Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: GKNCHCcOVB1p0zJUqW3zd3U0GvKdZzCzvW6NhjLxVTE=
Subject key identifier: F4:AD:DB:49:09:07:6A:35:C9:ED:CD:51:36:31:31:3C:3B:93:83:68
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019DA6B06B06EECA87705F6E3244FE9B1EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 07F1
Signing time: Sun 19 Apr 2026 17:01:12 +0000
Manifest this update: Sun 19 Apr 2026 17:01:12 +0000
Manifest next update: Mon 20 Apr 2026 17:01:12 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: SmjQuYCnUZCWjE/rwxe05DjBnDW864rrX+eGBJRXe4Y=)
2: FlBj5E86mMaezxnELPbZi5fwTQY.roa (hash: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=)
3: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:b0:6b:06:ee:ca:87:70:5f:6e:32:44:fe:9b:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Apr 19 17:01:12 2026 GMT
Not After : Apr 20 17:01:12 2026 GMT
Subject: CN=f4addb4909076a35c9edcd513631313c3b938368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:d7:fe:20:d6:9b:ff:79:89:57:f7:4b:ba:
37:7d:af:42:38:4b:0e:f7:a3:c9:87:a6:a4:e1:ca:
88:bd:f4:84:e6:38:12:32:bb:4b:e6:72:dd:09:59:
1e:0d:99:ef:ee:c2:5d:22:e9:fe:b0:28:84:4f:08:
61:c0:11:b6:ab:5b:27:c8:94:57:d4:b5:1a:39:9b:
87:e2:04:81:a3:b4:b7:4a:b1:85:6b:dd:8f:ed:68:
6d:61:bc:0f:9c:e1:2a:b3:c4:c0:7a:c9:58:63:c8:
a5:3e:6b:d0:62:23:f5:2f:08:c9:a4:24:18:87:db:
e5:e4:fd:32:f0:f3:6d:1f:32:75:d9:ac:98:41:04:
23:ae:a9:0b:97:9e:58:8b:56:fd:75:af:0d:e8:a5:
ac:bc:0d:47:6c:94:b0:58:cb:67:b2:ca:11:1f:bf:
d0:fb:cf:62:5a:e3:a4:db:4d:cb:12:a3:f5:3f:a7:
b3:c5:69:f6:d2:70:b2:fc:05:ab:63:56:aa:86:5c:
ac:c3:1e:5c:2e:da:a1:2c:71:91:35:67:07:ea:2d:
6f:d9:8c:27:ed:49:4d:f7:f2:78:90:07:c4:12:64:
68:72:93:27:98:3f:12:92:04:5f:e5:6a:3f:5e:7b:
00:fd:cb:c7:d9:55:cc:48:49:82:96:26:5a:51:ae:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:DB:49:09:07:6A:35:C9:ED:CD:51:36:31:31:3C:3B:93:83:68
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:66:39:1c:a4:28:1d:c1:34:b1:da:c5:ce:fc:82:2e:1e:1f:
57:a8:34:21:59:35:31:c1:c7:7f:e9:71:69:07:cb:b3:49:61:
3b:7f:68:fe:ee:95:f2:92:a4:2e:99:a8:59:85:89:0b:dd:3c:
56:ce:40:d9:fe:26:e3:86:1f:b4:53:5d:7c:db:7c:a8:ff:e6:
b8:34:0c:52:9d:5c:6a:64:11:16:ab:7e:88:ed:07:1a:3b:32:
a3:12:d7:2c:34:aa:46:27:13:84:cd:cb:6f:26:ef:d1:67:f7:
86:1c:57:e4:81:54:bd:b5:77:d9:f2:8d:16:05:87:6a:3c:c9:
36:b0:96:30:f9:13:0d:08:0d:0e:99:0f:b1:4f:46:70:54:5d:
a6:6d:41:0e:7e:b4:d1:86:f5:eb:de:29:b7:30:dd:8b:7b:60:
1e:e0:e0:d0:d9:de:bf:41:b5:c9:79:9f:90:52:75:68:72:a1:
5d:71:f5:56:60:fd:8b:f7:72:e9:b2:2e:a7:42:cd:2f:ec:cd:
b2:96:a2:0e:0d:b8:3b:e4:a3:e3:b3:a6:83:72:0d:97:04:99:
1f:90:50:7a:ea:57:74:5d:d8:5d:77:ed:d6:b2:f8:a8:16:37:
9a:43:ab:c2:32:d0:a6:2c:c0:d8:c2:2e:95:62:42:d9:f5:84:
6c:c6:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:21 2026 by rpki-client