
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: ZSpY0Y/mPA7MLuI6x9tkpmZMEEvESXIEB4qV3Bt8BLw=
Subject key identifier: CB:30:51:BC:97:26:EF:3A:79:A5:FE:BE:D4:FB:D4:1F:80:21:4E:4D
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019D2A3B644450D1EFB93D48E42786025EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 09C5
Signing time: Thu 26 Mar 2026 13:00:28 +0000
Manifest this update: Thu 26 Mar 2026 13:00:28 +0000
Manifest next update: Fri 27 Mar 2026 13:00:28 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: Gv8QZWiv26AsgGnkTJI9OSBZPC6GGfyKoQE08avmzYg=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:64:44:50:d1:ef:b9:3d:48:e4:27:86:02:5e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 26 13:00:28 2026 GMT
Not After : Mar 27 13:00:28 2026 GMT
Subject: CN=cb3051bc9726ef3a79a5febed4fbd41f80214e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:50:aa:3b:f5:e8:88:11:69:fc:49:a7:6e:
4d:fd:18:20:92:f4:ee:ff:d6:b5:d4:21:3e:91:0a:
67:d2:72:a8:1d:c5:bf:1b:5e:6f:4e:a5:cc:44:ac:
4f:d9:cc:25:af:d0:06:f0:0b:cd:36:14:01:ec:fc:
bf:4b:33:95:50:12:74:f2:d8:d4:4b:88:8e:86:6c:
10:2e:84:ed:ae:81:1b:b3:5f:7b:8c:82:0c:c3:41:
c5:d0:61:66:13:ff:e1:fd:f9:79:62:50:bc:90:66:
6d:96:21:31:6a:5f:0a:18:5e:17:0d:23:f2:66:d1:
db:75:8e:81:dc:c8:21:27:34:bd:47:0c:c7:78:4f:
57:df:18:df:43:16:8b:2e:38:ab:f3:3e:33:7d:ec:
90:2c:b3:14:9f:a8:f5:11:80:3e:67:94:44:16:14:
c8:f0:a0:ba:71:c5:a9:84:c6:18:d4:be:9e:7f:24:
1a:96:23:58:e0:8e:08:ad:c0:19:c7:50:15:c5:d4:
1e:a1:80:ba:03:86:f9:07:28:26:42:eb:73:45:79:
95:c2:86:a1:8c:78:37:bc:82:b5:13:ca:2e:31:ad:
67:07:34:32:df:d3:12:49:d6:77:ba:9d:9c:89:94:
f1:c5:7b:1f:f4:fd:db:ec:f0:e8:bb:a6:16:d5:c1:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:51:BC:97:26:EF:3A:79:A5:FE:BE:D4:FB:D4:1F:80:21:4E:4D
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:7f:41:ca:d6:6b:a4:41:c0:a9:25:e5:74:a1:6c:06:88:
2a:c4:5a:e7:9f:e9:1a:db:12:74:85:31:3e:55:cb:1f:36:c9:
46:a9:17:2e:41:b6:3f:0e:7c:df:ae:99:cd:20:94:01:00:5f:
c4:b9:3f:a8:d8:aa:cf:2d:e3:83:3d:4d:1a:bc:72:e6:1c:17:
ee:ec:5b:57:49:c4:29:61:50:e7:dd:48:ce:1d:ec:11:bd:2b:
d3:74:3c:56:bb:43:55:8d:04:87:64:cd:fb:ec:81:ac:48:65:
c9:04:ea:70:12:d2:3c:f0:8d:11:6f:a5:0c:d1:59:3d:4a:14:
b3:70:25:25:74:07:17:bb:3f:74:70:d7:68:18:a8:28:a3:c7:
30:98:d7:e6:cc:32:8f:de:91:e6:06:59:21:f6:a4:d8:19:e6:
e7:d6:9e:cd:85:5b:67:35:b3:40:73:22:0a:cf:d5:7b:e4:25:
b1:76:fc:ef:6a:14:b2:08:d6:95:39:57:ee:a5:13:a7:4f:98:
ed:7a:6a:26:0c:0e:de:d2:9d:f7:50:e8:ed:1e:de:30:dd:56:
30:a9:b8:55:64:48:1f:08:d2:2b:ab:5d:9a:ee:69:cb:4f:97:
c1:2d:ff:0a:9e:e5:d9:d9:3d:3e:61:c6:8d:45:71:62:1a:3c:
9f:f3:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:38 2026 by rpki-client