Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: 3Y/i2SVwCN5N5p0LfMHxvnJyfhC6z1ifTbA77YwgxK4=
Subject key identifier: 2D:C5:7D:8F:EB:0E:5A:F1:6F:C5:C2:C5:17:BC:06:9B:65:9E:C1:D7
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019CE4B5819184B2CDE4359F056A2CBFBB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09A1
Signing time: Fri 13 Mar 2026 01:00:26 +0000
Manifest this update: Fri 13 Mar 2026 01:00:26 +0000
Manifest next update: Sat 14 Mar 2026 01:00:26 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 5SVFg3Ema/2MRh6fQSuLyyiRJ7GBrEbzWigQlbpMGy8=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:81:91:84:b2:cd:e4:35:9f:05:6a:2c:bf:bb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 13 01:00:26 2026 GMT
Not After : Mar 14 01:00:26 2026 GMT
Subject: CN=2dc57d8feb0e5af16fc5c2c517bc069b659ec1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:c7:17:88:af:21:0b:93:60:af:92:3c:b7:
c4:02:f8:d4:0f:dc:fe:e1:b6:d5:8f:26:98:3a:42:
e2:ce:2e:11:f2:83:89:e3:39:8a:cc:6b:22:d7:10:
2c:ab:08:b9:fe:80:ed:a1:e6:8c:09:34:38:a1:da:
62:a7:3d:59:0e:af:5f:52:db:d3:49:49:14:bd:33:
f5:b1:a8:a7:ac:be:c0:85:4a:a6:f8:d0:f3:29:a4:
e2:bc:b1:04:4b:d5:ff:cc:2d:0a:a6:2b:34:84:56:
34:c5:cd:d6:2e:22:2e:2a:cf:a3:39:95:5d:b0:10:
8a:86:5c:49:e4:69:37:f1:e8:eb:dc:03:35:91:fa:
b8:da:f9:fb:b4:f5:7b:30:16:a8:80:02:0c:cb:f2:
2d:99:73:ba:98:6f:41:ab:64:08:24:2c:2a:74:81:
ac:56:c1:48:2c:36:7d:17:88:8f:47:e9:99:b3:fe:
e6:91:43:bc:2e:0c:e9:43:e1:0a:74:bd:af:f3:81:
5d:90:d2:88:5f:0e:d2:50:8e:d1:2e:53:87:cb:2d:
fe:8f:49:08:3e:54:61:76:ed:1b:61:a2:db:b0:20:
88:ac:3e:23:8c:f1:67:e1:3d:f2:e8:fe:63:78:f2:
11:1f:a3:09:2f:a9:8f:a2:46:b4:3f:07:01:90:e8:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:7D:8F:EB:0E:5A:F1:6F:C5:C2:C5:17:BC:06:9B:65:9E:C1:D7
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f7:e0:36:54:07:1a:6f:09:61:07:7c:7d:4d:78:25:d1:6c:
0e:0f:6a:30:4e:9d:8b:c1:3c:28:28:36:58:93:15:2b:2b:3c:
13:d7:5b:cd:7c:79:ed:a0:c6:ec:9a:2e:02:52:9a:29:be:3d:
8d:c3:7d:87:7c:41:12:5b:8b:95:a6:47:d9:97:ff:5f:a9:44:
68:2b:5f:2f:02:aa:4b:f9:df:ef:6a:88:73:c2:61:ee:de:2b:
63:80:07:cc:e9:8c:5d:9b:d1:75:c6:8f:28:eb:99:77:7a:3f:
52:ac:1c:b3:64:50:a8:72:67:1f:bd:af:27:72:43:dd:d1:9d:
b6:ba:9c:48:79:64:1b:ac:47:e1:2f:16:06:8b:9b:22:6c:f1:
fc:c3:44:c0:3f:05:9e:66:77:de:9e:21:d9:9f:6a:6b:76:ec:
5e:8a:33:7b:04:a2:8a:30:7e:ba:cb:0e:8c:39:89:d9:42:00:
d1:a9:73:34:7f:69:c1:b9:e4:1b:bd:e3:3b:6d:8e:29:e0:a0:
04:a6:ad:d8:ec:c9:fd:70:ef:51:dc:b1:b7:d2:3a:a8:97:b4:
a7:ba:95:e2:ce:3c:d8:ba:46:c7:9d:47:bc:99:32:28:11:70:
fa:c9:2e:44:12:ed:e4:65:f1:85:d4:0f:57:06:fd:48:7d:ce:
ae:d3:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:51 2026 by rpki-client