Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
File: E2bDmPAyEL8XEDc39JCxuXDtQko.mft (raw, json)
Hash identifier: AfXrN+rF82FEbUBVhP6F5Y+CKnXFpD5+k4ODaYeQYNQ=
Subject key identifier: BA:B0:8A:7E:57:5B:7D:1C:B7:CE:B0:AF:BF:C1:60:D7:0B:60:61:5C
Authority key identifier: 13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
Certificate issuer: /CN=1366c398f03210bf17103737f490b1b970ed424a
Certificate serial: 019FACAD480C37394B181E21A2C13EA2E610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
Manifest number: 0106
Signing time: Wed 29 Jul 2026 07:01:04 +0000
Manifest this update: Wed 29 Jul 2026 07:01:04 +0000
Manifest next update: Thu 30 Jul 2026 07:01:04 +0000
Files and hashes: 1: E2bDmPAyEL8XEDc39JCxuXDtQko.crl (hash: EU6NcnnQ5ny3hU8l1Ck56ZyO/T3NTMXIyJIJGgrIPkc=)
2: fIkPV_l_k4SzslIO_m2xCkrW7yo.roa (hash: 4eiXEQq4L1lVAPQNjACQvwiKKs16RCaoEElInvItTzY=)
3: l12NJpIYI2RvZ6Sne8MdQgF3CAY.roa (hash: be9HgbYHtY8qJtefM856XAcCsr78PfK4drNIboDrauM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:48:0c:37:39:4b:18:1e:21:a2:c1:3e:a2:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366c398f03210bf17103737f490b1b970ed424a
Validity
Not Before: Jul 29 07:01:04 2026 GMT
Not After : Jul 30 07:01:04 2026 GMT
Subject: CN=bab08a7e575b7d1cb7ceb0afbfc160d70b60615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:34:45:16:13:88:28:db:2f:cf:d5:46:de:
11:b7:a3:49:60:6a:9a:05:03:72:95:d9:7f:b4:4f:
ac:31:33:05:4d:76:88:4f:de:44:a8:f9:51:da:f5:
9a:cc:bf:ff:f6:43:80:1b:8f:00:3f:c7:52:4f:34:
18:65:ea:36:87:76:26:39:f4:e5:cf:cd:fc:18:1a:
5d:ff:c1:08:67:22:e6:ae:45:d8:4c:65:27:40:30:
10:48:2b:be:62:1d:d7:ab:01:60:b2:ac:73:39:90:
92:49:0b:30:00:69:82:ba:47:5b:f6:24:31:38:59:
ae:d0:21:27:4f:d1:95:9d:af:f7:af:6b:7d:a6:87:
bc:b4:06:e5:74:cc:26:28:23:92:29:aa:c0:1d:18:
ca:d3:d8:9a:5f:02:f8:f2:da:54:45:aa:49:59:d6:
ca:b5:8d:ab:83:53:21:a4:94:71:a3:18:0f:23:c2:
d1:4c:84:46:1d:50:4a:27:3a:4d:3d:79:59:bb:24:
42:20:21:e0:b3:a1:92:61:4d:d2:68:10:73:89:29:
d1:2b:88:88:b6:4b:b0:67:b6:47:2b:b8:72:af:2e:
18:6e:1b:61:c2:5c:08:88:f6:dd:8f:7d:c1:73:22:
36:2b:21:fc:31:a7:7c:c6:87:55:12:bf:59:88:5a:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:8A:7E:57:5B:7D:1C:B7:CE:B0:AF:BF:C1:60:D7:0B:60:61:5C
X509v3 Authority Key Identifier:
keyid:13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:92:b7:bc:1e:10:3d:89:86:7e:bf:02:3d:7f:93:23:77:2b:
1f:39:cb:41:02:97:ac:8e:13:49:d9:d5:b5:79:71:e8:e4:8a:
d3:59:ac:25:12:e7:da:13:65:8e:94:c1:84:9f:09:f0:0b:54:
39:50:57:b5:d2:e4:76:9a:1b:92:9c:37:ec:35:12:ca:48:4f:
e3:c1:55:50:d0:6c:0d:c5:8c:5e:e1:dd:e5:bb:43:65:8f:a5:
a1:fd:b8:39:dc:46:d2:4e:24:51:e7:0f:96:81:b2:52:0f:d0:
d2:9f:ea:9c:4e:7a:66:76:41:c9:2e:20:0e:d9:ce:f6:94:2b:
5e:b5:87:47:b3:1c:4a:6e:11:aa:56:b9:3a:97:7d:b0:5a:a1:
5f:14:34:c4:da:03:23:1f:3d:2f:4a:e3:d3:02:80:3f:91:3e:
07:66:e8:5e:dc:3e:cd:5e:68:c2:cb:42:c7:ac:08:08:57:0e:
5b:f3:f1:fa:ef:b0:6d:46:a1:66:cc:76:e9:14:05:57:00:d7:
8a:82:c6:3d:7e:12:84:5c:70:16:94:31:7a:58:c6:13:03:d0:
7c:07:c0:81:20:6f:c4:5b:e0:48:43:dd:2a:e5:72:9b:64:2e:
78:ad:d8:71:60:24:a2:17:1a:e2:32:1c:bb:4e:a4:f7:76:bc:
3d:e5:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:11 2026 by rpki-client