Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: ZFjudq3usEktO9H+it6ftcYCLwZl/q0UEgtHcDfwFSI=
Subject key identifier: F8:46:C8:67:A0:FE:FE:60:63:77:77:3A:9F:47:EC:6B:B9:E1:C1:87
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019D38663AD0A87793896A8682232AF46C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 15BF
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: 4C9fExk+kGTo7xvbiRtE84kn6b5xzKuG66p1T93uByk=)
2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:d0:a8:77:93:89:6a:86:82:23:2a:f4:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=f846c867a0fefe606377773a9f47ec6bb9e1c187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:9e:86:fb:c9:e7:bd:0a:55:f4:49:37:32:
1e:de:28:01:07:80:83:7d:c1:91:f6:4f:cc:7c:54:
33:95:90:b9:52:e4:7a:b4:73:79:fc:9c:78:39:47:
03:40:49:85:7b:42:b9:6f:11:7d:0b:3d:45:0d:18:
07:a3:03:e2:16:e3:06:b5:6c:ad:f2:46:75:f0:0c:
94:31:79:d8:84:98:83:9a:c3:8b:a0:26:93:5e:7f:
bb:fd:8e:85:86:f3:e6:a0:99:97:9a:5b:cf:ce:ed:
96:48:73:d0:7e:63:33:f3:7f:10:ce:29:b0:5e:95:
29:a5:69:e3:09:f1:07:fb:96:ff:d0:50:69:20:29:
20:66:d2:14:08:fb:70:07:9f:64:5d:9d:31:1c:1b:
25:21:5e:5c:e2:03:42:7f:90:4e:48:ca:27:d0:7d:
de:74:e5:8c:27:ba:dd:ab:7a:32:56:8f:a3:2e:f6:
3b:e6:6c:2e:3d:4d:3f:87:6b:b8:7f:9b:6d:50:80:
c8:3c:a4:dd:4e:ed:e1:0c:76:97:16:28:91:14:f9:
e2:a6:1e:44:53:3e:ed:9f:24:e6:4a:82:24:8b:82:
62:04:4c:55:b2:c4:9b:2a:ea:1a:63:19:5b:4a:a0:
de:7a:d6:8b:85:4e:8a:3e:30:d3:ec:6e:11:cc:2d:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:C8:67:A0:FE:FE:60:63:77:77:3A:9F:47:EC:6B:B9:E1:C1:87
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:24:d8:88:77:8b:4e:17:8f:76:2b:05:10:cd:e2:17:48:
2d:ab:e3:5c:a4:ab:d8:2b:54:81:d6:0d:61:df:f8:4e:64:86:
f6:b2:1e:34:2b:ae:ed:18:22:fe:08:9a:d7:ff:f7:31:79:6f:
f1:d7:81:b5:77:c8:f2:f8:17:72:01:30:ef:6e:89:10:f4:98:
02:59:94:0c:81:de:84:97:76:16:a7:23:b0:4a:bb:83:8d:92:
c8:dc:bc:c7:cb:55:57:cd:3e:7d:7a:4e:81:2c:46:3f:06:b0:
2b:87:68:df:b8:22:ee:32:d4:f1:1e:ae:be:0e:b7:60:5a:e3:
b3:83:88:82:4c:74:56:a6:40:19:e5:8c:f1:6f:59:1a:28:17:
ea:2c:35:07:9a:e9:df:bd:d8:de:b8:3c:14:f3:5c:74:b1:e5:
3c:16:ec:0d:75:b3:ce:2e:a7:ab:74:66:b4:84:87:64:8c:0e:
e5:85:e1:46:38:ac:74:73:c6:db:28:45:66:ab:df:2e:67:83:
dc:8a:c6:4e:5a:11:fc:4c:10:14:21:c1:c7:a5:94:ee:44:45:
b4:57:df:a2:6b:78:37:14:59:b0:8f:a2:86:21:95:cf:0f:80:
37:57:be:c3:7e:86:1b:a0:7a:c7:2e:53:17:3c:3c:ac:47:51:
af:ea:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:04 2026 by rpki-client