Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: IkLWmr3/Q78IRcJ4hb+Wex5/mespkprDwviqnINZMcE=
Subject key identifier: A6:4A:22:D4:CC:E0:9E:68:1E:C4:54:16:05:5A:76:C7:E1:0E:6C:13
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01A0C25623FA940B80122E55676BC9FD64AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 098E
Signing time: Mon 21 Sep 2026 05:00:20 +0000
Manifest this update: Mon 21 Sep 2026 05:00:20 +0000
Manifest next update: Tue 22 Sep 2026 05:00:20 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: j1TyrzPEKZ0G2G/NrjWuBBjI6PSvKeUFrSYvjrDRMWo=)
2: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:23:fa:94:0b:80:12:2e:55:67:6b:c9:fd:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Sep 21 05:00:20 2026 GMT
Not After : Sep 22 05:00:20 2026 GMT
Subject: CN=a64a22d4cce09e681ec45416055a76c7e10e6c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:fb:7c:c0:fd:89:29:f5:c7:97:d8:b3:87:
1c:22:2c:6c:e4:20:45:55:2d:86:e0:7c:7c:bc:44:
ac:fb:cf:79:b8:e5:04:a0:ce:34:b3:d5:ab:23:16:
78:6c:48:1b:46:9b:40:34:3c:e4:e1:c2:7c:c6:0f:
97:1a:09:f2:d5:db:04:da:74:57:19:75:28:a9:a1:
b9:1e:bb:5f:70:19:70:1e:bc:80:ef:b9:88:13:95:
a9:aa:1a:c6:0e:d9:12:76:29:58:15:d0:81:97:df:
e2:ba:6d:a2:10:af:4c:3b:ec:10:e9:4e:82:aa:77:
a0:05:db:0b:8d:94:b2:8a:d7:1c:45:71:80:a2:f6:
48:44:c6:39:ec:a7:d4:85:81:00:5d:36:b2:70:3a:
8a:f6:d1:3b:6e:c2:a3:2a:95:df:ff:60:6f:15:56:
a6:e9:dc:42:bd:4b:f0:ca:d8:86:12:4d:c9:dc:80:
26:70:df:09:8b:ef:bb:65:41:b9:43:26:1a:ee:30:
10:df:ca:33:fa:33:70:34:82:cc:ea:33:d2:86:4e:
24:f4:8b:14:d6:75:28:a2:7d:0d:90:40:99:24:fe:
82:b0:24:67:1b:c3:fe:27:0f:15:26:c8:a1:06:ce:
bc:d4:ca:f1:3a:ee:64:6f:b0:a5:1f:5a:2e:6c:4f:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:22:D4:CC:E0:9E:68:1E:C4:54:16:05:5A:76:C7:E1:0E:6C:13
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:c2:57:d4:a2:5c:01:76:99:cc:c7:71:aa:cf:96:f7:e4:
1e:94:98:db:5c:13:c2:36:74:06:a4:91:7a:c4:ce:be:ca:f3:
ce:da:48:f7:ab:93:fa:ec:16:d7:77:54:2d:58:26:a4:8d:18:
6e:86:d5:69:8b:bf:3c:a3:5b:36:26:f2:bf:c1:c0:de:36:94:
b5:9a:a3:cc:d5:09:49:83:93:18:75:3c:73:15:a1:57:22:2f:
28:e0:44:37:ea:2a:de:b9:63:12:e2:ad:1e:80:23:17:1b:69:
89:8b:47:f6:91:14:51:96:4a:af:bb:bf:07:d5:a0:6b:ba:e4:
b2:b5:5a:1f:a7:20:87:5c:f9:cd:d9:c2:8d:24:1f:d3:75:3d:
19:82:53:72:3a:23:dd:66:26:4c:47:13:9a:8e:9c:f9:e2:5f:
3b:8a:2b:09:1a:27:7e:3d:7e:b1:99:38:37:6a:98:a2:b9:aa:
02:1a:a7:08:2d:0e:71:a2:ea:61:1e:d9:09:80:65:a9:3c:22:
b9:da:e6:79:c9:6b:d9:4f:44:70:cb:5b:91:b1:e7:93:96:7f:
83:32:2c:47:b8:67:4e:88:a7:33:8a:ed:5c:ac:8a:d8:9d:dc:
5e:f9:84:90:fd:7a:66:3b:a1:10:f7:2a:2a:f8:ad:8d:5a:f3:
3a:7b:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:42 2026 by rpki-client