Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: zD5Ly737lfhBJ0kzOhXYQgTvaoulo/OASAQ0BCSSuKQ=
Subject key identifier: 1E:B3:75:80:3A:FA:69:1A:06:CD:C0:D1:94:BB:F3:D9:05:96:B7:C6
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 01A13D818BF0E8BE05B35E824F9BC6AAF865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 140D
Signing time: Thu 15 Oct 2026 03:01:02 +0000
Manifest this update: Thu 15 Oct 2026 03:01:02 +0000
Manifest next update: Fri 16 Oct 2026 03:01:02 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: xgA0V6gcRoD9hNdNivLbNJCpr4gBiLB4Gx8Db+ld/zw=)
2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:8b:f0:e8:be:05:b3:5e:82:4f:9b:c6:aa:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Oct 15 03:01:02 2026 GMT
Not After : Oct 16 03:01:02 2026 GMT
Subject: CN=1eb375803afa691a06cdc0d194bbf3d90596b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:9e:da:7b:a3:74:ad:f8:66:cb:c7:0c:07:
1a:b8:b1:02:b5:90:80:00:d5:27:32:eb:fe:f7:de:
69:48:d8:eb:7b:55:44:d2:aa:d0:8c:60:88:6f:1c:
f7:ee:bd:dd:c1:38:d8:23:15:e3:af:89:dc:cf:78:
cb:bd:0a:ac:e8:55:40:1a:39:24:6f:1e:dc:1d:ba:
31:10:fa:ad:1e:af:bc:75:26:40:ba:aa:25:34:a7:
fa:7e:95:1e:01:77:4e:b9:7e:e5:88:a0:d0:b2:c3:
1a:23:b1:c9:5e:a8:e9:7a:d8:56:9f:b4:94:98:40:
c9:90:1d:24:5e:76:41:71:a1:b8:48:bd:47:3f:a7:
23:e9:60:41:8b:64:d1:31:41:57:1e:a9:e9:02:72:
6c:29:f0:d7:8d:28:ef:b9:6c:9b:16:ab:e9:8e:81:
ee:c3:67:b9:5c:2d:71:fb:ad:13:5a:2b:9e:1e:55:
09:63:89:aa:f2:01:3c:a7:3c:71:99:fd:11:3b:55:
f2:92:4f:d9:7a:e9:22:13:66:45:fc:f5:d5:b5:d2:
15:f6:c0:1c:0b:31:83:f3:8d:22:73:ad:44:30:d3:
0a:4f:35:23:9b:91:c4:ea:fc:cb:1b:98:a9:a8:c8:
c1:99:e7:10:47:6d:9b:e4:ae:1f:a3:3e:12:3c:76:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B3:75:80:3A:FA:69:1A:06:CD:C0:D1:94:BB:F3:D9:05:96:B7:C6
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:e2:85:61:08:3b:92:3f:30:50:63:58:a2:7c:39:0e:d4:
69:f9:64:87:ec:f8:a8:cd:14:63:53:33:44:fe:54:98:7b:bb:
93:cc:95:f0:29:b5:a3:ab:4e:5c:67:28:14:0e:35:0d:4a:55:
86:5f:00:85:7a:08:62:88:ce:9a:41:83:45:f0:fd:56:22:df:
ea:7b:c6:13:e6:7b:97:33:35:ac:96:a7:a4:3a:54:aa:e2:5b:
6e:bf:a9:61:be:43:da:5c:26:38:9c:f7:a4:67:18:c7:d3:c2:
e5:57:1e:cd:43:18:7d:ef:29:bd:49:ec:ad:48:5d:b3:fd:cd:
05:31:b8:86:a0:72:0d:00:79:bf:67:73:64:29:30:72:c0:6e:
46:36:e4:f9:c9:be:56:84:e3:9e:01:bd:85:cf:21:d0:b9:86:
3e:a4:95:c0:07:4d:7b:f4:f6:2f:b7:13:0c:65:a8:e4:95:b3:
26:9f:9e:2f:98:0d:5d:1a:23:d9:56:f3:e6:8e:d9:a4:15:fa:
d9:f3:7d:c8:2d:51:ad:c4:f2:5f:cd:5c:f1:ca:49:e5:0c:ef:
84:f7:85:f2:e8:8d:5b:5e:52:05:49:0a:bf:37:c8:65:9a:e4:
68:08:87:e5:95:a2:6d:ad:64:f9:a1:08:13:94:14:5c:de:f0:
6e:92:92:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gYvw6L4Fs16CT5vGqvhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzgzN2Q1ZDE3OTY5ZDJiYzBkNDRlNTYzNGE5NGJmN2Qz
NGU5MGIwHhcNMjYxMDE1MDMwMTAyWhcNMjYxMDE2MDMwMTAyWjAzMTEwLwYDVQQD
EygxZWIzNzU4MDNhZmE2OTFhMDZjZGMwZDE5NGJiZjNkOTA1OTZiN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucie2nujdK34ZsvHDAcauLECtZCA
ANUnMuv+995pSNjre1VE0qrQjGCIbxz37r3dwTjYIxXjr4ncz3jLvQqs6FVAGjkk
bx7cHboxEPqtHq+8dSZAuqolNKf6fpUeAXdOuX7liKDQssMaI7HJXqjpethWn7SU
mEDJkB0kXnZBcaG4SL1HP6cj6WBBi2TRMUFXHqnpAnJsKfDXjSjvuWybFqvpjoHu
w2e5XC1x+60TWiueHlUJY4mq8gE8pzxxmf0RO1Xykk/ZeukiE2ZF/PXVtdIV9sAc
CzGD840ic61EMNMKTzUjm5HE6vzLG5ipqMjBmecQR22b5K4foz4SPHbdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6zdYA6+mkaBs3A0ZS789kFlrfGMB8GA1UdIwQY
MBaAFBN4N9XReWnSvA1E5WNKlL99NOkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAt
NGRiM2YxODhmNWI2LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAtNGRiM2YxODhmNWI2
LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaPihWEI
O5I/MFBjWKJ8OQ7Uaflkh+z4qM0UY1MzRP5UmHu7k8yV8Cm1o6tOXGcoFA41DUpV
hl8AhXoIYojOmkGDRfD9ViLf6nvGE+Z7lzM1rJanpDpUquJbbr+pYb5D2lwmOJz3
pGcYx9PC5VcezUMYfe8pvUnsrUhds/3NBTG4hqByDQB5v2dzZCkwcsBuRjbk+cm+
VoTjngG9hc8h0LmGPqSVwAdNe/T2L7cTDGWo5JWzJp+eL5gNXRoj2Vbz5o7ZpBX6
2fN9yC1RrcTyX81c8cpJ5QzvhPeF8uiNW15SBUkKvzfIZZrkaAiH5ZWiba1k+aEI
E5QUXN7wbpKS8A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:54 2026 by rpki-client