08:BA:EE:11:AA:2F:7B:97:48:70
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4e:95:e2:1f:14:b9:b7:75:be:ed:a1:63:5a:e4:27:f6:eb:
0d:8e:6b:c1:66:44:a0:5a:b2:3f:b3:2c:be:34:21:87:2c:56:
53:1a:f7:95:41:39:a8:4a:79:18:34:c4:3f:20:1c:03:3d:a6:
3f:e9:5e:b1:a1:be:96:7b:0d:33:e4:8b:82:3b:d2:4e:10:37:
79:99:bd:c9:ea:c8:05:f6:c2:1b:bb:6b:3a:1c:38:24:5d:b3:
f1:bd:c5:74:b6:e8:4a:cc:18:b3:d1:97:95:37:d8:ba:56:db:
c9:6e:d9:1a:16:f5:6d:ce:18:74:6c:bd:63:78:05:02:95:ea:
42:69:b0:21:7b:e1:8b:3e:46:b4:3a:5b:2a:75:66:bc:54:34:
ea:57:74:80:85:4c:0e:a0:8e:64:57:9f:54:97:13:a3:b3:ed:
dc:4a:19:4e:b8:d3:ba:d0:08:66:9a:e1:8c:e2:e2:ab:4a:67:
8d:cd:d2:a9:d6:e9:1e:f3:d4:b7:ad:89:53:76:79:c0:12:28:
9a:7b:11:ab:79:4f:3f:0e:67:a0:19:80:08:8d:7e:e4:54:44:
8d:b9:eb:99:03:52:c0:99:e4:fb:b1:7f:52:c8:ff:b2:2d:5e:
45:fe:31:9b:f2:4b:96:e3:56:c4:8e:82:9d:80:a3:c7:f2:8d:
88:18:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:41:45 2026 by rpki-client