Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json)
Hash identifier: I9fDm6qbuRg0rFnlWr7tLW6MX9XmeEgLoXTtoRK/VkE=
Subject key identifier: A8:0A:8D:52:1D:35:91:7A:C7:03:34:81:1D:85:CB:26:5F:E3:B2:64
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019D38D3A25D6AAB51088AAA1846B2E45277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
Manifest number: 04
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: DUmuZCB5PS6BzpQ8o1QclVbaEMMv3ZpYcoQ57TrqnMc=)
2: kLOdnWYod2whwOKkogh9l2zveHY.roa (hash: PkadpUKMz8JWZjzgiNZ6ReNjXw7sU0Is31wk0WREgYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a2:5d:6a:ab:51:08:8a:aa:18:46:b2:e4:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=a80a8d521d35917ac70334811d85cb265fe3b264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:0b:12:0c:e0:81:14:3f:7b:5e:84:a6:5a:
32:81:85:bb:32:6d:c5:c3:fa:3e:04:55:c9:6c:3c:
d9:d1:56:04:4b:71:9c:04:e6:34:9e:4a:b1:53:5d:
8e:38:ac:9a:08:39:a6:55:65:c5:d6:33:7b:68:57:
87:08:30:fe:38:45:f7:3b:f5:1f:76:11:c6:f1:da:
37:e3:07:7c:95:5d:9d:e3:b5:ca:52:00:0e:b6:04:
40:62:5c:df:5b:e0:4f:dd:a5:d9:51:87:7f:0d:b7:
8e:7d:79:65:5b:97:18:e6:93:12:52:34:86:aa:f2:
df:a8:57:44:e7:e9:10:05:47:29:af:c9:51:18:be:
c3:21:8a:d6:ce:64:9b:df:8c:b9:b2:94:56:c0:25:
b1:5f:4b:ba:9c:43:0c:8c:c6:04:ee:84:19:0a:7b:
e1:d8:da:6c:c7:48:d6:72:6f:c9:32:14:39:47:5b:
b5:96:70:25:98:c2:bc:a0:b8:99:ae:72:31:ef:67:
7b:17:90:d8:22:7e:8b:e6:3f:72:88:ee:aa:ab:ac:
b7:ce:2b:f1:52:e9:cc:91:93:1f:59:eb:0f:ff:f9:
03:46:ff:d4:66:8f:dc:eb:30:8c:b2:30:9f:ee:64:
e4:26:8e:27:3b:7b:b5:34:d9:3e:5f:84:c7:0d:2a:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:8D:52:1D:35:91:7A:C7:03:34:81:1D:85:CB:26:5F:E3:B2:64
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:39:00:97:37:19:1e:16:41:d1:0e:bb:f1:41:8a:d9:0e:1b:
30:56:3a:ab:df:f0:a1:32:b5:d3:36:3c:6e:dc:8b:70:d1:c2:
b0:77:e1:2a:26:ae:58:b2:8c:52:7b:ff:90:94:3e:6f:96:59:
a4:0b:4e:77:44:6e:59:38:e7:a7:95:67:ec:29:65:03:dd:f9:
7f:4d:d8:59:e7:8c:bd:26:b1:f2:d4:e5:43:05:f5:5b:19:06:
d9:16:d4:54:4e:e0:e9:5c:2b:4e:7f:75:8d:33:a0:14:67:b2:
14:1d:78:f8:18:30:27:60:27:8c:da:23:0c:e7:48:a2:7a:7e:
09:53:b0:ac:c6:de:09:3c:fb:28:df:d1:17:8f:8f:d1:0d:84:
fe:92:21:0f:35:dd:a3:a0:5a:6b:14:21:57:91:0c:3e:45:68:
3e:d4:68:af:20:b0:c1:2b:29:02:d0:39:9c:bf:e2:1d:a0:ec:
dc:70:13:5e:1c:9c:8b:1a:cb:33:0d:da:f9:3f:7b:ec:ce:3f:
35:ff:7c:d8:5b:8b:03:00:1f:fb:38:3f:e3:c0:95:f8:7e:3c:
08:d1:12:d4:23:f7:b1:c7:5a:57:c9:d7:39:17:27:28:a2:b8:
ae:4b:c2:5a:c4:44:04:81:23:78:ed:c6:34:5d:1e:6f:61:58:
de:90:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:48 2026 by rpki-client