Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: E6s6M3HDOgR1v7D5G6PXz1AbNCXTP1oh5kjZ7j8PFrg=
Subject key identifier: EF:F7:75:F7:00:AC:D3:D7:D6:4E:32:82:F5:72:FF:60:24:D2:0C:C2
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 01A1C02E654C3451E69B221542A3559A571B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0E8D
Signing time: Mon 09 Nov 2026 12:00:28 +0000
Manifest this update: Mon 09 Nov 2026 12:00:28 +0000
Manifest next update: Tue 10 Nov 2026 12:00:28 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: 1wi33cQRqRKCgOwHTO25vHwfODjdTg68TvplYnc/d18=)
2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:2e:65:4c:34:51:e6:9b:22:15:42:a3:55:9a:57:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Nov 9 12:00:28 2026 GMT
Not After : Nov 10 12:00:28 2026 GMT
Subject: CN=eff775f700acd3d7d64e3282f572ff6024d20cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:1f:7c:9c:40:22:ac:6d:08:4e:20:cb:36:
0d:3c:f4:c1:41:b0:29:55:f0:d5:86:d7:f9:9a:3d:
53:84:4c:df:d4:48:74:b1:09:eb:c1:81:de:66:4a:
2a:9c:ab:53:8f:3d:b4:cf:d0:94:fe:d5:0d:2c:73:
40:39:4a:42:84:6c:10:46:b6:c6:a0:46:7d:d8:22:
29:81:c3:e0:6d:cf:d1:fd:65:3a:4a:fe:0c:66:d4:
f8:02:83:da:33:f4:f9:04:69:3e:49:57:ec:b4:43:
02:6f:53:28:7d:34:44:7f:7b:cb:2e:d6:02:dd:7c:
b5:a8:1b:0f:5b:87:9d:b1:2c:7d:b6:95:cc:33:93:
9c:66:67:64:5c:92:bd:64:88:fb:48:88:aa:9c:5c:
40:ac:86:ec:a9:14:a6:14:6f:c4:4c:01:7f:e5:57:
8d:2b:7b:26:ef:f1:86:dc:f9:0e:39:1c:c8:86:00:
13:d6:1d:73:be:39:81:bf:0a:fc:71:25:e9:6e:a8:
66:4d:64:95:d3:a6:ca:91:2b:d8:a3:80:5e:96:9f:
a5:76:75:3a:d7:c0:ae:97:7a:25:16:e9:b9:cb:6e:
75:7b:76:59:ee:ef:63:22:53:bd:1d:4d:21:8b:cb:
f1:da:83:4c:8f:d7:71:64:b4:9f:81:d1:fb:78:70:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F7:75:F7:00:AC:D3:D7:D6:4E:32:82:F5:72:FF:60:24:D2:0C:C2
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:d0:3a:47:a1:db:c4:d4:74:cd:bc:e5:ab:62:44:92:9d:
29:02:af:72:85:bb:c6:df:94:89:0b:64:f0:65:d8:0b:9a:2f:
10:ad:72:8d:22:23:74:35:b2:a1:67:66:4b:3a:ee:b0:e2:b6:
74:af:ab:63:f8:88:24:f4:ff:b8:11:09:f7:64:46:9d:55:93:
78:c0:77:df:f9:f8:48:20:30:e6:eb:60:e2:15:13:42:88:be:
6a:28:e9:3c:c9:c4:26:f5:84:81:d3:a4:cd:e1:a7:e5:e5:42:
96:38:80:64:08:37:4c:6c:6e:8b:90:0a:bb:74:ed:27:fb:f2:
a6:c0:06:02:88:de:bb:a2:3b:5a:9f:8f:05:95:a0:2e:40:d6:
21:fb:20:df:68:a6:1a:ff:6e:8f:38:94:42:14:64:a4:11:ac:
da:82:a8:fb:1c:2a:72:d3:4c:5b:79:0a:26:12:85:f7:71:93:
b9:10:0d:9a:4c:1d:3a:d8:86:d1:fe:57:0e:9a:85:ec:8a:0b:
78:e3:00:f6:da:ab:69:9d:7f:bf:d1:4e:30:66:d7:d5:27:d5:
cb:1f:6e:50:4c:f7:fe:8a:a8:d1:09:df:d9:4f:58:78:e8:33:
cb:ae:33:4a:96:82:ef:6a:c7:ba:e6:43:09:bf:6d:b0:b2:96:
aa:ee:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 21:35:27 2026 by rpki-client