Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.mft (raw, json)
Hash identifier: D523WDxNnoqFnmGiAd82sOijU7RL360WLz5K7smhtUg=
Subject key identifier: F7:15:82:7F:DE:CF:7C:AB:18:59:AB:06:6C:80:42:64:9B:08:93:E0
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 01A0C8587A8805C4D0C082C59FAF73298EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:36 +0000
Manifest this update: Tue 22 Sep 2026 09:00:36 +0000
Manifest next update: Wed 23 Sep 2026 09:00:36 +0000
Files and hashes: 1: RkxGEP2HKa933gOwWZ56ZY2Nos0.crl (hash: YeZVhQDGgBYqICn/Z8cmT7Dr0CLWHEdKHaE0MV+NDPc=)
2: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (hash: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=)
3: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (hash: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:7a:88:05:c4:d0:c0:82:c5:9f:af:73:29:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Sep 22 09:00:36 2026 GMT
Not After : Sep 23 09:00:36 2026 GMT
Subject: CN=f715827fdecf7cab1859ab066c8042649b0893e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:74:8c:8e:e7:29:c3:f6:c5:4a:17:3a:6f:
71:b8:b5:58:8e:b0:36:5e:57:47:1b:83:50:5e:f2:
48:19:7a:67:ab:49:b9:b5:e3:9b:68:50:8f:3b:af:
22:78:4b:71:5f:b2:a8:6f:5d:f2:04:e0:e2:b5:ef:
c1:78:5a:84:bd:4c:06:1c:02:8b:86:cb:48:06:ee:
1c:48:72:a5:7b:a7:b4:72:e7:b5:e1:79:a2:f9:ff:
0d:b8:cb:ae:1b:62:b6:18:4f:88:0d:2e:66:72:3b:
c5:87:be:61:d9:0e:19:b6:02:85:70:87:42:90:d3:
d8:ef:46:ad:30:e8:47:16:88:cc:29:71:43:88:f4:
81:a1:3e:5c:eb:b1:7e:03:af:80:b7:be:fd:e1:0c:
be:5b:4a:1b:b8:53:ff:0c:20:a4:33:56:d4:6f:f7:
72:31:22:c2:9a:2e:75:08:70:ba:2d:e3:40:8d:54:
e8:42:46:b3:ac:35:84:1a:c6:7b:49:7c:ae:cb:bb:
ef:37:28:93:4c:11:5a:fb:c4:f3:4d:f1:c4:56:49:
50:ab:b4:a2:a4:a4:a1:41:58:54:17:e6:1d:d8:08:
27:39:0a:1d:2b:d0:08:68:e6:7a:16:b5:5b:87:2e:
d2:7a:a6:b3:68:dd:64:2a:0b:47:20:89:24:fe:3e:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:82:7F:DE:CF:7C:AB:18:59:AB:06:6C:80:42:64:9B:08:93:E0
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cd:2d:75:dd:54:a0:a8:7e:08:3b:71:4b:7d:4b:d2:fd:89:
47:1b:3c:a9:9e:0c:3e:41:67:20:d9:09:54:d9:14:ae:bd:f0:
c4:ac:79:c6:c0:c2:f3:3f:bf:17:13:e0:b6:b2:8a:c8:1e:4a:
26:29:a3:c1:d7:36:74:5e:a5:7a:8c:ae:53:df:bd:25:32:db:
1e:3d:f6:61:c8:c6:19:13:92:15:e1:ea:58:d6:92:89:13:b1:
99:fd:cd:e0:91:cf:39:c6:31:3a:9e:6a:93:8f:32:5a:22:60:
33:2d:87:66:08:3e:52:e4:85:2d:96:67:3c:ad:43:e2:a0:c9:
bc:97:c6:fc:17:7d:6e:58:dc:ad:ff:7a:9d:94:ae:1f:8b:11:
b1:5a:3a:2f:4d:44:23:ea:d8:7b:31:16:aa:36:48:77:44:0a:
17:66:2b:61:47:cb:34:4f:ba:83:21:65:8e:4d:67:5c:4d:d5:
66:19:d8:5d:ab:0f:34:bb:2d:c4:3b:9e:c7:45:e3:b8:9c:1e:
89:f0:ce:64:b4:de:fd:b1:51:46:a9:90:53:e2:7d:79:85:73:
57:51:41:7e:b8:77:fc:75:be:62:20:7f:3c:b5:f9:74:59:6c:
2e:22:c9:66:48:65:89:1f:27:f1:20:52:40:4f:17:26:7a:46:
ea:ca:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:10 2026 by rpki-client