Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: SDhB1xENaz++s4McXjy8+mvg4J0c9wf3Z3zcNEcovj4=
Subject key identifier: 72:76:25:B5:B0:17:8C:88:99:28:0E:A0:5A:9D:2D:08:DB:3A:E2:F3
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 01A0D49416C09AF5ACC01DFBC9F0FBF3CACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 19C7
Signing time: Thu 24 Sep 2026 18:01:09 +0000
Manifest this update: Thu 24 Sep 2026 18:01:09 +0000
Manifest next update: Fri 25 Sep 2026 18:01:09 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: 7vNlr77CX7In/8iYDOa7W6znwIlB9zSTvVSDWWNJw2M=)
2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:16:c0:9a:f5:ac:c0:1d:fb:c9:f0:fb:f3:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Sep 24 18:01:09 2026 GMT
Not After : Sep 25 18:01:09 2026 GMT
Subject: CN=727625b5b0178c8899280ea05a9d2d08db3ae2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:74:03:1e:29:a7:96:b9:6c:f9:a7:b9:2c:
f1:9f:49:c4:94:a3:35:50:a4:b4:db:91:a1:b1:53:
49:1b:21:9d:bd:91:73:b7:e4:bf:4c:6f:ec:0f:40:
78:ed:c8:3a:67:b4:01:8f:a2:1f:e9:54:d9:bf:9d:
b9:61:5d:8a:fe:4d:45:47:f6:b1:35:cd:d0:4f:73:
eb:03:4f:55:b5:ec:80:2e:fc:cf:d8:6d:18:02:b6:
4b:06:7c:91:f7:8a:90:66:f1:fe:aa:6c:25:30:a5:
16:dd:5f:a1:5f:0d:e5:8a:6a:33:1f:af:4d:7f:e1:
6f:5c:28:47:40:f3:32:01:ee:54:e3:99:d2:1a:97:
4e:8a:7f:61:16:85:b6:5e:d0:a4:0e:6d:85:aa:49:
e9:fa:67:3e:19:3f:96:29:ef:91:0d:82:89:3b:ea:
93:91:d8:c7:0c:ad:c1:3e:99:90:99:b0:bb:6c:30:
a1:3d:15:98:1d:d3:9f:38:af:e5:55:3c:88:d9:f5:
69:cf:08:39:fc:68:35:27:f9:d6:c8:1a:e9:b1:4a:
3d:d7:bc:31:67:5b:4c:ed:07:6a:e7:28:8e:fd:04:
26:6b:6b:d5:b3:43:ee:03:b0:7b:66:1c:ed:b1:40:
ef:0d:47:88:b9:b6:28:b0:f7:78:e3:ff:2a:f6:dc:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:25:B5:B0:17:8C:88:99:28:0E:A0:5A:9D:2D:08:DB:3A:E2:F3
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:46:b0:da:33:51:d2:b4:d2:d1:ba:7c:35:49:3c:b0:64:08:
e0:a8:2e:e8:89:6b:a4:f1:fa:a0:8b:53:9a:4a:09:1b:dd:fe:
25:f9:9f:e3:f9:0d:9a:4e:80:26:5c:c0:0e:bd:f0:ed:c7:dc:
d1:b5:74:e8:b7:a9:70:46:b6:ce:02:e5:54:c1:45:8e:bc:32:
68:8e:bb:5d:cb:01:21:dc:2c:09:4e:f4:65:f8:bd:87:a7:ec:
92:03:f3:bc:e4:58:c6:1b:d1:9e:42:01:ae:29:35:55:d4:b8:
bb:d7:78:ff:b3:49:8b:a2:58:23:92:41:58:b1:45:a2:3c:d6:
44:23:fd:de:27:a3:46:40:a4:7e:72:3f:07:ca:bc:b2:73:87:
6a:d9:82:fb:42:ac:e5:27:67:fd:41:0c:f3:7f:4c:aa:2a:53:
1d:3c:9d:a6:2b:7a:4e:6a:6a:0d:23:93:e0:95:f0:b4:c0:ce:
e7:8d:66:2d:b3:09:8f:73:9f:c2:21:0f:7f:59:ff:05:56:f5:
55:2e:02:ab:93:fb:ed:fb:c2:dc:c6:2d:27:16:a9:f2:58:3b:
a9:86:09:1a:e1:a9:b8:3e:3c:f3:19:0e:67:51:79:a1:a9:b2:
56:a9:13:43:e8:d0:3e:e9:62:ba:03:5c:eb:3f:0d:62:dd:e9:
a4:2f:ca:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlBbAmvWswB37yfD788rLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0
NTVmMzUwHhcNMjYwOTI0MTgwMTA5WhcNMjYwOTI1MTgwMTA5WjAzMTEwLwYDVQQD
Eyg3Mjc2MjViNWIwMTc4Yzg4OTkyODBlYTA1YTlkMmQwOGRiM2FlMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkJ0Ax4pp5a5bPmnuSzxn0nElKM1
UKS025GhsVNJGyGdvZFzt+S/TG/sD0B47cg6Z7QBj6If6VTZv525YV2K/k1FR/ax
Nc3QT3PrA09VteyALvzP2G0YArZLBnyR94qQZvH+qmwlMKUW3V+hXw3limozH69N
f+FvXChHQPMyAe5U45nSGpdOin9hFoW2XtCkDm2Fqknp+mc+GT+WKe+RDYKJO+qT
kdjHDK3BPpmQmbC7bDChPRWYHdOfOK/lVTyI2fVpzwg5/Gg1J/nWyBrpsUo917wx
Z1tM7Qdq5yiO/QQma2vVs0PuA7B7ZhztsUDvDUeIubYosPd44/8q9tzRAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ2JbWwF4yImSgOoFqdLQjbOuLzMB8GA1UdIwQY
MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt
NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5
LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0aw2jNR
0rTS0bp8NUk8sGQI4Kgu6IlrpPH6oItTmkoJG93+Jfmf4/kNmk6AJlzADr3w7cfc
0bV06LepcEa2zgLlVMFFjrwyaI67XcsBIdwsCU70Zfi9h6fskgPzvORYxhvRnkIB
rik1VdS4u9d4/7NJi6JYI5JBWLFFojzWRCP93iejRkCkfnI/B8q8snOHatmC+0Ks
5Sdn/UEM839MqipTHTydpit6TmpqDSOT4JXwtMDO541mLbMJj3OfwiEPf1n/BVb1
VS4Cq5P77fvC3MYtJxap8lg7qYYJGuGpuD488xkOZ1F5oamyVqkTQ+jQPuliugNc
6z8NYt3ppC/KAA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:15:45 2026 by rpki-client