Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: aI837pjGQvyEJnDq6RKKXHoXEJYm/T6mNmoHdwaeICo=
Subject key identifier: 33:3A:30:80:29:3C:6A:6C:A1:E1:14:B2:95:4F:FA:C0:55:E2:FA:D2
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019D0F3234F6E31E0D27A1EFA7010DE1F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09B7
Signing time: Sat 21 Mar 2026 07:00:41 +0000
Manifest this update: Sat 21 Mar 2026 07:00:41 +0000
Manifest next update: Sun 22 Mar 2026 07:00:41 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: AWkRXeOZ5HVXQTOxKvAZYGURr/OjQrPRvphUJvjNU6o=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:32:34:f6:e3:1e:0d:27:a1:ef:a7:01:0d:e1:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 21 07:00:41 2026 GMT
Not After : Mar 22 07:00:41 2026 GMT
Subject: CN=333a3080293c6a6ca1e114b2954ffac055e2fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:09:d5:e5:4b:a6:82:5e:12:7a:97:ea:51:
5b:d3:3f:67:d5:e7:9c:88:de:2e:e8:1f:a6:51:ce:
84:78:ce:62:1e:88:39:4e:7e:cc:0d:95:73:76:04:
0e:af:1a:50:ee:eb:fa:19:6a:e5:04:13:2c:f1:27:
37:18:6f:50:0a:56:04:64:50:67:11:22:5c:bd:7a:
5a:34:18:01:b1:44:f5:73:fc:0a:1f:04:42:7c:f9:
e4:02:35:11:a2:3a:b3:37:91:a8:84:70:97:f3:72:
14:23:3f:31:cb:ed:40:90:85:de:72:2f:9f:1f:1e:
fa:b5:ba:5b:b8:c3:36:96:1d:9b:c7:62:fe:1e:7e:
4d:fb:70:22:4a:cb:2c:a0:d1:b9:c8:bf:10:0a:6a:
6f:d6:b8:e9:c0:85:d8:95:9c:9e:d4:ce:04:19:59:
5b:67:2a:a2:5f:28:d6:8d:e6:1f:8f:be:dc:cc:bf:
b7:cc:c9:84:9c:4b:28:4d:1e:62:d2:27:07:6f:13:
2a:09:2b:3a:03:2e:f5:b4:15:83:70:c6:8b:42:ad:
ce:16:17:de:48:f5:ca:57:75:52:c3:6f:8a:64:df:
21:92:73:73:a6:5c:5f:72:e3:3b:fb:d4:9a:88:e3:
4a:56:45:01:b1:9b:af:18:01:c2:9b:be:5e:80:40:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:30:80:29:3C:6A:6C:A1:E1:14:B2:95:4F:FA:C0:55:E2:FA:D2
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:d2:e4:31:06:93:9e:fd:da:ee:52:c2:25:79:bd:06:5a:
cd:12:83:ae:ed:6d:a7:f2:71:28:cd:ff:4e:53:9b:9c:4e:16:
4e:a7:0a:c3:ae:54:98:a0:9f:53:ba:3c:f2:db:ec:e5:82:91:
3a:ea:58:99:0f:7b:e3:7a:86:be:64:22:ab:ca:62:75:4c:56:
e4:dc:cb:14:25:fb:26:77:6a:07:76:0a:13:43:74:dc:72:cf:
61:a8:f7:a6:77:c5:07:a9:e0:8f:38:a8:63:aa:56:a0:2a:92:
5c:65:bd:2d:45:5b:77:1b:bb:d5:7e:32:dd:64:b7:a9:a1:16:
17:4c:15:c7:58:61:ad:e5:69:bf:fa:4c:3f:d0:92:4b:35:76:
42:45:8c:c8:cd:44:20:5a:05:dc:ab:3d:ad:60:a1:5c:68:82:
9b:b4:51:11:e6:96:0a:c6:7b:8d:d4:fc:e6:3c:55:16:19:2d:
c2:de:06:8c:15:69:fa:d5:fa:0a:0b:c3:d5:05:78:fa:81:d8:
5a:6b:6b:90:a0:c2:23:2a:7d:c6:1e:e7:1c:c7:3f:71:2e:4a:
54:9e:39:02:45:df:9f:9f:41:0c:d6:95:dd:a9:9e:22:c4:ed:
65:22:e4:b2:fb:16:ef:6f:d7:69:bb:77:c0:bc:9d:ef:d8:f9:
40:23:3f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0PMjT24x4NJ6HvpwEN4fP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwMzIxMDcwMDQxWhcNMjYwMzIyMDcwMDQxWjAzMTEwLwYDVQQD
EygzMzNhMzA4MDI5M2M2YTZjYTFlMTE0YjI5NTRmZmFjMDU1ZTJmYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eUJ1eVLpoJeEnqX6lFb0z9n1eec
iN4u6B+mUc6EeM5iHog5Tn7MDZVzdgQOrxpQ7uv6GWrlBBMs8Sc3GG9QClYEZFBn
ESJcvXpaNBgBsUT1c/wKHwRCfPnkAjURojqzN5GohHCX83IUIz8xy+1AkIXeci+f
Hx76tbpbuMM2lh2bx2L+Hn5N+3AiSsssoNG5yL8QCmpv1rjpwIXYlZye1M4EGVlb
ZyqiXyjWjeYfj77czL+3zMmEnEsoTR5i0icHbxMqCSs6Ay71tBWDcMaLQq3OFhfe
SPXKV3VSw2+KZN8hknNzplxfcuM7+9SaiONKVkUBsZuvGAHCm75egEDMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM6MIApPGpsoeEUspVP+sBV4vrSMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5DS5DEG
k5792u5SwiV5vQZazRKDru1tp/JxKM3/TlObnE4WTqcKw65UmKCfU7o88tvs5YKR
OupYmQ9743qGvmQiq8pidUxW5NzLFCX7JndqB3YKE0N03HLPYaj3pnfFB6ngjzio
Y6pWoCqSXGW9LUVbdxu71X4y3WS3qaEWF0wVx1hhreVpv/pMP9CSSzV2QkWMyM1E
IFoF3Ks9rWChXGiCm7RREeaWCsZ7jdT85jxVFhktwt4GjBVp+tX6CgvD1QV4+oHY
WmtrkKDCIyp9xh7nHMc/cS5KVJ45AkXfn59BDNaV3ameIsTtZSLksvsW72/Xabt3
wLyd79j5QCM/dA==
-----END CERTIFICATE-----
Generated at Sat Mar 21 15:30:22 2026 by rpki-client