Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: lpve8iRrSLItBO5bvFNiNtyERGsKDAWCciO2xPibRSQ=
Subject key identifier: 3B:50:23:3F:69:81:5D:AF:D3:6C:FB:72:CE:66:18:75:1B:F7:B6:F9
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 01A0C28D934F00BDB5E148A374EDBF1352A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 1A60
Signing time: Mon 21 Sep 2026 06:00:53 +0000
Manifest this update: Mon 21 Sep 2026 06:00:53 +0000
Manifest next update: Tue 22 Sep 2026 06:00:53 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: 3vcFWXXUzqmFbWTg8TleHW1MN/ULYb/ZVZq7k+htJAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:93:4f:00:bd:b5:e1:48:a3:74:ed:bf:13:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Sep 21 06:00:53 2026 GMT
Not After : Sep 22 06:00:53 2026 GMT
Subject: CN=3b50233f69815dafd36cfb72ce6618751bf7b6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:2c:fb:c8:15:78:9d:20:25:61:ad:a6:cc:
d9:8e:2f:37:b0:3e:df:a4:83:82:92:36:55:ea:c4:
1b:94:b5:dc:11:d5:70:27:13:88:f2:8b:3d:85:be:
77:db:0a:37:9f:af:48:23:a0:63:5e:42:7c:da:bb:
a6:fe:75:92:db:83:c6:a0:a2:0b:0f:b4:bf:f6:4a:
22:dc:e4:79:32:b4:3e:e5:94:a7:d7:b8:37:10:b4:
29:81:18:0e:62:da:5e:e2:b8:37:22:6f:2c:b5:16:
9b:68:ca:0b:59:12:4d:5d:15:cd:6b:bb:81:6a:fd:
90:99:2e:0b:0a:8f:b7:a8:7c:20:eb:ca:4e:8c:18:
68:52:01:5f:20:80:9f:21:47:d8:08:70:a0:d2:79:
13:d6:4e:ed:6f:7e:8c:d4:90:51:46:4e:ff:d5:68:
90:8c:dc:a7:fd:f5:c1:29:6c:c8:6a:68:b3:f3:01:
9d:1f:23:f6:59:df:16:08:05:b7:5c:f6:49:ea:93:
bc:27:8d:3d:3b:51:02:4d:31:05:87:d0:8a:8d:89:
30:63:e2:4e:9c:f7:01:16:2f:64:15:1e:45:36:4b:
7c:8c:5f:15:d4:51:40:9b:31:f4:e1:5c:13:26:96:
87:20:e0:ba:bb:e5:87:7e:60:db:74:a6:96:30:91:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:23:3F:69:81:5D:AF:D3:6C:FB:72:CE:66:18:75:1B:F7:B6:F9
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e6:c6:24:fd:e3:dc:a3:30:7d:c3:9f:af:6e:92:20:c0:45:
5b:7e:fa:18:25:eb:ae:d4:0d:5f:2b:56:a0:f5:c3:8b:7b:24:
19:74:af:1f:e5:69:1b:cb:61:d9:24:f1:cf:0c:0e:74:6b:1e:
5b:76:fd:7b:58:ad:fd:6f:40:61:8d:72:44:d0:55:d6:53:b4:
22:e4:74:27:10:3b:50:74:84:dc:fa:d2:e5:b3:e6:52:53:17:
63:41:7b:45:61:f7:65:5e:ce:78:40:5e:41:23:5d:f0:ae:62:
4b:9d:20:25:21:b5:dc:dd:25:2d:8c:cc:b6:c1:67:05:0d:27:
da:2e:19:08:6f:b5:dd:1c:2b:40:10:3d:7c:6c:7e:cc:b5:b3:
c3:5e:d7:69:7f:d3:55:81:8c:96:4e:e6:76:0b:f2:2a:72:5f:
71:1e:cf:a5:9d:27:9b:59:39:f0:6b:0e:34:7a:5e:80:16:3d:
35:df:03:7e:e6:61:07:cc:cb:b5:1f:a6:ad:c4:ef:36:43:4d:
2c:11:8d:50:3f:d9:31:fa:e8:1f:88:41:f0:22:5f:02:18:78:
54:b8:60:1e:f1:6e:ce:2c:db:dc:21:a1:fa:fb:01:85:f5:52:
a4:1e:46:9d:2a:09:d6:82:38:a7:69:68:7e:41:1e:6c:fa:de:
49:7e:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:34 2026 by rpki-client