Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier: nAAzdlMPeFdAfLRrzTFvUF0E4luDvLVBKGVMcrHknBQ=
Subject key identifier: 3B:21:30:E0:43:A3:8C:18:7E:70:C9:E2:F0:12:7A:91:23:1C:01:98
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial: 019D386581D66BF0E825A7162F43DEE9FEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number: 16AC
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: hNRnRutcSkPgureD/qx13VreANEtaN/4jKfeUpQbwL0=)
2: JXyToVHzoKcPgiftey3VODfKzHA.roa (hash: hh+ZXLITA+1er8CwLKQe1+Z8gZePfKgzblszCECG/4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:81:d6:6b:f0:e8:25:a7:16:2f:43:de:e9:fe:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=3b2130e043a38c187e70c9e2f0127a91231c0198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:48:b6:49:80:95:f6:ed:fd:5b:a3:1d:79:
56:93:3f:ef:37:ac:78:9c:21:ff:80:77:b1:63:21:
10:6f:c9:5c:9c:f7:09:ba:8e:30:58:72:66:c1:8c:
3b:f2:4b:9b:12:40:b1:4c:c1:84:82:1e:92:53:5e:
f6:fc:b6:9f:20:7b:5f:a1:af:65:12:f4:8d:6c:c2:
98:a8:6f:4b:9f:17:53:8c:f3:66:bd:15:df:79:09:
d7:d1:d2:b6:b2:87:d9:2a:9c:c6:39:ae:02:c0:c9:
75:24:11:fe:1c:a8:f6:45:36:e3:0e:75:98:0b:e1:
7f:90:69:f3:28:d0:97:02:76:1a:79:62:33:26:e8:
b2:1f:b7:0f:b3:74:1d:97:bd:da:28:34:7b:f8:9f:
45:0f:69:a0:60:06:af:18:42:62:3b:e9:a3:ca:a3:
ac:20:d4:80:44:c7:a3:4b:c9:64:a0:d8:cd:16:59:
7d:22:74:90:61:34:fb:c4:8c:a4:5e:80:85:48:6b:
85:fb:74:34:96:cb:01:6d:ed:06:3b:ed:42:2e:7a:
c0:45:c7:ee:00:0a:b6:09:70:c6:a4:45:e3:b1:7f:
40:af:7f:01:7b:a2:d0:fa:5d:2a:1a:58:e7:6c:ae:
2c:87:b8:82:c5:42:6b:52:e4:43:bd:bd:f6:65:22:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:30:E0:43:A3:8C:18:7E:70:C9:E2:F0:12:7A:91:23:1C:01:98
X509v3 Authority Key Identifier:
keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e4:e7:bd:17:af:a4:dd:56:22:fe:db:e3:3c:4a:02:a8:a1:
3c:71:2a:2a:e4:29:ce:2e:21:b8:85:63:ad:67:63:76:9d:6f:
33:a0:3d:8c:2e:a5:66:e2:23:dd:d0:d5:3f:2e:56:d0:2f:18:
52:e5:30:6e:c9:5c:ec:31:d6:c4:f0:c7:ac:c1:50:fd:c3:de:
8a:98:22:ba:ec:41:1a:00:f5:ea:17:8b:76:49:1d:e7:67:16:
34:25:97:5c:86:5d:1d:db:6c:2d:92:1b:ff:1e:9f:43:e4:f9:
50:3a:a5:bf:bd:9a:2e:86:09:e9:e6:f7:90:30:9f:a1:90:07:
81:ca:d9:d9:2e:ac:66:14:86:be:af:5d:3d:ec:7f:08:8d:c3:
c1:db:d6:3a:80:eb:49:dd:e2:97:79:44:8e:2e:86:ad:32:72:
f2:4e:8e:f8:13:94:48:61:f5:2e:48:fd:e2:32:58:5d:1d:12:
82:30:ba:53:27:8c:03:bc:39:4d:d9:20:b6:14:a2:b6:32:80:
42:55:a7:3f:4f:90:70:a0:0b:45:37:72:e3:5f:dc:c5:71:7f:
c4:01:bb:7f:09:8e:2c:72:98:5e:cf:e6:a0:bf:c7:18:25:18:
23:7c:0f:b2:69:c7:bb:bd:16:e9:b7:d5:a8:7c:7f:5e:68:46:
d4:4b:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:27 2026 by rpki-client