Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: jbU4wVbBchxM6ux0oettVd826INZBwQGVOD5Isbf3vo=
Subject key identifier: 8F:29:23:AD:54:82:BD:DE:47:F7:07:24:21:B5:54:BE:9E:36:DF:9D
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019D492234D51D91BCFA5AFF621963D19641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09D5
Signing time: Wed 01 Apr 2026 13:01:11 +0000
Manifest this update: Wed 01 Apr 2026 13:01:11 +0000
Manifest next update: Thu 02 Apr 2026 13:01:11 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 2Xd3cu7hHLPxryUT1Wz0YzUIOChpssVRuoRClaIKDCc=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:22:34:d5:1d:91:bc:fa:5a:ff:62:19:63:d1:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Apr 1 13:01:11 2026 GMT
Not After : Apr 2 13:01:11 2026 GMT
Subject: CN=8f2923ad5482bdde47f7072421b554be9e36df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:98:be:80:30:ec:65:89:d4:f7:a6:53:dd:
57:0d:d9:e0:ed:59:b2:2e:1c:96:f1:05:a0:0b:68:
15:bc:2b:a6:d2:cc:4e:3c:32:70:97:26:a3:52:3b:
d2:e7:c7:1c:91:a2:81:c8:25:ab:dd:37:a5:19:64:
93:a5:e6:bd:90:a9:fb:07:04:f7:12:e5:a7:0f:21:
d8:e6:77:50:57:ca:e4:14:07:af:90:bb:07:05:41:
30:9c:48:a1:21:89:7e:56:3a:72:1a:b4:cf:05:aa:
f8:82:eb:30:e0:51:ee:a1:3f:7b:7f:d1:36:6f:61:
04:03:a1:e7:ac:3b:50:27:d4:cc:15:d8:b5:84:c1:
51:67:d3:9d:4d:ca:11:bc:fc:d4:a7:9c:c4:09:f5:
a2:86:66:a4:3d:89:f9:3e:4b:d9:b9:5c:57:c8:84:
d8:80:d2:91:6f:fb:d7:02:05:f2:30:bd:f2:39:1d:
d5:ac:55:37:b0:73:25:8c:c9:ac:7d:54:01:02:28:
48:cf:a5:55:97:d7:72:b6:51:1a:28:83:c5:da:89:
5e:27:ca:03:16:60:bb:ea:59:ff:02:ca:cd:0b:fc:
6c:41:6a:10:78:11:de:4d:51:b1:bc:a5:8a:fc:b1:
10:0c:ab:3c:99:c0:9b:fa:4b:06:64:2a:74:04:ae:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:23:AD:54:82:BD:DE:47:F7:07:24:21:B5:54:BE:9E:36:DF:9D
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:55:89:ce:ca:78:63:ad:06:47:af:e4:e9:70:4d:95:cd:
43:d8:4d:69:0c:d6:01:19:15:a6:59:8d:50:e0:7b:ca:6d:35:
ff:15:8c:2f:da:4b:2e:bf:5b:ee:75:c8:e2:6c:28:62:49:97:
0e:ae:2a:00:95:96:df:2f:ae:fe:eb:2a:94:46:ab:d1:94:fd:
04:21:2f:34:95:6b:10:fd:f6:9b:53:a8:90:f1:4e:82:f3:8c:
cc:10:97:18:db:21:26:c2:e2:7e:18:84:25:25:fc:0b:42:43:
43:c6:4b:6a:46:89:be:62:c1:5f:52:cf:67:d5:1e:59:51:d9:
a1:be:a9:7d:f3:7e:80:91:fb:ea:45:c8:d3:1a:16:6b:10:e5:
7a:c8:3a:5e:2c:1d:80:1a:d7:7b:d7:d5:47:6e:e6:d2:31:85:
02:9f:f5:67:0c:80:d6:0f:70:4d:b4:b2:5d:16:ce:66:95:d5:
95:7f:f6:c2:1d:8b:9e:40:6a:ae:90:4c:f8:58:cd:0c:bb:ac:
cc:18:42:75:2b:16:a0:60:9d:96:f3:54:b9:88:61:c1:4a:45:
25:d4:06:5a:40:6b:d7:62:19:31:c5:eb:ff:17:c3:f8:b7:c8:
b5:34:d3:41:a4:3a:5c:ed:c4:29:09:17:09:5d:98:0a:d9:d0:
41:94:fb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1JIjTVHZG8+lr/Yhlj0ZZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwNDAxMTMwMTExWhcNMjYwNDAyMTMwMTExWjAzMTEwLwYDVQQD
Eyg4ZjI5MjNhZDU0ODJiZGRlNDdmNzA3MjQyMWI1NTRiZTllMzZkZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidCYvoAw7GWJ1PemU91XDdng7Vmy
LhyW8QWgC2gVvCum0sxOPDJwlyajUjvS58cckaKByCWr3TelGWSTpea9kKn7BwT3
EuWnDyHY5ndQV8rkFAevkLsHBUEwnEihIYl+VjpyGrTPBar4gusw4FHuoT97f9E2
b2EEA6HnrDtQJ9TMFdi1hMFRZ9OdTcoRvPzUp5zECfWihmakPYn5PkvZuVxXyITY
gNKRb/vXAgXyML3yOR3VrFU3sHMljMmsfVQBAihIz6VVl9dytlEaKIPF2oleJ8oD
FmC76ln/AsrNC/xsQWoQeBHeTVGxvKWK/LEQDKs8mcCb+ksGZCp0BK7UdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8pI61Ugr3eR/cHJCG1VL6eNt+dMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtZVic7K
eGOtBkev5OlwTZXNQ9hNaQzWARkVplmNUOB7ym01/xWML9pLLr9b7nXI4mwoYkmX
Dq4qAJWW3y+u/usqlEar0ZT9BCEvNJVrEP32m1OokPFOgvOMzBCXGNshJsLifhiE
JSX8C0JDQ8ZLakaJvmLBX1LPZ9UeWVHZob6pffN+gJH76kXI0xoWaxDlesg6Xiwd
gBrXe9fVR27m0jGFAp/1ZwyA1g9wTbSyXRbOZpXVlX/2wh2LnkBqrpBM+FjNDLus
zBhCdSsWoGCdlvNUuYhhwUpFJdQGWkBr12IZMcXr/xfD+LfItTTTQaQ6XO3EKQkX
CV2YCtnQQZT7Kg==
-----END CERTIFICATE-----
Generated at Wed Apr 1 22:07:44 2026 by rpki-client