Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File: E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier: zLsLKB+FOBmneYOmNAC4B/TPBXphWgvVnIgJWX0/sGs=
Subject key identifier: FB:F5:40:0F:6E:57:4E:2D:82:2A:3B:A9:E6:0E:A0:82:6F:61:4A:8F
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 019D389C0F3F7F1B427B622BDF56E3B54FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number: 17D3
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: 2x69ExAc7AIGWsepVnFwvxym1IMJFhveXsT/TCq4ti8=)
2: vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa (hash: FU6gWknx4r9SNx85ldpTBO/Ox8NOWmKPGxQLrSXC4Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0f:3f:7f:1b:42:7b:62:2b:df:56:e3:b5:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=fbf5400f6e574e2d822a3ba9e60ea0826f614a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:37:45:a1:87:b7:39:18:43:bd:bf:3b:70:
f5:84:bd:d5:68:90:01:d1:b7:dc:bc:ec:ea:86:b3:
94:f6:7e:aa:c0:09:9f:fb:11:fd:ee:f1:cf:ec:6d:
3f:47:dc:5c:0f:75:a3:45:45:39:a7:f8:ab:c1:f9:
c3:45:bf:3f:52:57:a2:fa:17:ae:c7:32:6a:ee:fb:
b1:4b:30:df:19:e4:ae:17:3a:98:ba:33:28:08:fe:
40:a5:9d:39:e3:91:75:34:0e:36:04:7f:5e:59:50:
22:ad:25:c3:3f:40:80:40:07:64:28:37:9e:63:b5:
cf:50:c3:ee:47:6e:3c:e7:09:06:8a:c6:54:d5:ca:
29:ba:af:4d:a9:c7:6a:5a:27:a9:fa:a4:8b:b7:40:
c0:d9:51:ec:d2:82:79:ca:ed:f2:be:00:91:dd:9a:
10:00:72:9d:9f:43:93:d6:ae:e6:51:5a:df:aa:6b:
4f:65:ba:cb:e7:1d:49:d1:0e:a3:ce:bf:81:64:ba:
09:58:6f:43:b3:90:42:72:6d:bb:ac:ba:80:d3:d2:
bf:2f:7d:de:c9:2e:02:d6:cc:b7:50:02:db:3e:b6:
61:4c:53:c5:23:b8:0a:58:4d:6e:94:3a:61:13:d9:
85:12:dd:c6:6f:68:58:ff:bc:84:aa:e8:32:b1:e0:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:40:0F:6E:57:4E:2D:82:2A:3B:A9:E6:0E:A0:82:6F:61:4A:8F
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:ad:65:96:7d:f2:4a:88:51:59:54:c4:03:91:8a:9c:8b:
a1:26:2c:18:dc:db:37:16:cc:8a:68:dc:53:21:e1:28:00:45:
36:f9:1f:d7:e0:fc:50:10:ed:cd:39:fb:bd:60:b8:bd:92:9e:
fa:9e:3f:9e:2b:a5:f7:f0:54:f3:3a:cc:b5:95:a8:4c:f7:bb:
6f:64:5e:7d:5e:bf:c0:7a:5f:da:1a:e6:7b:26:1f:bb:c6:8f:
b9:8d:ac:f7:8a:7c:c4:b5:2c:af:f2:50:08:c3:14:58:24:47:
83:6d:cd:94:9b:f4:81:be:0e:dc:52:6a:a1:36:ad:c6:93:a2:
76:b5:b7:69:d1:0f:86:5c:fe:31:5e:3d:56:e7:75:e9:d0:12:
4c:d2:c8:6c:aa:3b:9b:a7:cd:5f:84:c3:fb:96:8f:e6:f9:9c:
70:d7:89:c9:1f:e7:0b:ae:18:8f:76:d6:5b:a9:6e:52:94:6a:
ce:c4:58:2c:cb:ea:37:eb:a2:f1:f3:38:1e:38:f9:2c:9c:a6:
9f:9a:bd:99:a4:35:80:9d:80:99:63:8d:c6:09:69:13:41:16:
2c:81:08:6f:2b:fb:9a:08:56:45:31:35:e2:0f:62:47:9c:6b:
47:e3:a9:d9:11:20:f7:f6:72:e3:c1:60:ba:a8:d6:b0:a6:94:
1c:07:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client