Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: QLn/LBo/Gct14TafI0m+aIJeBukE5+PW+B18kemmwi8=
Subject key identifier: D7:CA:5E:36:22:BF:56:4F:22:15:98:73:97:28:BF:A4:B0:AC:6A:37
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019CBA393AEE573A5F91AB603D201B576958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 098B
Signing time: Wed 04 Mar 2026 19:00:38 +0000
Manifest this update: Wed 04 Mar 2026 19:00:38 +0000
Manifest next update: Thu 05 Mar 2026 19:00:38 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 66k9uDd8G0fIN7sroqqQ2vFcrv22z69ZAbhBvLnwSbk=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:3a:ee:57:3a:5f:91:ab:60:3d:20:1b:57:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 4 19:00:38 2026 GMT
Not After : Mar 5 19:00:38 2026 GMT
Subject: CN=d7ca5e3622bf564f221598739728bfa4b0ac6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:f5:c2:a1:61:15:81:e0:c5:a4:5f:b2:bf:
8a:07:20:69:80:4f:da:af:fd:ad:00:8e:53:94:bf:
7e:49:3e:29:27:39:07:3f:71:89:ab:21:04:96:3b:
82:69:db:90:53:8a:66:ba:59:17:ad:1e:82:66:cc:
85:95:bc:1d:ac:2f:c6:44:17:fa:c6:a0:e8:0a:29:
c1:ec:99:3c:22:b3:28:d1:05:c7:cc:f2:50:f5:d6:
56:c9:ba:3c:83:e8:7b:31:7c:60:f6:1a:2e:00:1a:
63:86:f9:c7:4f:a5:cd:3f:2a:c5:c7:2b:1c:54:6d:
ea:79:3b:86:5b:ec:05:8c:1d:0c:c4:25:98:f1:fc:
d5:0e:b1:c1:32:f1:0f:4e:ab:bb:4b:3f:44:6c:39:
97:d9:66:5c:05:06:af:47:e6:9d:f4:82:e7:6c:83:
20:73:29:bc:ea:cb:75:33:2a:87:96:ce:77:78:e4:
d9:d1:0f:fb:cf:c4:5e:e1:14:97:e4:d9:79:a3:1a:
b6:6e:88:46:ed:63:31:71:7a:d4:a0:95:14:8c:dc:
05:6d:96:ed:33:ec:99:d6:15:7d:ea:5c:8e:82:49:
5e:3f:ab:fa:44:81:f8:85:1e:9b:9f:5c:0d:31:c5:
ea:9e:58:09:76:2a:cc:1b:db:56:b7:a6:f5:55:f5:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:5E:36:22:BF:56:4F:22:15:98:73:97:28:BF:A4:B0:AC:6A:37
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:71:2d:53:13:2a:ce:f9:cd:07:18:a1:aa:55:33:74:13:
29:d7:53:18:9f:4d:85:1a:a7:85:15:a7:f9:db:cc:aa:cd:f5:
e3:91:1d:1a:ad:ee:00:c7:5c:55:01:9d:28:b7:4c:c0:ef:07:
a4:42:51:36:3d:cc:f9:4e:c7:e2:77:4f:c0:ed:a0:b4:39:b8:
22:0a:8b:a0:6a:57:50:f4:52:2b:36:fb:fe:6e:9c:55:39:cc:
68:80:ff:a7:38:32:aa:af:1e:b4:6e:cd:bf:b7:03:9b:a3:46:
a9:3d:87:7b:a3:47:8a:5e:59:0b:8c:b9:79:0b:2d:27:0f:b3:
f7:54:22:d7:69:e3:70:a8:7d:63:0a:db:e4:84:4e:d4:dd:a1:
7f:9e:0f:6c:ce:f9:de:03:e9:69:6e:cc:2c:e0:96:15:93:e1:
a4:ad:93:24:64:af:23:5e:a0:ef:1d:14:05:12:ae:cb:13:aa:
e8:65:9d:3c:4f:b0:68:b5:7c:16:05:aa:76:6e:53:37:8a:9b:
36:d9:bc:53:95:60:d1:2e:89:7c:6d:4c:07:ff:bc:67:e1:49:
84:30:bf:8f:75:50:b4:72:c8:ba:55:38:31:40:4f:87:35:83:
e7:f7:7e:23:b2:c6:47:19:35:18:ce:ac:4a:45:05:bd:3a:af:
0b:e7:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:56:02 2026 by rpki-client