Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: L4gfxDFh2t9SeYMcfmD1JCqnkyS+B4wJameGOMheaSY=
Subject key identifier: 50:24:8A:FB:7E:74:0A:81:A6:12:63:35:A5:E6:8A:CC:CA:38:F2:62
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 019D38662C21F5E61CF3DF8134678EB0AC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: hPybl0hOrb+24kvMKRJxc0a5hf+5OjyKzFWrK2c+ZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2c:21:f5:e6:1c:f3:df:81:34:67:8e:b0:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=50248afb7e740a81a6126335a5e68accca38f262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:d9:f2:57:c0:cd:97:f9:fb:4a:d4:80:74:
4d:7e:3b:f7:83:dd:bf:52:dd:21:83:d3:34:74:cc:
1a:d7:51:a6:99:5d:5d:bb:55:15:e9:30:0d:e9:a9:
2e:2b:05:d2:e0:81:da:b0:fa:8f:d9:47:57:6b:1f:
d9:9b:70:d8:a0:e9:69:dd:6c:3b:c1:ec:6a:1b:aa:
87:2f:0c:73:32:9d:4f:39:9c:5f:22:ac:d7:8f:d2:
54:1c:68:40:47:ba:55:6d:29:76:d0:b7:42:10:86:
04:f5:27:e9:36:70:12:cd:06:4e:75:96:54:fc:ac:
3f:78:8c:fa:f3:f5:1c:47:1d:73:0d:2c:12:c2:81:
5d:26:02:1d:71:fc:bf:8b:32:42:3b:a2:d0:38:94:
d1:97:6e:45:cb:e7:e0:5e:d4:6d:b6:8b:75:24:b5:
52:43:81:7e:48:07:7a:24:cf:36:2a:89:78:1f:ee:
53:0b:71:14:39:2c:77:10:72:43:6a:17:d8:4b:9a:
33:3a:ca:a8:31:53:5a:a3:f6:54:59:29:66:d6:8b:
b7:65:a5:5b:6e:7c:20:09:84:f5:c9:ab:07:a4:a9:
00:cf:3c:b2:fe:c0:79:a2:70:19:d9:b5:80:a1:36:
e7:4d:d9:12:2d:1a:15:94:bf:60:27:eb:f7:2c:10:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:8A:FB:7E:74:0A:81:A6:12:63:35:A5:E6:8A:CC:CA:38:F2:62
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0d:06:15:ad:56:a7:74:52:93:82:6f:01:d5:ce:d1:f0:97:
83:6f:dd:5e:f1:fa:f0:b2:ec:b0:5e:85:d5:7f:a6:ca:d1:47:
5b:1f:9b:83:f3:91:1f:d2:c2:9f:88:c5:92:07:ac:69:bb:92:
b4:2a:7c:0f:44:23:d8:26:54:b7:a6:65:d3:4b:94:8c:96:20:
c3:8f:1f:28:38:72:19:14:ed:73:66:1f:45:05:46:1e:99:15:
79:2f:9a:8d:83:c7:ea:64:a2:84:bb:b3:c5:19:60:30:df:80:
4f:ec:0b:99:14:30:1f:4c:6d:e0:84:35:3f:96:dd:b8:19:03:
8a:7b:a9:23:45:90:cc:62:f6:94:f2:8e:49:2c:b4:b9:d0:f8:
e3:79:9c:92:d5:0a:9b:83:8e:a7:9a:f3:0d:3a:94:e6:8e:f9:
82:4a:b8:70:40:c6:9e:ab:73:27:90:89:57:99:64:ee:39:f1:
7f:09:11:92:2c:14:ae:5c:c1:2b:6e:78:9d:12:b3:74:7f:c9:
5d:49:09:81:60:a1:2e:d2:64:7e:28:4b:bb:8d:57:d9:34:34:
8d:5e:e2:9d:5b:46:8e:2f:7e:66:5f:62:0f:52:3f:1f:bd:d3:
96:83:b1:21:b4:00:6b:6e:87:69:aa:f3:c8:2b:b5:a1:8e:d4:
43:ea:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:19 2026 by rpki-client