Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
File: EfINU1CpXCygwyvx5E3yyNatAGQ.mft (raw, json)
Hash identifier: 0v3XNMbmUvzAt6c+9/S6/WojFaSY/fF+e/CVx+J3yLM=
Subject key identifier: 3A:37:2E:90:51:81:02:FA:B3:73:DF:52:C6:C9:1B:76:1B:FE:43:C2
Authority key identifier: 11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
Certificate issuer: /CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Certificate serial: 01A0C40DC3494F6174DE0F5A067375EC3FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
Manifest number: 0174
Signing time: Mon 21 Sep 2026 13:00:31 +0000
Manifest this update: Mon 21 Sep 2026 13:00:31 +0000
Manifest next update: Tue 22 Sep 2026 13:00:31 +0000
Files and hashes: 1: 1-AdQTyCAlxK1UXyPclFb4gBV5sw.roa (hash: pb2HK064WqlbzVnuT66ZkPVqqfQuNm50utehXBp8M/I=)
2: EfINU1CpXCygwyvx5E3yyNatAGQ.crl (hash: aYV+Owj7v9Yxnq1Lgw5gy19zg8pJCh8bdvkLPgCYQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:c3:49:4f:61:74:de:0f:5a:06:73:75:ec:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f20d5350a95c2ca0c32bf1e44df2c8d6ad0064
Validity
Not Before: Sep 21 13:00:31 2026 GMT
Not After : Sep 22 13:00:31 2026 GMT
Subject: CN=3a372e90518102fab373df52c6c91b761bfe43c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:3c:4b:59:d5:c4:66:d0:c0:95:c4:34:26:
41:0a:a5:b2:96:0b:50:e1:82:9a:60:92:dd:8f:f6:
cb:9d:40:c8:72:22:2e:b8:b7:e9:5b:18:fa:78:91:
3b:4d:30:2d:dc:db:41:c9:99:93:ef:30:2c:1a:ed:
0e:09:06:98:c2:36:78:73:1d:71:8b:8b:3e:22:c0:
9d:51:dd:01:52:9c:57:ef:9a:94:1c:8a:20:68:13:
05:93:00:ef:0a:d9:bf:1b:bc:89:ca:77:dd:f8:24:
72:c9:cb:63:83:4d:0b:18:9b:71:c2:48:f1:59:1b:
b6:7d:79:e7:db:fa:90:f5:14:e3:0e:48:78:ef:74:
1b:0f:02:1d:1d:4e:a1:7e:2f:c2:e6:79:13:34:27:
af:bc:63:8a:21:7c:43:e8:ef:8d:83:95:80:f5:95:
50:cd:31:80:a6:bb:5c:68:c9:50:8f:e1:f4:e6:97:
15:53:34:32:06:21:4e:d9:87:99:3b:0e:64:88:9b:
ac:f6:c6:e9:d2:ed:7c:2e:af:f4:60:3a:38:1f:4e:
70:97:41:4c:88:99:35:7a:af:52:f4:d2:2c:97:6a:
cb:67:25:26:b1:9d:da:74:55:89:21:3c:67:4e:cd:
9c:58:11:b2:7b:c1:a4:39:c9:2d:e7:af:4e:ac:67:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:2E:90:51:81:02:FA:B3:73:DF:52:C6:C9:1B:76:1B:FE:43:C2
X509v3 Authority Key Identifier:
keyid:11:F2:0D:53:50:A9:5C:2C:A0:C3:2B:F1:E4:4D:F2:C8:D6:AD:00:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfINU1CpXCygwyvx5E3yyNatAGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4a4bef-c7fe-42d8-9bf3-8bf92f46e419/1/EfINU1CpXCygwyvx5E3yyNatAGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:cc:09:37:23:a5:16:e8:3c:ef:74:1e:b5:fa:b9:92:13:
6f:79:60:21:ff:72:f9:f0:c7:90:42:2f:55:b2:aa:c2:d8:ab:
f0:43:20:15:af:72:f5:d8:c9:3c:12:95:ec:08:6d:08:6f:e0:
06:32:af:ff:11:8d:fd:60:51:04:14:e6:26:0f:70:15:94:f3:
67:ad:3f:2f:ed:ce:4a:c8:30:2d:7a:ac:af:52:02:e7:88:90:
7b:dc:bf:44:e8:14:ec:f9:8b:a6:44:cc:f5:54:d6:9c:6b:16:
84:e4:cc:bd:9b:1d:18:a2:b5:09:9d:1f:a3:b1:0c:9a:d8:37:
cc:75:61:df:dc:49:69:7b:0b:d9:b8:64:86:0f:a6:d4:18:a8:
70:2d:4b:d2:43:07:4b:24:84:ed:80:e0:29:c0:40:9d:91:54:
32:2b:8e:bb:6c:6f:07:f7:2e:95:70:59:cf:40:38:5c:fe:5f:
72:97:26:16:d9:01:26:27:6a:ac:80:ca:6d:0e:c1:ba:2c:f3:
a0:28:c5:1a:0d:8c:32:ea:45:91:22:5a:61:7e:35:2d:06:60:
e3:df:e7:5b:26:46:2c:b7:86:53:be:f9:b6:a1:07:6a:aa:28:
08:d5:12:c6:55:66:35:cb:8a:25:c7:ea:e7:f1:52:06:25:0a:
58:3a:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:25:49 2026 by rpki-client