
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: d47G0+UbMC3fUST+g4XpKJ0MbKygaf5ezzlk9fi3GH8=
Subject key identifier: C2:D8:80:53:79:B2:39:4A:37:1C:C1:07:2A:6F:A9:F4:AD:FE:EC:53
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019D6FC205FA478855D018FBBB428DCF0C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09E9
Signing time: Thu 09 Apr 2026 01:01:19 +0000
Manifest this update: Thu 09 Apr 2026 01:01:19 +0000
Manifest next update: Fri 10 Apr 2026 01:01:19 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: BehCxj7q4/oyaIZ23Sxd0e4+H/EQzLPF/pdk8ethXOU=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:c2:05:fa:47:88:55:d0:18:fb:bb:42:8d:cf:0c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Apr 9 01:01:19 2026 GMT
Not After : Apr 10 01:01:19 2026 GMT
Subject: CN=c2d8805379b2394a371cc1072a6fa9f4adfeec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:a9:06:25:e5:82:9f:72:d7:ee:e4:f2:a0:
fe:c8:c7:fc:16:b8:75:85:2b:e8:67:b5:a7:d3:dd:
2e:0b:23:6e:e3:f5:49:8b:0d:45:68:36:aa:4f:85:
c8:d6:1e:6b:dd:81:ec:79:d1:dd:68:bb:dd:02:86:
33:dc:aa:98:d1:76:2c:55:ee:68:9d:4a:a3:85:01:
19:40:55:53:54:89:8e:ad:ae:ad:9b:42:b1:fc:fa:
a4:94:25:f5:5a:04:70:31:ad:aa:a0:ce:7b:04:2b:
3a:f9:84:ed:a9:89:7d:dc:2f:a8:04:0f:f5:42:cd:
16:a2:7b:da:b2:b0:cd:83:8a:91:87:92:c6:eb:e8:
68:5c:c5:66:6b:17:97:76:44:8e:1c:a9:76:46:9d:
e1:b2:bf:48:51:66:7f:b1:39:f2:5b:f8:5a:ba:a6:
ec:0e:9a:c2:d1:03:b2:e2:78:33:44:52:6d:35:16:
dc:88:0f:06:e4:00:0b:81:01:d9:37:e3:27:52:f2:
3f:f2:25:7a:16:db:00:f0:15:24:62:e2:a6:d2:f3:
2f:ba:39:61:74:92:41:ad:e3:a7:00:cc:97:c2:c3:
18:07:1c:d4:a4:f3:5a:dd:f4:7f:f3:da:7a:55:fa:
4e:14:3e:a8:b3:3b:53:cf:92:8d:bf:68:03:57:a9:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:80:53:79:B2:39:4A:37:1C:C1:07:2A:6F:A9:F4:AD:FE:EC:53
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:83:ae:61:d5:8d:f7:27:23:f6:73:62:f4:a8:e9:aa:40:a5:
61:03:62:ac:87:75:86:09:9d:94:ff:09:ba:27:a5:0c:bd:b7:
3f:2c:ba:f6:79:a0:bb:0c:fa:56:86:65:d0:8c:b9:10:f2:5c:
62:74:fd:91:2b:a4:1f:6e:1c:e2:f4:17:01:ac:93:42:38:d4:
df:39:b9:0c:c0:c4:87:18:77:94:a1:ea:d1:56:66:cc:cb:6a:
97:28:fd:36:b2:df:8f:46:c1:a8:6d:b7:44:28:97:6f:71:c2:
76:92:01:35:d0:1a:70:d6:9f:3c:1d:85:3f:18:db:74:da:17:
d1:75:5b:b7:f2:42:60:70:12:eb:f0:5e:04:fa:16:5e:e7:54:
20:02:67:86:f6:8d:08:e4:5c:5b:d9:df:97:2f:70:39:db:28:
1f:63:bc:bf:e9:f2:2a:1b:fa:9f:6e:9b:76:25:94:4d:df:cd:
98:ba:68:1d:92:46:6b:93:3a:0c:cf:28:49:d1:89:79:ad:1e:
c5:e7:0e:b1:1d:dd:b0:aa:35:16:97:d2:8f:e2:d9:80:38:4e:
5b:0d:37:3c:4c:b2:90:09:65:f2:8e:9b:70:05:39:d4:ae:bb:
37:f9:20:bf:87:50:29:b1:ac:26:58:1c:dd:20:1e:2d:27:34:
7d:41:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 06:29:05 2026 by rpki-client