Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: MCcM0W10p49xzGglrYqQvykMRefaEuJkMhwx15pR3R8=
Subject key identifier: 5A:C7:71:50:71:86:1F:4E:39:96:B5:C5:47:BD:B0:00:36:6F:AD:FB
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 01A0C6D79699AC0082E68A04AFB3DC441B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 135D
Signing time: Tue 22 Sep 2026 02:00:12 +0000
Manifest this update: Tue 22 Sep 2026 02:00:12 +0000
Manifest next update: Wed 23 Sep 2026 02:00:12 +0000
Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: pihTaqIHTVnsvNdOrIOIOSzblElHa135Y+Ck2cSJOns=)
2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:96:99:ac:00:82:e6:8a:04:af:b3:dc:44:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Sep 22 02:00:12 2026 GMT
Not After : Sep 23 02:00:12 2026 GMT
Subject: CN=5ac7715071861f4e3996b5c547bdb000366fadfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:b3:43:2c:77:f0:cb:7f:96:ba:b4:f3:d4:
a1:ee:43:29:e5:6a:fe:1c:53:6d:7a:1b:4a:33:5b:
8d:10:a0:b6:14:d6:04:99:b2:7a:4b:82:0b:bf:5d:
2e:b7:b9:34:11:b6:83:e3:76:c4:ae:8c:f5:78:eb:
03:27:5a:ce:fe:a2:39:f5:e3:b6:31:de:b2:41:57:
fa:bf:79:e3:55:27:1d:91:ba:ef:db:16:f8:57:17:
2e:6b:59:a8:26:a9:52:8f:f4:ec:d0:6f:72:71:3c:
e8:e0:4d:63:78:83:87:88:6e:64:32:0f:ba:1e:82:
78:bc:9e:20:8c:74:8a:86:ba:38:63:93:36:f7:02:
4c:31:7e:34:fc:b9:c3:b5:ad:cf:3f:cf:30:7b:a1:
41:89:2b:8e:d9:ce:71:30:ba:cf:b0:b6:64:74:22:
06:75:e7:f0:19:1e:37:e8:70:34:53:aa:bf:15:da:
88:f4:8c:7f:e4:db:b0:d8:80:84:c6:90:a2:7e:b9:
9f:69:51:96:14:31:3b:9c:bc:99:95:66:96:6f:8f:
15:ae:d3:dc:26:04:6f:a0:16:17:b7:76:71:b3:4e:
12:0e:8f:67:81:43:de:28:0c:b4:25:b4:32:3e:2e:
06:ae:27:89:52:56:1c:c6:89:26:ad:83:d9:e6:68:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C7:71:50:71:86:1F:4E:39:96:B5:C5:47:BD:B0:00:36:6F:AD:FB
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:12:f7:c6:71:a4:c2:b5:3f:09:d5:91:2a:85:6c:ae:ff:
a1:da:8d:d2:17:c8:f6:33:2d:93:48:e2:66:21:f8:61:58:60:
22:a3:84:2d:d8:0e:da:e3:4b:e7:24:c4:2c:1c:10:03:0c:3e:
f6:a0:ff:2d:80:6c:05:c9:d4:75:2c:27:ed:e5:7d:9a:39:61:
61:b4:d0:cf:bd:fa:33:83:06:f1:43:bb:b2:ec:a6:36:df:c0:
81:76:71:dc:37:70:5b:4f:57:33:52:2b:c5:3a:7a:30:1c:c5:
28:4b:53:1f:88:47:5b:8c:da:db:3f:a1:0d:e7:f0:93:2c:6d:
5b:0e:58:e6:f3:85:dc:1b:03:74:0a:b8:5a:b9:0d:c9:75:cf:
c8:c9:98:a8:02:fc:db:61:e1:f9:80:95:15:56:06:97:fd:9e:
98:73:47:50:77:ea:13:8a:7a:60:45:b6:dd:d6:37:b3:a1:f2:
18:88:ce:37:8c:e7:23:9b:49:ad:ba:91:27:4e:6b:09:bf:e5:
a3:a5:8d:39:7f:0d:3e:29:21:27:9c:7a:36:13:3e:97:ba:ce:
41:42:24:61:11:48:e0:65:1c:84:4d:46:1d:33:2a:d3:10:18:
0b:23:7e:cd:ae:96:aa:85:64:7b:4d:71:ad:d8:a3:dd:a9:42:
32:b6:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:04 2026 by rpki-client