Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: QIw7/bs7ZuR/uPj81aN5Hg130MA0WQOAt/xgNrOU0Pg=
Subject key identifier: 09:BC:D6:7D:E9:C4:E6:F0:1E:BC:D9:A3:CF:F6:B5:17:64:91:35:09
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019CF617D777A7347154D1931A367C4D021E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09AA
Signing time: Mon 16 Mar 2026 10:01:23 +0000
Manifest this update: Mon 16 Mar 2026 10:01:23 +0000
Manifest next update: Tue 17 Mar 2026 10:01:23 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: e7ZN5HCmI4Zs1jDD6Ht1AfKSSMSxBjRPgxDrMe/l/ow=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:17:d7:77:a7:34:71:54:d1:93:1a:36:7c:4d:02:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 16 10:01:23 2026 GMT
Not After : Mar 17 10:01:23 2026 GMT
Subject: CN=09bcd67de9c4e6f01ebcd9a3cff6b51764913509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:3c:c6:d1:56:e8:1e:3f:51:b1:38:66:5a:
33:9a:c8:ce:3f:d8:81:0c:61:18:6d:3b:d8:f7:93:
7e:e3:15:74:bb:9c:3f:c3:1d:fd:07:ec:0c:ea:55:
86:12:b1:0f:89:49:f7:d2:8d:47:66:5b:65:8f:d3:
b1:58:2c:e6:b1:f2:67:09:32:44:30:22:94:f8:2e:
31:81:10:e8:f1:14:07:a8:df:e2:b5:77:3d:aa:4c:
ec:b7:6f:a0:8c:08:8e:52:c5:88:96:a2:7f:85:87:
03:bf:a2:d4:6a:b4:05:a5:6e:ab:93:92:e1:02:6d:
b9:dc:b1:fe:72:b0:e0:1d:97:13:66:30:51:12:0f:
a0:19:d8:cb:a4:8a:4d:4c:4c:00:91:3c:93:cd:9c:
1f:d1:3f:af:be:61:f4:f7:3d:9e:ca:1a:f4:dc:14:
ba:fe:dc:f0:fa:b1:1c:1f:2f:50:a1:2d:ef:c6:8c:
68:08:e7:29:04:b7:e7:c0:d0:9d:48:08:73:98:f6:
ee:89:90:3f:22:04:9f:25:56:ab:f2:66:71:14:f2:
86:fd:2e:ed:4a:a3:80:27:5a:ad:b2:83:34:71:67:
ad:f6:9d:51:2a:17:eb:54:8d:e7:32:75:fc:99:5d:
91:f5:5f:67:38:09:81:16:ec:16:56:78:11:83:81:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:D6:7D:E9:C4:E6:F0:1E:BC:D9:A3:CF:F6:B5:17:64:91:35:09
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:15:63:e0:fa:42:35:41:df:a1:ff:14:6b:a5:e3:79:05:ec:
ef:fc:6d:31:0b:4f:c7:67:c8:cb:27:3d:ac:d7:db:74:8f:be:
3a:eb:94:1f:c7:92:50:c0:bf:79:c9:93:10:dd:ba:c2:f7:ae:
5e:a4:8a:5c:b5:c3:31:85:4a:da:5e:a1:f0:74:d6:3a:ce:3b:
92:92:89:32:a2:9d:39:ef:be:03:47:e5:63:37:29:d8:13:3d:
65:5e:78:b1:2d:c8:62:60:37:1b:5a:d8:16:2f:21:2f:43:bb:
8a:8d:61:6e:15:93:26:28:c7:26:48:16:41:1f:4b:37:2a:c6:
83:fe:ca:88:cb:4e:2c:06:a7:6b:95:8e:12:07:87:87:63:3e:
e7:f5:5b:c0:67:b8:ca:66:bf:1b:1b:64:ac:85:9f:29:77:7c:
a5:65:e4:3f:75:76:20:23:fb:28:2f:c0:0b:2b:9b:90:97:b4:
27:83:aa:59:d5:23:70:d9:7f:de:ea:b1:95:7f:5e:82:5f:11:
60:5d:b1:fc:14:81:e5:6d:4e:11:23:36:89:0d:ad:59:77:93:
4b:23:5e:74:b8:e2:dd:77:e2:e5:0d:26:c8:c6:46:22:49:4e:
a2:b7:8e:78:32:0e:9a:0e:26:b6:4c:97:2d:75:15:22:99:d8:
88:63:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 17:01:10 2026 by rpki-client