
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: roIf4E1oRwnnbQ2VxS4VqRK3Cr7OW1CG1QE+4OS58e0=
Subject key identifier: B2:10:E9:1B:D2:FE:AC:7D:6D:7E:98:64:35:9D:45:0F:AE:02:3E:5C
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019DDBE82356FF4B6DF6339C7AA3D769062D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0A21
Signing time: Thu 30 Apr 2026 01:01:56 +0000
Manifest this update: Thu 30 Apr 2026 01:01:56 +0000
Manifest next update: Fri 01 May 2026 01:01:56 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 1gVn7/bhYWYs9vM2WPZbAM9r6n9cgC3p+49MeyCIAtk=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:e8:23:56:ff:4b:6d:f6:33:9c:7a:a3:d7:69:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Apr 30 01:01:56 2026 GMT
Not After : May 1 01:01:56 2026 GMT
Subject: CN=b210e91bd2feac7d6d7e9864359d450fae023e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:21:ef:fa:ca:7e:37:57:96:0c:17:1d:f2:
f2:f0:80:f9:96:de:b7:27:b2:25:9b:bd:c1:fb:ff:
bf:32:ec:32:95:63:a0:f5:3d:9a:b0:87:f9:34:d0:
a4:c0:ab:63:05:a0:7e:4f:60:38:72:66:4f:59:cd:
ea:4e:f4:b0:72:2c:d1:3f:d0:61:32:a3:67:82:42:
12:38:ff:00:2f:7c:d1:ef:b6:9f:b8:dc:13:ba:6d:
a7:e6:7f:ab:94:9d:c5:d6:a6:b0:bb:08:99:20:0d:
df:a1:5e:c6:d0:87:52:4a:f4:36:24:ac:47:b7:45:
d9:d1:2e:48:cc:d8:0a:dd:1a:16:73:4c:1a:81:61:
9b:f7:52:39:6b:5d:3b:be:7b:59:7f:63:2c:94:81:
7a:81:5b:e3:38:b4:72:a4:76:be:13:d2:fa:98:28:
7e:16:03:4c:1b:dc:a9:55:47:42:52:58:e9:e0:c0:
5b:f1:f1:e9:58:59:98:e9:26:51:47:f1:d1:1d:da:
4b:79:c9:e3:b5:93:a2:19:0a:df:11:f0:c4:91:4f:
fb:a6:03:cc:b7:b4:0b:a5:ab:8d:bf:a3:e9:87:f5:
b9:75:19:36:9a:9c:25:9c:e6:d6:4b:a9:73:3e:16:
8a:50:9e:98:c0:14:fa:7e:7f:29:6a:4c:48:46:54:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:E9:1B:D2:FE:AC:7D:6D:7E:98:64:35:9D:45:0F:AE:02:3E:5C
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a7:df:e9:c7:7a:5b:0a:9a:2d:74:00:6f:96:7d:0e:6b:86:
87:66:92:cf:89:94:0b:7f:47:d9:19:f0:11:cf:02:d7:9c:5a:
7d:00:a4:d5:27:ee:dd:6a:4c:3b:83:49:f3:37:42:62:f2:21:
2b:e2:92:83:a4:ae:15:fa:05:82:68:3b:5a:e3:18:50:91:11:
a4:f9:01:d5:23:91:e9:ac:b8:c8:cd:e0:61:6e:6f:7b:73:a5:
62:9c:e2:b5:20:dd:e9:21:74:f5:93:31:d6:65:b2:ff:14:ba:
ea:94:18:a1:4f:1a:42:ca:f2:43:01:df:da:58:8e:31:84:1f:
26:3f:fd:e2:f8:3b:b0:a2:19:65:0c:6a:16:41:4d:9f:62:61:
76:36:3c:61:a7:ae:a2:1b:cc:e3:56:71:c4:4a:ec:0e:0f:e7:
f4:08:56:fb:41:a9:a3:3a:a3:64:02:3b:d7:59:8c:2f:b7:ec:
fe:d3:0a:e6:da:ef:da:fc:26:f0:23:80:f9:65:6d:77:3b:04:
f9:89:0b:5c:f0:e1:7a:df:42:af:71:33:10:2b:56:14:29:6f:
0d:5f:15:0e:17:24:52:b1:90:05:ba:40:99:fc:f5:20:ca:fc:
26:f1:4d:f0:b5:32:12:8a:c7:f2:5b:c1:8e:04:a2:96:e7:22:
f4:fb:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:54:56 2026 by rpki-client