Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
File: EfINU1CpXCygwyvx5E3yyNatAGQ.mft (raw, json)
Hash identifier: uT2hLCYY+5yrjClqkic4tkEfWxGpVGNO2/3Nv1zb0bQ=
Subject key identifier: EE:27:0A:D7:73:98:3E:C7:17:EF:8F:A1:68:AB:A6:88:51:87:4D:F3
Authority key identifier: 11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
Certificate issuer: /CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Certificate serial: 01A1DE029349C76A8B6E8711D06DB38C6AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
Manifest number: 0206
Signing time: Sun 15 Nov 2026 07:01:12 +0000
Manifest this update: Sun 15 Nov 2026 07:01:12 +0000
Manifest next update: Mon 16 Nov 2026 07:01:12 +0000
Files and hashes: 1: 1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa (hash: pb2HK064WqlbzVnuT66ZkPVqqfQuNm50utehXBp8M/I=)
2: EfINU1CpXCygwyvx5E3yyNatAGQ.crl (hash: aq2t9t587xbd0wzVCqo5WuT8OtFSn6Sarik/xUptZhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:93:49:c7:6a:8b:6e:87:11:d0:6d:b3:8c:6a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Validity
Not Before: Nov 15 07:01:12 2026 GMT
Not After : Nov 16 07:01:12 2026 GMT
Subject: CN=ee270ad773983ec717ef8fa168aba68851874df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:1d:1e:c3:dc:71:de:d2:b8:c8:35:39:0b:
b3:5b:d0:9c:c7:76:a7:dc:43:43:a3:41:5a:e9:f3:
75:81:f3:64:f5:b2:2a:6d:70:7d:52:60:92:28:51:
ed:db:3d:b0:14:10:c1:73:06:7a:34:6d:32:e4:77:
03:f9:ba:2b:e2:bd:85:93:c6:77:35:88:a7:08:c5:
1f:dd:14:06:a3:e2:59:d1:af:8b:0f:6e:28:f0:ec:
47:fc:d7:ab:69:69:6d:7e:8a:93:4a:94:6f:ba:3c:
ea:a4:10:60:65:0f:30:89:75:6f:f1:37:59:f4:94:
cc:93:07:53:08:b9:87:42:6f:aa:3d:b3:fe:9a:ff:
d6:c0:d6:1f:a1:82:bb:3b:48:51:f3:47:d0:57:ea:
67:e1:e9:ad:6e:de:e2:b6:a0:88:f9:3c:e1:9d:dd:
16:15:b0:71:6d:f4:49:b2:a5:ac:88:c2:43:aa:e1:
23:2c:25:67:11:d1:1a:00:cb:48:1e:2b:73:47:fb:
c5:0b:52:19:5e:46:7f:c3:a2:6e:6c:86:b6:e8:3e:
84:7b:56:77:22:20:da:da:4f:28:c9:92:e6:e5:52:
d3:6f:8d:12:c2:81:a8:a8:c2:67:35:50:af:25:42:
9c:8a:80:df:ad:ad:d1:8a:c1:af:37:94:cd:98:0f:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:0A:D7:73:98:3E:C7:17:EF:8F:A1:68:AB:A6:88:51:87:4D:F3
X509v3 Authority Key Identifier:
keyid:11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:80:27:a5:dc:f2:22:e9:c6:b0:fd:b6:87:a1:e1:20:ed:ae:
2a:be:e4:7f:a4:ac:94:b0:e1:c5:81:4a:cf:01:ff:5b:1a:59:
e7:13:47:0b:7a:74:d0:f1:73:90:98:b9:2d:c0:a5:38:80:a9:
8e:d8:d6:13:2f:46:e8:e9:03:bf:03:7b:c2:9c:1f:75:fb:85:
a4:9c:2c:49:8b:1f:6c:34:8e:11:47:df:85:7f:ec:10:d9:91:
46:d3:02:38:69:c0:33:08:68:e7:13:25:3f:96:a7:ae:08:f0:
c5:a1:76:b8:96:3a:a6:e8:d5:2f:1d:6b:b2:3b:59:b1:09:6a:
1c:f1:94:88:30:b6:23:00:5d:20:1d:7e:83:5e:06:7c:e4:51:
8b:82:92:cb:17:49:4c:4a:10:3a:15:6c:7e:90:9c:ec:82:dc:
45:0c:89:2f:af:98:34:6e:50:3f:a7:52:78:01:54:75:8b:cc:
d2:0b:80:ae:e2:8e:f2:07:cd:0d:fd:36:f5:9a:b6:91:8e:c5:
c1:89:34:67:84:86:43:e4:c7:4a:e2:68:cf:fa:d3:73:1f:22:
0c:5d:0c:03:99:e1:04:e9:0c:93:aa:d6:3e:24:2d:ae:d8:2e:
d2:ab:1e:5d:b5:85:3f:27:f1:5d:a7:b8:97:16:c6:2a:cb:28:
64:c3:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:02 2026 by rpki-client