Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: I+xxojvLxReRSezVwlsg30vU8qcLJbTUBXYz9zSLv00=
Subject key identifier: D3:DD:FE:BC:AF:3D:95:1B:D3:8A:BD:00:DD:55:AE:53:E5:53:8F:F1
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 019E311760AEE90BA467F2101957949D3F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 14:01:16 +0000
Manifest this update: Sat 16 May 2026 14:01:16 +0000
Manifest next update: Sun 17 May 2026 14:01:16 +0000
Files and hashes: 1: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: R91eqFQYCVZnNZZFVOsSHMBIEyXNeXPRtLgjitGjPI8=)
2: _RoK8Uv5j0KU-PPbPnow3xV51HA.roa (hash: exZgeosVdMVRgUYSNzL9Esk75uIUxhCYpdu+vCksypA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:60:ae:e9:0b:a4:67:f2:10:19:57:94:9d:3f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: May 16 14:01:16 2026 GMT
Not After : May 17 14:01:16 2026 GMT
Subject: CN=d3ddfebcaf3d951bd38abd00dd55ae53e5538ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:be:66:f2:80:fc:2b:dd:61:43:99:5a:4c:
85:e3:93:33:e8:ae:bb:23:6e:57:b4:67:dd:1c:6f:
98:90:7b:b0:3b:62:b1:af:a2:79:87:09:39:43:dc:
6d:11:07:fe:cc:93:2a:68:3c:f3:00:3b:c4:e4:15:
e9:29:6b:94:fd:19:22:a5:aa:c1:ac:5e:52:32:5d:
32:56:5b:8d:e8:91:03:78:cf:26:f2:7b:1a:b9:6a:
d2:ad:19:03:de:e1:2b:22:7a:8e:0e:74:52:af:9e:
81:f0:a8:2e:f3:81:84:6b:6e:d2:fd:c3:6e:e3:aa:
71:ba:38:63:3c:0b:9f:28:b2:5b:34:54:5d:b8:75:
ec:65:08:30:ba:fa:2d:d6:34:65:79:4e:aa:26:07:
e1:41:b1:3e:a5:dc:3a:9c:cd:65:58:ae:c6:4e:7f:
34:21:ff:bf:85:ea:4d:33:e7:4c:39:99:a5:02:56:
0e:bc:bd:0f:9e:0e:18:98:85:99:fc:6a:51:75:1f:
e7:41:c7:0c:84:c3:38:3d:a6:d2:7d:aa:ba:da:cf:
8f:e3:ea:aa:f5:3d:62:b9:0f:ac:20:bc:f3:b4:53:
ea:ee:79:f6:b8:d7:b2:ff:82:bd:e5:67:6d:85:71:
8c:60:37:a2:21:93:13:94:b0:2f:97:26:36:3b:20:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DD:FE:BC:AF:3D:95:1B:D3:8A:BD:00:DD:55:AE:53:E5:53:8F:F1
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5d:cd:e4:e6:38:3f:4d:1e:8a:92:39:04:6f:eb:e0:53:c7:
c0:84:e4:35:57:f7:7d:45:9a:67:ca:2a:dd:bc:5b:1f:aa:08:
82:3d:9d:28:12:c8:59:80:41:b4:1e:12:6e:cb:bf:e0:04:85:
6e:33:dc:3e:2d:46:2c:f9:54:4f:5b:b5:67:f5:e9:4d:9f:9b:
ab:35:b7:f7:80:29:52:a6:d5:8b:9b:6e:6e:46:49:c1:f5:d0:
69:4c:13:9e:c7:4a:c0:66:c6:cf:5f:5f:24:4f:1e:52:69:3c:
77:15:26:20:7b:f1:c8:c3:74:55:cf:1e:53:f0:d9:e2:ab:a6:
5d:3b:3e:50:01:fe:75:51:32:5f:38:1e:86:ee:f7:d0:94:54:
3e:43:d8:da:7d:76:98:e6:d4:1d:70:33:8d:e8:8b:77:0c:65:
c1:d7:d7:a9:19:14:3e:86:c4:2f:77:7b:43:7c:31:98:e6:f7:
4b:37:9e:95:37:c2:be:8a:97:28:7d:f7:b9:78:82:2a:f1:84:
29:62:14:51:c0:1f:b0:09:84:59:11:5a:71:8d:e2:31:2e:3d:
7b:31:a2:24:13:b7:aa:31:2d:75:2a:72:51:b5:b2:67:2f:65:
84:6e:c8:a4:8c:b9:73:f4:38:92:3e:8c:ba:20:80:9a:4f:4b:
ba:24:ea:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:24 2026 by rpki-client