Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: wpIgYOnSOiqmFhUPx24lldySBkWTFo7ijTaIkYBmX3c=
Subject key identifier: 83:8B:F3:3C:38:E0:BC:FD:02:62:C5:8A:BC:79:13:53:95:DF:F8:C2
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 019D31BEDE5103A66EB05B9176182087F445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 181E
Signing time: Sat 28 Mar 2026 00:01:25 +0000
Manifest this update: Sat 28 Mar 2026 00:01:25 +0000
Manifest next update: Sun 29 Mar 2026 00:01:25 +0000
Files and hashes: 1: E1_qOVvH8nrOWTOLw8OYuG7I7l4.roa (hash: pIFcjaUirrK025T2zVEMwQTVwHipFJl67DIxSrVxIxo=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: XFD3ngjsxZRk80LrKnTyC8Q8bRLQhN3Qy35jiIjkiD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:de:51:03:a6:6e:b0:5b:91:76:18:20:87:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Mar 28 00:01:25 2026 GMT
Not After : Mar 29 00:01:25 2026 GMT
Subject: CN=838bf33c38e0bcfd0262c58abc79135395dff8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:9e:bd:b4:34:8b:80:fb:1e:e4:c7:2f:1f:
fd:dd:da:92:c6:4c:41:03:2f:75:f5:cc:02:14:e0:
86:af:a5:87:be:50:81:66:37:cc:83:dc:b5:d5:92:
69:d6:a5:a7:75:72:e2:b5:8c:f8:17:55:70:72:03:
a0:f0:2d:0d:9a:d2:af:88:51:78:74:e8:e7:a1:d0:
5c:a1:48:aa:e7:2c:55:42:fd:76:d4:d3:51:e6:08:
bf:d1:3b:32:1b:e1:71:b5:21:21:ad:6d:c9:4b:79:
1d:fe:54:05:ad:20:a2:0c:f1:2d:5b:d7:ec:06:92:
15:d3:8a:47:99:16:3c:a4:47:3d:36:58:00:d5:1f:
0a:f4:22:d5:7c:8b:95:89:eb:01:a6:3e:57:ac:05:
64:19:4a:c4:ea:d9:27:8b:0c:0f:5d:fc:ad:87:c4:
54:cf:a9:08:78:e8:e8:8a:6d:4f:14:00:ae:f0:03:
8c:f2:65:c9:90:e7:f0:03:0f:62:a6:9a:df:c3:2b:
0a:92:ae:d7:b9:0f:31:91:0b:ed:6e:b4:51:dd:4a:
09:58:c1:0c:1f:db:8b:bf:22:26:78:96:42:15:80:
55:4f:28:fa:bc:32:91:20:26:11:0c:12:00:2b:07:
dc:7f:02:40:92:71:e7:f7:4d:b2:1e:db:e8:11:42:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:F3:3C:38:E0:BC:FD:02:62:C5:8A:BC:79:13:53:95:DF:F8:C2
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c9:d3:60:af:d3:80:24:2a:cc:5f:9e:17:de:00:1a:be:3a:
5c:70:c9:e7:7c:66:bb:c2:8f:9d:3b:87:d3:3f:a2:d7:f1:09:
74:a1:0d:54:47:1b:d8:f3:6c:05:1d:95:9a:8e:76:f3:18:3e:
f5:41:27:ba:4d:25:36:02:dd:32:e2:27:24:b9:88:c7:08:3d:
18:10:3b:3c:1f:53:47:db:28:cf:c0:4c:eb:bc:8f:99:20:d0:
97:7c:e8:17:78:55:a4:df:71:da:33:91:a3:45:03:69:fb:5a:
1b:ed:04:75:b4:d3:53:b9:6d:c2:21:65:74:dc:b3:33:5e:4d:
fd:80:86:ef:1f:6c:64:44:db:25:e2:97:d3:08:68:29:20:7d:
5c:41:9a:ca:2c:41:0e:26:73:43:da:61:3d:82:0a:97:ca:fc:
5a:73:da:0b:5d:0f:86:14:78:d0:e6:22:5a:28:fe:5f:61:32:
a9:fd:45:8f:8d:55:b8:87:28:1a:29:4c:7c:0b:0b:5c:fa:2f:
b2:be:52:75:a2:bd:e3:87:8c:4d:43:17:55:9d:e1:15:56:72:
b2:36:d2:27:74:2f:0c:b9:0e:bc:23:2f:99:2b:6d:68:f0:a0:
eb:c5:d0:96:dc:aa:ef:1b:22:44:5d:38:f9:b4:97:2b:63:ea:
5a:54:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:07 2026 by rpki-client