Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: +WfVu4fDJw7nSfEZagRjurUPVSxBu2fWBFMquiJqw8o=
Subject key identifier: EB:5F:62:CA:E4:41:E5:F6:57:C9:59:C3:02:B3:45:37:E1:93:75:CA
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 019D3865A44C7CDF0A0EC8BD586295048866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0F5F
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: OLN4JPviLhzG+1Irpu9AFivG9Kz04SVV1rrBw1WWBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a4:4c:7c:df:0a:0e:c8:bd:58:62:95:04:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=eb5f62cae441e5f657c959c302b34537e19375ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:5a:3f:06:f8:0f:77:7a:3d:ab:ce:ae:81:
c4:99:2a:08:23:d4:2f:85:3b:f1:d3:e2:f1:3c:b2:
64:e0:e8:5e:6e:70:71:2b:ed:da:a3:97:22:28:bf:
1c:23:3a:6d:dc:21:74:bc:64:74:ff:52:6b:e5:6e:
2f:d5:8c:a9:32:7b:c1:9c:65:6d:64:5b:ea:78:d3:
2a:72:94:a8:eb:6b:2c:ba:38:1c:73:97:15:2a:ea:
60:79:c5:fc:61:70:05:05:8b:33:ed:92:85:84:a0:
8d:55:33:f0:fd:bb:c0:30:70:8c:41:2d:33:a5:1a:
a1:d0:0d:d4:58:8e:bd:d3:a5:56:74:34:92:9d:af:
34:19:8c:42:16:73:05:44:af:4c:81:98:25:8e:94:
55:65:5b:c7:65:ad:a3:a5:8e:18:70:0d:41:49:77:
b8:65:e3:58:22:d0:eb:5e:7e:ea:a0:3a:fa:ad:c1:
2e:3d:25:98:7a:3e:84:94:5e:69:43:f7:5f:f2:35:
96:54:10:05:f4:7b:44:86:21:b4:72:a5:3c:86:6a:
d8:c1:56:8f:ce:25:c3:4a:bd:55:51:99:e0:85:25:
3b:0c:8c:79:b9:99:a7:f9:5d:60:b3:5c:18:60:39:
66:39:5f:12:0a:da:48:1a:be:bb:de:c1:ee:c4:d3:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:62:CA:E4:41:E5:F6:57:C9:59:C3:02:B3:45:37:E1:93:75:CA
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c1:bf:72:73:ba:61:55:e3:3f:20:f9:e6:32:2f:01:c7:32:
1d:39:e8:22:c0:55:98:20:6f:a8:61:72:d6:1a:af:d0:6b:e7:
70:8c:b2:e0:ee:f3:50:83:38:3c:72:67:62:c5:fc:f0:4f:18:
8d:36:b0:5d:20:c3:a3:b9:3e:42:e7:f9:43:67:3c:5f:f1:ff:
f5:08:ac:68:d7:6f:e9:f8:dd:b7:bd:36:12:98:34:6f:16:03:
fa:f9:de:c2:90:b0:aa:f8:cf:bb:ee:cb:8b:a7:45:2e:48:97:
90:15:cb:eb:ae:a5:e3:c7:82:02:ac:03:08:63:4b:4f:1a:62:
1b:70:09:83:8f:f1:a1:14:cd:06:e0:f4:d3:a5:ff:c2:e9:75:
f2:d7:6b:63:53:9d:51:39:21:dc:5f:fb:eb:8e:68:46:86:3b:
42:01:16:7c:53:bb:dc:46:c4:fd:48:08:c6:4a:b8:da:04:19:
14:60:00:9c:d0:6b:a8:53:a8:b9:92:a7:72:83:3f:df:6f:bd:
3b:83:5a:df:cc:68:7e:07:4d:96:7f:ae:c8:62:5e:95:60:89:
43:3a:8b:d8:b3:34:fe:6b:c8:dc:9a:86:5d:ca:20:4a:60:60:
f2:08:64:74:ab:54:db:75:3a:b1:fa:93:99:88:4e:92:28:78:
69:83:fe:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaRMfN8KDsi9WGKVBIhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1
MDNlMTEwHhcNMjYwMzI5MDcwMTE4WhcNMjYwMzMwMDcwMTE4WjAzMTEwLwYDVQQD
EyhlYjVmNjJjYWU0NDFlNWY2NTdjOTU5YzMwMmIzNDUzN2UxOTM3NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKhaPwb4D3d6PavOroHEmSoII9Qv
hTvx0+LxPLJk4OhebnBxK+3ao5ciKL8cIzpt3CF0vGR0/1Jr5W4v1YypMnvBnGVt
ZFvqeNMqcpSo62ssujgcc5cVKupgecX8YXAFBYsz7ZKFhKCNVTPw/bvAMHCMQS0z
pRqh0A3UWI6906VWdDSSna80GYxCFnMFRK9MgZgljpRVZVvHZa2jpY4YcA1BSXe4
ZeNYItDrXn7qoDr6rcEuPSWYej6ElF5pQ/df8jWWVBAF9HtEhiG0cqU8hmrYwVaP
ziXDSr1VUZnghSU7DIx5uZmn+V1gs1wYYDlmOV8SCtpIGr673sHuxNNZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtfYsrkQeX2V8lZwwKzRTfhk3XKMB8GA1UdIwQY
MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt
ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5
LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcG/cnO6
YVXjPyD55jIvAccyHTnoIsBVmCBvqGFy1hqv0GvncIyy4O7zUIM4PHJnYsX88E8Y
jTawXSDDo7k+Quf5Q2c8X/H/9QisaNdv6fjdt702Epg0bxYD+vnewpCwqvjPu+7L
i6dFLkiXkBXL666l48eCAqwDCGNLTxpiG3AJg4/xoRTNBuD006X/wul18tdrY1Od
UTkh3F/7645oRoY7QgEWfFO73EbE/UgIxkq42gQZFGAAnNBrqFOouZKncoM/32+9
O4Na38xofgdNln+uyGJelWCJQzqL2LM0/mvI3JqGXcogSmBg8ghkdKtU23U6sfqT
mYhOkih4aYP+gA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:01 2026 by rpki-client