Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: JLK/2bB0r4wv3uxdVirdMjN5WT3XaWLHoecHoJ2+UKo=
Subject key identifier: E7:32:6F:FB:2D:E4:06:1D:85:E1:98:0D:61:90:81:EE:BC:E3:D6:99
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01A0C39FCDF777022E07190E9ADACCB6296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 1103
Signing time: Mon 21 Sep 2026 11:00:25 +0000
Manifest this update: Mon 21 Sep 2026 11:00:25 +0000
Manifest next update: Tue 22 Sep 2026 11:00:25 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: 2FB8wUdOPoDdlaiRquihwAWhJBKYoPSn8Rh3fG88e80=)
2: PT0Hh_zA6DA7Ygm3lsv3kQf_fks.roa (hash: FxFcWo8Y6GRlCILxAgJ+3ut0eY9so1Z8V3wHguGCZXE=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:cd:f7:77:02:2e:07:19:0e:9a:da:cc:b6:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Sep 21 11:00:25 2026 GMT
Not After : Sep 22 11:00:25 2026 GMT
Subject: CN=e7326ffb2de4061d85e1980d619081eebce3d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:36:2a:e7:b7:92:8d:8a:43:eb:7e:5a:09:
56:92:5d:6d:3b:89:56:c6:6f:21:54:ed:bf:d4:08:
a9:77:14:43:d0:63:2a:63:f6:96:71:53:83:bf:05:
6e:43:15:94:a2:22:e0:da:0d:0f:bf:f8:2e:12:11:
73:d4:1a:ca:e3:eb:75:39:62:9b:de:ee:b3:a6:e3:
11:29:1b:83:91:8d:23:3a:bf:25:e0:c6:12:59:56:
8f:0d:23:7b:a7:6a:98:0e:bd:c4:a2:ee:12:f0:92:
b1:3e:de:b4:50:dd:95:42:39:b8:14:60:8b:32:7e:
63:d0:b9:be:6e:5d:25:3c:5e:cb:8c:0d:04:c2:59:
47:59:71:8c:67:35:60:75:47:ba:e6:9a:c5:76:79:
fe:b6:0f:9c:2f:59:3c:a5:59:8c:49:54:79:20:23:
59:fa:26:3e:ef:ad:97:92:b6:02:39:ac:fe:d1:cd:
d3:17:c5:21:29:39:36:2e:33:a8:09:12:23:64:c7:
a3:c5:e4:79:5a:e5:2c:11:9c:7e:86:69:f5:12:53:
00:0d:86:47:32:6f:9f:87:4e:d0:f5:bd:db:a0:10:
45:da:97:14:d1:f4:66:0e:9c:fd:71:ec:f9:fe:f7:
36:50:62:c4:3b:af:de:ec:51:71:5d:fd:f4:43:0f:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:6F:FB:2D:E4:06:1D:85:E1:98:0D:61:90:81:EE:BC:E3:D6:99
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:42:8a:73:e3:5a:4c:b8:63:a6:8b:b4:52:eb:72:2f:bb:
a0:0d:5a:f1:93:21:22:1b:81:54:83:2d:d5:39:89:8e:59:f6:
7e:b6:33:31:2e:07:d8:36:17:0b:59:ef:5e:16:17:66:c1:76:
77:b5:9d:a9:2a:aa:6a:c1:93:de:f0:13:2f:dc:5d:30:73:dd:
86:19:38:ee:83:5b:1d:e8:61:01:b6:22:41:55:1e:ac:9a:ec:
13:c6:f9:c5:57:13:58:5f:e0:62:10:e8:3c:82:44:a1:c2:75:
c9:06:05:25:52:4a:40:02:3f:63:70:ad:ef:d0:16:6d:7c:5e:
84:72:6c:eb:11:3c:2e:1a:c8:de:4d:4f:5c:76:5c:82:1a:7d:
71:49:5f:4a:78:23:26:ea:0c:3f:cd:cc:6e:44:74:24:52:c2:
61:b5:05:f9:99:51:96:0e:86:74:a2:76:a7:ac:43:7b:86:27:
71:5c:cf:a7:d4:6f:b5:10:fe:68:45:c9:7e:3d:ad:73:87:ce:
4b:ae:02:dd:5c:93:75:bf:d1:e1:c6:67:b8:8d:52:dc:fc:bf:
3d:88:90:e7:d5:1d:44:ee:1e:f9:f6:2a:e1:29:ef:b8:ff:c2:
41:50:1a:31:da:a1:18:1b:29:61:18:01:27:fa:9d:fa:53:55:
2b:d9:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:55 2026 by rpki-client