Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: ki3HR3Cr+F3QLI70UhSs7q8N1JZ4qL+kh1EjNL5J2OE=
Subject key identifier: E5:E8:16:DC:70:22:C1:57:F2:E6:4C:57:73:18:6B:DE:79:3B:20:F2
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 01A0DD9782CB3B116C9B7A10651939BA04F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 1A06
Signing time: Sat 26 Sep 2026 12:01:29 +0000
Manifest this update: Sat 26 Sep 2026 12:01:29 +0000
Manifest next update: Sun 27 Sep 2026 12:01:29 +0000
Files and hashes: 1: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: hkadJpdpmpRx3PSNv+sxTamZ2GZXnCb8B6Vuw79/nPc=)
2: qJw1Ux2nOLtPJ0s4mFdAIF0Su5Y.roa (hash: UuIkVvy/ToOd6wh3wO4nziYy2+uWkgcJTnow3IN8R7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:82:cb:3b:11:6c:9b:7a:10:65:19:39:ba:04:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Sep 26 12:01:29 2026 GMT
Not After : Sep 27 12:01:29 2026 GMT
Subject: CN=e5e816dc7022c157f2e64c5773186bde793b20f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:44:ea:af:78:9d:05:f1:7f:7d:e5:b0:7c:
90:9b:06:7a:f2:eb:0f:49:03:3b:36:4a:98:6b:5d:
c3:13:20:be:f3:ae:99:12:4f:cb:3e:4a:77:d1:33:
22:62:0c:a8:32:d4:a9:7c:a6:ef:16:4c:a8:04:d0:
66:41:05:11:65:89:3a:bc:42:df:88:54:b7:1f:7e:
c2:e9:5a:18:27:f4:23:e5:e9:7d:ee:31:9d:80:fe:
12:f9:0f:1d:c8:a2:5b:de:35:26:59:a5:ed:f0:3f:
a1:1e:2e:b8:01:5a:47:c1:6a:21:31:23:57:46:a3:
09:ef:53:05:d3:4e:d8:d3:29:1c:5e:11:77:56:1b:
83:e2:51:4c:c2:b5:4f:64:85:c6:79:9b:25:aa:3f:
b5:f5:24:66:39:33:00:0b:ab:62:98:35:8f:53:db:
52:bf:42:71:c5:be:09:47:e9:07:25:9b:40:8b:0d:
cb:af:0a:d6:37:5c:23:0d:d3:cb:2f:98:a5:0a:13:
1f:19:ca:a1:b3:cb:89:8b:e1:c2:b9:cd:cb:55:80:
d6:83:72:2f:f1:40:33:75:50:33:73:98:34:ab:be:
da:d6:0d:1a:31:9c:1e:e5:06:12:c4:23:16:1b:1e:
c7:ae:de:c3:f8:bf:53:15:e3:94:06:84:18:67:14:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:16:DC:70:22:C1:57:F2:E6:4C:57:73:18:6B:DE:79:3B:20:F2
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:53:d9:e8:02:5b:0b:f6:c3:76:22:ae:27:b2:7d:b0:16:
14:e3:52:2c:3a:c2:73:c7:a2:7e:de:c2:05:c4:e3:13:03:8f:
87:3c:62:d7:96:3e:4f:95:ad:43:29:a2:c1:e9:42:11:56:b8:
4a:c9:30:5d:27:6f:7b:16:98:ba:e3:33:d0:8b:33:5f:1e:49:
ad:8a:33:a2:47:7e:00:39:07:a4:2a:36:b2:4d:34:30:06:c3:
a6:10:43:ab:c2:18:39:03:1a:06:e6:77:c9:a5:f9:af:fd:23:
e1:50:21:a0:af:34:b4:53:63:c7:c7:43:fb:ab:68:c6:14:6a:
03:67:87:d0:d9:b5:c4:54:42:c7:0a:f7:da:ed:8f:5c:77:01:
72:1e:21:aa:d1:85:c5:bf:cd:a4:57:78:cc:d3:8b:f3:65:91:
5a:1c:fd:e3:65:80:c1:25:42:0d:00:1b:77:14:45:04:8e:d6:
94:ca:bd:e2:ea:fb:ee:d5:35:f1:dd:bc:46:41:b4:a5:67:99:
d9:3c:9e:2f:c9:09:b3:ef:f1:9b:64:50:48:87:8a:a0:07:c3:
c7:e4:61:a1:20:a0:54:b1:10:8f:4e:06:48:1c:de:56:f9:6c:
00:3a:ae:3f:5b:bd:78:88:66:bd:70:ef:37:38:34:26:fd:40:
0e:50:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:54:08 2026 by rpki-client