Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier: rK3xr2V9tCHAC2AQezuxRGaLiIstYKqgBgbtLtomd/Y=
Subject key identifier: 5E:6A:BA:18:65:98:A3:1E:03:B2:C4:CD:DA:B2:CD:59:88:89:70:A6
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 019D3909BD9D1D48C15B8BFE83F90CCA5E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: 19Cd8BKfy+zkZDf4myhEvEG+Xi8ja0G8Vzind87chb0=)
2: Kh2ibrrlvAJA0BPytF3vpct5nG8.roa (hash: 9S+B5OPrOVNMPF41i1ZV7e9GhndsXm9HajUBATSWGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:9d:1d:48:c1:5b:8b:fe:83:f9:0c:ca:5e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=5e6aba186598a31e03b2c4cddab2cd59888970a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:7f:dc:80:a2:5b:a8:67:11:17:2e:65:8e:
42:36:2c:e6:1d:f9:ae:93:b2:57:a9:ad:e9:a5:ce:
1f:ad:62:be:69:9d:f9:87:7c:6c:3b:b6:34:03:4e:
a6:b7:6d:da:35:e7:5b:4a:be:df:45:0e:e6:81:fd:
d6:f7:d1:e0:3d:3b:1a:0e:1f:18:9e:d8:4c:4b:ee:
e9:23:b6:17:01:fc:57:65:94:51:b4:9c:db:68:4b:
bc:f5:29:95:e3:31:b7:5e:56:1d:b6:66:d5:1c:5e:
d7:47:c9:db:9b:b9:bb:95:3a:fc:8a:37:d7:af:52:
22:b0:41:f7:06:09:cd:a4:f2:92:59:b5:cd:40:d8:
6b:39:96:1b:9c:25:78:61:12:f5:cf:cc:97:20:7f:
97:c2:2b:81:ab:c8:c4:05:28:2c:a0:e8:13:90:6c:
1c:8a:85:ef:2a:e3:55:ad:81:28:0b:9f:b3:a9:6d:
23:a7:4e:3b:9a:0e:ba:ad:3b:d7:1b:2a:5a:e3:61:
e1:8f:46:88:ad:cc:5a:74:49:64:d0:76:9e:4c:5e:
4a:1a:d8:fa:0d:60:15:36:7f:e4:0f:5b:12:92:07:
db:93:5b:57:82:d5:5b:4b:7b:3f:a2:9e:10:ab:7a:
18:24:d3:4a:1f:33:8c:51:86:78:82:18:6e:37:b9:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:BA:18:65:98:A3:1E:03:B2:C4:CD:DA:B2:CD:59:88:89:70:A6
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2f:2f:41:75:bc:5b:cd:cd:9b:c0:23:7c:aa:44:a1:d3:7e:
19:86:d0:5b:13:f7:09:69:03:b6:d8:30:f2:1f:4f:46:96:16:
57:0c:67:67:5f:b9:e3:1a:7a:e8:3e:2d:b2:ce:37:0a:2c:9b:
0f:b0:b1:90:42:e8:c7:d6:f5:31:02:52:f2:99:fc:ed:c6:f8:
45:f4:36:34:3b:59:b4:ba:a9:f1:aa:cb:c1:03:d8:fd:ab:4e:
81:25:e0:f9:32:06:a0:23:9f:42:26:80:63:b5:c0:37:cf:7d:
f1:3e:9d:91:e8:2b:5a:55:ad:f9:bd:9e:5a:48:41:35:eb:42:
b1:9f:ea:65:8f:4c:34:e8:ce:f2:c0:26:d0:b7:ae:a2:b0:bc:
6d:d3:78:88:46:47:94:79:1f:8b:5e:23:34:7b:c8:ed:78:18:
cb:f0:9b:f2:55:d0:9f:f1:35:3a:92:35:ba:91:14:45:ca:5c:
39:8c:ed:72:d9:af:1a:0c:a8:28:ed:f8:c3:dd:e6:e6:76:1d:
95:90:49:79:42:18:5e:3a:3c:71:42:49:1e:95:33:4e:f9:24:
96:a9:37:e6:a1:7c:e0:38:cc:8c:13:d4:bc:fd:ae:60:62:5e:
bf:b1:a2:32:cd:12:58:29:8a:57:4b:aa:c9:2e:04:8b:ef:93:
ca:6a:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:26 2026 by rpki-client