Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier: XCjTn0TE1fkA1T6yYnQv8OAR9r1MQZsAEoKUE0Ri4Wc=
Subject key identifier: E4:1F:CB:24:D6:61:4E:89:24:78:07:93:98:7F:58:40:72:C9:D2:97
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019D3AC1021DBA231582AA041CFAA58B6DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number: 18CD
Signing time: Sun 29 Mar 2026 18:00:20 +0000
Manifest this update: Sun 29 Mar 2026 18:00:20 +0000
Manifest next update: Mon 30 Mar 2026 18:00:20 +0000
Files and hashes: 1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: o1x2R+aPH6GYZY9DAkBqs7HyXXvxFEcpWqI5YM+oqAc=)
4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
7: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:02:1d:ba:23:15:82:aa:04:1c:fa:a5:8b:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Mar 29 18:00:20 2026 GMT
Not After : Mar 30 18:00:20 2026 GMT
Subject: CN=e41fcb24d6614e8924780793987f584072c9d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:59:c6:72:89:1c:a1:5f:19:50:f9:72:a9:
b6:1a:f6:30:22:5c:6a:60:ef:22:92:bc:95:b4:3a:
5a:10:5c:4e:31:15:eb:ea:05:46:d9:cc:f7:27:1d:
e5:9e:1d:d0:02:4e:7d:79:4b:39:ba:72:42:f7:6e:
8a:94:75:5e:58:83:18:17:30:9b:46:11:d9:4e:9e:
9a:e1:0f:5c:e5:a2:73:7f:b1:e1:61:1e:76:ef:51:
71:8e:dd:a4:06:34:2e:7c:51:88:a9:48:e3:41:83:
0a:86:5e:3b:ed:6b:4d:35:e0:af:7d:8c:fc:1a:ab:
e6:84:6d:69:26:32:8c:e0:3e:99:98:bb:d9:f8:b2:
09:f8:fe:98:ea:56:36:74:22:8d:7e:f2:1f:d5:58:
c1:53:2d:c0:f1:60:cd:67:c6:ae:73:e8:d7:26:42:
53:b3:63:72:d0:13:66:7f:70:17:60:c0:ee:70:ce:
04:cd:e9:57:2f:ca:6e:46:9e:7a:e0:01:e5:62:f8:
a9:ae:d7:b0:13:88:50:ab:5d:3f:18:31:3e:ab:d5:
9c:97:bc:b8:10:c7:a4:08:69:24:4b:10:60:20:cc:
d8:6f:7f:6c:4a:fe:0d:66:29:35:e3:9b:d4:38:03:
84:8d:fa:6f:88:99:59:10:ee:88:87:cd:d9:90:80:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:CB:24:D6:61:4E:89:24:78:07:93:98:7F:58:40:72:C9:D2:97
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:ba:9d:05:0f:1c:94:37:19:e4:06:8c:35:19:fc:17:9d:
6f:ac:8d:71:c5:67:e0:c5:15:47:5e:ab:47:fc:7f:c9:5f:4e:
e2:90:82:b3:ce:3c:40:97:02:b8:40:4d:0d:4a:2d:66:22:0f:
e0:1c:ea:3f:29:73:94:44:dc:48:fd:d9:2e:a5:d9:92:ed:67:
59:74:41:6a:9a:66:b0:a2:29:37:f2:ff:49:a6:7e:da:89:e9:
d2:29:02:74:01:0c:54:d7:36:2c:c9:23:4e:7c:5f:5c:cf:6b:
56:ba:ea:55:64:e1:8d:94:95:bd:2b:47:b3:0e:89:82:76:c0:
00:5e:a0:ca:1a:24:5c:2a:a0:a5:51:aa:bc:90:fa:9e:2a:82:
78:07:b8:81:9f:b4:ed:0d:a2:89:f2:02:c8:c2:d8:90:4d:f9:
7f:6c:17:ed:3d:99:f8:f8:4c:56:a0:8c:65:8e:d8:1c:55:10:
8d:b4:13:de:a4:e0:00:53:c4:f6:2c:9b:34:3e:c7:34:6f:6d:
bb:36:21:c7:58:ce:ed:5a:ec:a7:83:95:7c:56:bc:74:7a:36:
62:19:81:2b:05:57:46:24:0d:ed:6a:60:39:45:f6:53:13:1a:
d5:77:27:ca:0f:82:cf:41:35:c7:ef:5b:07:4e:a3:22:84:d9:
84:da:e7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:52:39 2026 by rpki-client