Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: ZU15c3UBjbT0HjXlnOFtI3j0srxRjSDtBsvfOUCWPWI=
Subject key identifier: 24:18:F6:09:43:EA:50:10:70:F9:51:E2:DC:0A:BB:53:6D:58:84:7A
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019D18DA4B30FA1EAB130B45D1D4D14E9DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09BC
Signing time: Mon 23 Mar 2026 04:00:52 +0000
Manifest this update: Mon 23 Mar 2026 04:00:52 +0000
Manifest next update: Tue 24 Mar 2026 04:00:52 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: U8JsGm1OTO4Cx3hJTPBAzLZhKi2lUG9jtK5HJb6PlPA=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:da:4b:30:fa:1e:ab:13:0b:45:d1:d4:d1:4e:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 23 04:00:52 2026 GMT
Not After : Mar 24 04:00:52 2026 GMT
Subject: CN=2418f60943ea501070f951e2dc0abb536d58847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:e3:ca:e6:4d:4d:6f:e5:84:1b:9c:81:c1:
73:64:42:cc:e2:a8:1f:09:21:8c:12:73:ab:cb:3b:
40:ba:b0:7a:16:56:eb:d8:a0:b9:93:95:77:95:c2:
79:40:36:44:b4:4d:f0:c8:90:f5:6a:8e:d2:8f:c7:
42:46:bd:0c:af:6f:da:d3:9d:70:ea:01:a7:ad:9b:
47:72:c8:2e:ae:44:cf:19:da:a2:9c:2a:29:c9:93:
77:2d:a1:c7:3a:8f:cd:e3:50:4f:95:12:6c:9c:c6:
50:46:68:98:a7:51:32:0d:26:dc:b0:d1:c8:0e:fd:
73:ef:21:04:e9:55:ce:50:85:cc:60:5d:50:cd:78:
f1:25:3e:4f:07:38:0a:41:cf:9e:77:0b:37:49:da:
07:ee:83:d6:9e:2c:e1:f7:59:bf:17:16:66:47:b5:
77:58:05:07:9f:43:a7:d7:1f:e3:a5:c1:63:8f:a0:
43:d6:b4:15:19:8d:27:d8:0e:ff:e6:83:7c:b0:90:
9f:c3:12:59:09:6a:14:3a:3f:5d:be:6c:b8:12:26:
1a:74:38:ee:60:69:71:c8:e1:4d:6d:6e:8f:23:51:
11:1b:2d:6d:b8:83:df:91:cc:f4:8a:da:ff:65:15:
52:bb:76:a8:1f:e2:8a:e8:cb:74:bf:ea:eb:30:00:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:F6:09:43:EA:50:10:70:F9:51:E2:DC:0A:BB:53:6D:58:84:7A
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:50:05:b3:ae:4b:9a:07:bf:9f:64:61:c8:fa:52:25:a0:
83:6b:8a:fa:4d:bc:44:b9:cc:5b:3d:0f:ac:1e:05:1f:1e:78:
8b:3e:1a:c6:8b:ec:e7:23:74:c8:04:9c:c4:22:62:ee:cb:52:
d3:7a:1b:5e:00:79:39:da:4a:fd:56:9f:48:03:f0:01:1d:53:
ad:7c:b2:5c:1a:73:18:95:19:0c:4d:94:b4:5c:40:47:d1:df:
37:e6:04:12:49:79:77:93:31:f6:55:64:d9:53:2b:dc:e8:00:
a3:74:9f:1a:9c:ba:da:17:d5:af:6e:74:21:df:ee:ee:e8:23:
6b:77:95:64:85:2b:f3:cb:05:a6:a8:24:09:09:da:3f:ee:af:
58:68:58:bd:2f:ac:3a:79:a0:38:12:68:30:2d:9d:49:0a:ea:
23:34:ac:b0:01:5c:43:e2:fd:78:df:16:d4:24:92:5d:f2:aa:
0d:b8:9b:89:08:68:a9:66:ed:82:2a:09:3b:ed:98:df:5e:70:
d7:80:50:c6:2b:5a:92:d1:c4:39:6f:f1:e8:dc:fd:4c:b1:5b:
2e:3b:bb:c0:be:d2:16:b3:4b:c1:8a:83:d6:a9:0d:f7:1d:6b:
44:f3:b7:cc:b3:3c:27:f9:fb:3f:4e:26:f7:b6:7e:40:92:1f:
b8:38:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 14:34:54 2026 by rpki-client