Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: CT2Oah7cDD68vXglJ+zrtGFZhm56URnfgmlrQYZMNFw=
Subject key identifier: B1:59:9F:AE:FA:CE:69:81:EC:13:C0:8B:C2:25:12:60:5B:2D:37:DC
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 01A1C28ABAC5A036FC1F754159167614DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 23:00:33 +0000
Manifest this update: Mon 09 Nov 2026 23:00:33 +0000
Manifest next update: Tue 10 Nov 2026 23:00:33 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: /dy+MUjwEvDhcNCa/Xn4FbWjuktSpDPsPdEeHWW0oas=)
2: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (hash: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8a:ba:c5:a0:36:fc:1f:75:41:59:16:76:14:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Nov 9 23:00:33 2026 GMT
Not After : Nov 10 23:00:33 2026 GMT
Subject: CN=b1599faeface6981ec13c08bc22512605b2d37dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:5a:b8:1e:21:b0:84:f0:50:74:2d:89:e1:
77:1b:86:a5:e3:35:46:7f:1d:b6:8a:fb:44:4e:d2:
96:2b:0c:16:22:d8:fd:98:58:02:38:76:fe:3e:fa:
a6:33:14:ba:bb:a4:0f:0c:f1:a5:35:c4:93:c2:a6:
9a:3f:b2:61:e1:93:86:60:a4:73:5a:67:c7:18:1b:
5f:d6:db:c3:27:70:66:5f:3f:14:47:67:75:57:ac:
3f:43:ac:ca:3c:13:44:26:e0:24:68:55:37:93:7c:
3e:5f:d2:80:5f:9f:7a:6b:48:de:cd:f8:62:b9:11:
9f:66:38:c6:9b:26:b7:ea:c3:b4:a9:9d:a5:c2:78:
a4:42:05:ad:95:8c:0f:50:a5:9e:da:98:2e:30:0c:
75:79:1d:9b:7d:4d:7b:8b:b5:93:93:69:a5:59:a6:
16:2b:18:d7:f0:c9:65:2c:2c:65:a8:10:36:7a:cd:
4e:66:cd:8c:45:7c:54:86:51:89:2c:e4:0f:e1:12:
a3:e0:ec:22:36:67:c6:ee:cf:1b:e1:11:6b:37:46:
65:76:f9:b7:83:9d:fe:6d:f6:14:56:98:4e:37:e7:
9d:09:b3:76:8a:e5:93:25:df:b1:71:a7:3c:d4:7a:
12:5f:b4:ee:f4:d6:e9:be:f4:25:76:13:62:df:66:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:9F:AE:FA:CE:69:81:EC:13:C0:8B:C2:25:12:60:5B:2D:37:DC
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:11:cf:1c:d3:0a:4b:cb:5f:6f:10:c4:a9:03:bc:21:39:
2a:1e:0b:55:39:eb:6b:da:06:df:a2:40:f6:90:52:b3:63:87:
b7:95:69:33:b9:c0:64:15:4e:0d:95:90:ae:c1:68:23:07:1e:
02:38:f3:20:63:66:64:eb:3b:cc:f1:63:34:96:f1:ea:79:80:
d6:1b:95:10:fc:2f:54:8f:a8:2f:8b:ce:5f:c6:32:ae:13:de:
7e:f5:b8:07:84:85:56:41:e7:90:83:76:85:75:7c:1a:04:6c:
33:1e:89:90:a4:82:1c:b5:8d:90:5c:c6:e2:a2:0a:ea:4a:5b:
7c:2f:4d:7d:34:5c:46:bd:7b:b3:38:5a:d1:f1:a2:e8:d1:71:
62:b3:e3:34:bb:42:73:f1:fd:b4:22:32:e2:3f:08:f5:ab:78:
6a:5e:24:57:43:6e:8f:74:e4:42:d4:9c:a9:79:a8:c0:a7:05:
ef:3d:70:94:cb:e8:e2:c4:63:00:cc:7f:6b:41:81:0e:b5:7f:
13:15:9a:50:bb:6c:f4:fb:38:c8:13:6d:e7:77:10:a8:76:b1:
b6:8f:21:92:90:0b:13:39:db:35:39:f8:3c:65:c4:c7:0e:4e:
82:c6:f0:d5:5b:6d:9f:04:cc:2c:ae:64:a6:cd:2c:88:d6:b9:
c8:de:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:40:49 2026 by rpki-client