Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier: 8ADDHhPc1RSVmQWX9DM+gtZ54YcDk/JEN7jdlG/E60k=
Subject key identifier: 1D:71:41:C2:5F:DF:ED:D1:49:2C:23:2B:76:DE:1B:7E:67:D5:94:14
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 01A0D26DFA08A3BC153BC17A8F112CB1A1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number: 1093
Signing time: Thu 24 Sep 2026 08:00:17 +0000
Manifest this update: Thu 24 Sep 2026 08:00:17 +0000
Manifest next update: Fri 25 Sep 2026 08:00:17 +0000
Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: N7i+pIq7egf/gwzuRACCLKkPQwUQaXqAkgypLSi+9dA=)
2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:fa:08:a3:bc:15:3b:c1:7a:8f:11:2c:b1:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Sep 24 08:00:17 2026 GMT
Not After : Sep 25 08:00:17 2026 GMT
Subject: CN=1d7141c25fdfedd1492c232b76de1b7e67d59414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:0d:6b:79:c0:19:05:c1:18:ad:57:c3:65:
45:cb:76:c1:5c:4c:4c:f1:23:7c:64:77:09:15:d7:
8e:52:ad:0c:e1:03:5f:bd:1c:40:0d:61:af:48:26:
fa:55:c7:82:2b:fc:46:0c:58:73:2f:2b:2b:19:64:
71:fe:60:f5:f4:36:c1:42:1a:ae:56:a8:71:bd:9e:
17:f2:13:ed:1a:ae:a2:0d:d8:7d:24:2c:48:01:43:
99:aa:ba:14:61:57:21:ef:d9:85:63:a3:80:33:81:
c5:1c:b9:44:a3:a2:a4:74:2f:0b:91:98:ff:03:95:
64:e6:f9:a3:8f:c6:c1:17:f0:f0:8f:5a:78:37:7d:
88:b5:72:cf:45:d7:bd:f6:65:71:d0:a3:6d:e3:84:
ac:37:f2:03:2a:0a:68:a7:e3:1b:ed:82:0b:20:94:
3b:3e:ab:cd:0a:cc:e4:99:1f:f9:00:de:f2:cf:d6:
a4:3e:db:49:ad:6a:40:29:ae:52:92:57:b2:64:1e:
9b:a0:cf:b9:ec:40:0d:f1:bf:e8:fc:45:3b:5b:df:
d0:bc:68:37:17:e5:4a:3b:e3:71:60:c9:fb:70:8e:
cf:bc:9b:30:ae:29:8a:c5:9d:4c:fe:39:5a:b0:70:
1b:38:c1:95:ef:c0:82:0a:a9:af:21:92:86:23:9f:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:41:C2:5F:DF:ED:D1:49:2C:23:2B:76:DE:1B:7E:67:D5:94:14
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:96:30:d5:d4:46:a7:ab:3e:75:71:06:e1:d6:74:b2:8f:ea:
5f:f1:3f:96:05:46:0b:04:03:81:72:43:92:d4:15:ab:be:e3:
33:fa:7d:c3:c0:a8:9e:9b:71:26:46:ff:15:5f:a1:70:c7:b2:
c5:55:c9:6c:fe:bf:55:1b:42:01:2f:54:e3:16:9c:3c:e6:3c:
bb:f6:e4:e1:5f:fa:86:fe:66:62:4b:a1:e2:61:37:ca:29:da:
6c:66:3a:11:c3:57:54:b1:0d:9a:26:07:ce:cb:66:9a:1e:c0:
14:49:cd:93:be:ea:f4:62:e1:17:3f:a0:f2:b6:f4:3f:33:77:
4b:d9:2c:df:0a:4c:9d:55:ee:2f:53:61:19:67:a8:51:c7:50:
9e:f1:50:fc:72:a7:5c:d9:fc:9d:0e:ea:01:39:22:93:c4:98:
5f:58:ad:eb:ef:a5:61:8f:db:35:fc:1f:0e:35:de:27:fb:42:
8a:1c:9e:5b:ec:03:fc:5b:fc:42:7e:f9:5a:4b:46:67:8a:5a:
17:2e:60:5c:73:88:dc:07:a1:0e:bc:ed:0e:af:3f:57:a4:61:
0f:2b:d0:42:f6:76:15:ab:07:89:60:4f:30:32:40:19:24:88:
d0:0f:5f:b6:77:dd:d1:90:de:ea:48:0e:c8:d6:99:0f:f7:99:
8c:3f:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:07:04 2026 by rpki-client