Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: P3qOQha596fbFabD2i4mMafS5bEisCD7YHd/UPKFV20=
Subject key identifier: 5F:24:BA:59:3E:83:19:A4:DE:E9:BD:1F:73:B4:36:55:3D:AA:4F:DD
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019DAD8DA1B5E6BAB9318342971B3AF982A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0A09
Signing time: Tue 21 Apr 2026 01:00:33 +0000
Manifest this update: Tue 21 Apr 2026 01:00:33 +0000
Manifest next update: Wed 22 Apr 2026 01:00:33 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: CfKmODgrnEhSFwwg3cQ20rmhdOv0KXXg2HfjifZ3DKs=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 19:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:8d:a1:b5:e6:ba:b9:31:83:42:97:1b:3a:f9:82:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Apr 21 01:00:33 2026 GMT
Not After : Apr 22 01:00:33 2026 GMT
Subject: CN=5f24ba593e8319a4dee9bd1f73b436553daa4fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:13:d2:3d:28:af:a0:69:36:f4:b3:5a:fa:4e:
60:d1:c7:32:bf:78:91:5e:f2:6a:7b:f5:bb:fe:8e:
86:98:f1:33:41:5e:54:44:7d:a4:1a:5a:c8:46:02:
a5:a7:ad:35:19:23:6c:de:ef:5b:d1:35:78:83:47:
6a:d5:04:15:aa:0e:59:a3:fa:55:2e:d2:0f:3f:b5:
ed:8c:a5:bd:47:41:9d:8f:d5:13:c3:7c:93:60:a9:
e1:e0:e6:56:41:8a:5e:a6:9d:93:ab:76:23:7f:94:
99:75:75:85:62:79:b1:c8:b3:94:1d:40:be:4b:83:
c6:c4:9d:2f:ef:72:ce:e1:b1:d2:93:69:4b:99:07:
d7:44:67:7b:e3:72:a8:19:98:e0:f5:d2:ea:57:a4:
6f:8b:5b:1e:82:cc:6f:03:21:d5:fa:da:ce:a5:22:
f1:45:14:cf:43:f2:68:85:f9:3a:38:79:10:35:30:
8d:72:32:0a:53:01:4c:d2:74:5d:0d:da:09:0d:83:
f9:ce:82:f9:41:4e:0f:d7:4c:93:17:b6:98:6b:66:
f7:92:d5:83:f7:f5:47:57:7c:ff:12:36:9e:93:5c:
e0:42:d4:03:7a:0d:41:90:62:e4:98:4c:0e:e2:97:
f2:6b:1f:0c:21:ac:b5:32:bd:8f:1b:bd:da:f2:b6:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:BA:59:3E:83:19:A4:DE:E9:BD:1F:73:B4:36:55:3D:AA:4F:DD
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ce:47:5e:a8:61:bb:10:df:e6:34:39:79:7e:bb:dc:13:ab:
46:01:52:14:be:f9:54:16:e9:8b:ea:ef:71:d1:83:fb:8a:9c:
c7:02:38:72:1a:fc:ed:2e:ba:b1:87:30:81:b8:80:50:74:b5:
6a:8d:89:c1:b1:e5:3a:52:7b:4c:76:2c:94:af:e8:b6:f2:54:
49:18:cb:6f:95:b1:9b:f6:f8:dd:04:94:37:18:83:eb:06:4a:
49:38:d9:c3:0c:dc:65:34:1f:41:7c:b0:77:d8:57:04:83:1d:
c3:ac:68:10:d5:2a:a7:80:f4:b3:1d:41:1e:67:17:bf:4a:8c:
9d:c2:ff:1e:72:40:af:a6:21:8d:89:10:e0:1a:8e:0d:64:d7:
02:70:ff:05:0c:db:38:dc:ae:76:83:1e:cb:05:17:64:50:01:
91:2d:2b:50:f2:0a:10:74:22:ba:45:7c:f5:a0:80:71:6b:2f:
66:f7:22:88:a2:5d:66:9c:f8:62:10:49:57:fe:93:37:1b:46:
b9:2d:1e:42:a3:8e:e2:e1:de:b7:c8:d0:5e:cd:5f:93:a8:b4:
39:32:7b:b0:17:37:2a:f2:03:c3:6d:f5:c9:69:62:9e:b5:70:
45:3e:21:e4:3f:d1:c1:72:40:e4:fe:d3:82:b2:8d:89:bd:91:
9e:c3:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 04:42:06 2026 by rpki-client