Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: vVi4xNCdQm6PUi4F+uOWHBH5WQMVFU3Sdfk97IaOdVA=
Subject key identifier: DD:E8:39:71:9B:FB:56:E6:B7:3E:0E:20:2C:F5:59:BE:ED:0D:78:5D
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019D3940916269855C5345032A795A0F1399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 0811
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: C0BWc61n1OMXQWIucIT2L6TPk7HUSd7ym6SlVV8dIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:91:62:69:85:5c:53:45:03:2a:79:5a:0f:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=dde839719bfb56e6b73e0e202cf559beed0d785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:78:7a:b5:a1:a7:e5:21:94:fe:f7:0b:c5:
26:d8:35:12:84:45:5e:0d:b5:37:ae:82:ba:22:68:
3d:17:57:0a:17:a3:fd:d2:f0:50:bc:6f:ae:5b:9e:
db:a2:38:69:a2:36:78:cc:58:bc:c7:c0:d0:0d:ad:
c9:5a:3e:7a:a4:41:5d:38:ce:1e:55:6f:44:e3:d8:
aa:72:64:e0:5a:16:f9:78:6e:de:42:ff:60:9d:1e:
13:57:90:4e:80:38:ce:25:c6:6a:b7:ca:15:97:e9:
1c:88:e4:49:c9:96:43:e1:63:f0:2f:db:25:68:06:
56:3a:30:d5:b2:2a:cd:76:3c:37:9a:8e:fe:d2:3e:
38:ce:0b:91:a5:ba:7e:d7:f2:04:0a:7f:69:d4:b7:
b1:5e:58:f6:fc:e8:ca:a6:4c:39:ce:44:fa:d5:11:
c5:29:61:32:e1:95:cd:a3:8f:f9:35:3a:45:b1:7a:
6b:c6:dd:95:09:ac:88:e0:38:7c:6c:ad:33:f5:10:
91:70:86:16:30:2f:dc:cd:74:41:cf:de:b4:3c:36:
00:bf:3a:e3:c9:1c:85:c7:01:2d:63:3a:71:9b:03:
7b:06:a8:67:5c:6f:a3:1a:6b:c4:3d:84:77:41:6d:
5a:03:1e:0a:9c:55:e0:6e:51:d6:46:d0:fb:b3:33:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:39:71:9B:FB:56:E6:B7:3E:0E:20:2C:F5:59:BE:ED:0D:78:5D
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:16:42:40:87:ca:b6:a6:03:a2:4d:ca:2d:dc:ab:cf:81:
a1:73:22:da:86:fa:06:9c:22:01:e0:56:02:fc:b8:93:fb:90:
ed:09:57:7f:a6:77:ea:45:ad:eb:e1:85:64:e5:17:0c:b3:b1:
2b:f8:6c:ad:c9:21:c9:0e:18:fb:21:f1:49:cb:8e:bb:c2:2f:
ee:d4:7e:b3:e6:36:f4:a4:65:cb:04:48:b4:9e:23:59:c6:f2:
38:f9:50:32:d0:b6:bf:09:8f:71:ed:62:68:a8:77:6f:96:cd:
7b:a5:c2:a7:a3:2a:a5:e1:d0:35:22:91:e7:19:ac:c5:9c:5b:
0a:ac:53:b0:93:71:9e:d0:0a:3b:6c:bd:06:c4:16:57:4f:c6:
f1:ff:2b:3c:27:5f:98:c7:5f:1a:dd:93:20:19:b5:33:79:f1:
22:69:ad:8d:6f:06:b1:0c:d2:32:3d:94:20:3b:31:12:f0:dd:
f0:5a:b7:52:07:a4:da:90:ae:05:c7:9e:08:86:50:90:e2:39:
2c:54:81:62:3b:29:ef:93:68:d1:62:5f:ce:d7:51:4f:1a:43:
8d:a0:6a:d1:49:a1:27:24:94:c8:ca:0a:79:6a:1e:37:e3:f0:
18:f3:2b:5f:7f:c6:27:78:38:d4:45:8b:e0:13:8b:a0:8a:55:
4f:d7:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:11 2026 by rpki-client