Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: EOMJsIAD/joxRPP+jLaKM++6DhNf2ni/IfMhmgCNJ38=
Subject key identifier: B6:39:00:D7:A1:80:E5:6C:38:40:9F:27:C6:3F:7E:8F:6C:3F:CF:06
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 019D3789C0B8748BBA783D585E34042C7F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: 4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa (hash: R6o6h7FPQ78N3YyiGkBHhpV10pWrv1sif+o6N3TYJMg=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: yUl/meW3qOJFAEV0WuPSitBBsbI/s1BWjUzq3khP3Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c0:b8:74:8b:ba:78:3d:58:5e:34:04:2c:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=b63900d7a180e56c38409f27c63f7e8f6c3fcf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:06:b4:78:da:11:be:03:ef:05:d4:57:c2:
4c:a2:3b:be:79:55:02:5f:49:5c:46:da:98:94:76:
ec:8c:b1:f7:35:32:e9:3d:b6:24:af:10:22:ce:9c:
65:62:2c:88:61:55:90:26:5d:3c:be:f1:9a:be:88:
60:72:2e:98:60:4b:e0:9a:d4:01:8f:c6:b3:b7:af:
72:4b:a6:5f:98:9c:23:45:6c:05:07:77:0d:17:66:
cf:e0:6a:1d:1a:29:dc:a8:d0:e8:39:26:56:25:42:
e0:30:63:5e:19:32:af:85:27:22:da:32:38:3d:c5:
b1:04:be:a5:3b:de:e8:ba:6b:eb:f9:39:ab:ec:d4:
15:41:56:26:e7:35:5d:20:d6:19:f6:f6:8f:71:7a:
f6:72:75:e3:b6:8f:9a:f5:90:f0:f2:58:ce:95:02:
26:42:2d:62:79:17:76:61:74:52:70:40:17:84:2a:
e2:fb:1b:98:77:1c:fb:15:74:91:99:3d:54:9e:b8:
ef:ce:af:e2:b6:78:02:21:24:2e:c3:80:56:3e:29:
62:e5:16:b7:c0:dc:5b:6b:8f:d2:3f:cb:86:d4:a1:
d8:d3:ca:b0:a1:24:eb:f1:7e:fb:11:21:f5:b7:8f:
df:72:c5:83:68:03:5a:1f:7a:36:2e:1e:18:90:32:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:00:D7:A1:80:E5:6C:38:40:9F:27:C6:3F:7E:8F:6C:3F:CF:06
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:96:a5:51:5e:b4:00:56:4c:85:0f:d9:0f:7e:18:97:6c:
73:1c:47:fa:fe:ff:7f:65:a2:76:88:60:b8:94:09:a2:1a:b6:
35:8c:5f:1b:65:4a:bd:07:d8:85:66:e7:c1:3f:06:f0:09:b6:
a9:90:82:4b:b0:44:82:7b:25:6a:c8:b3:71:3a:93:a5:cd:3b:
fd:24:bc:fe:87:6a:29:9e:36:39:69:3e:d0:25:6e:25:1e:34:
5d:48:bd:0d:0e:f4:77:8f:7e:86:a7:2a:27:19:5a:0d:7d:cf:
07:26:32:f9:31:9c:de:4d:4c:cf:f0:3c:37:09:af:8a:9c:a4:
e4:12:d7:a5:5b:7f:ad:48:d6:66:b2:72:d6:8d:5f:c7:13:7c:
5f:b8:84:e7:db:4e:73:45:25:1c:5e:61:f1:ec:83:d8:47:b5:
ba:c5:8c:20:2d:de:ad:8f:1f:4b:1d:dc:a4:ed:07:6a:ae:e4:
01:45:4e:2b:52:7b:07:8e:c5:c6:68:7d:91:5a:61:4b:23:08:
fc:a8:5e:81:d7:e8:eb:f2:21:b0:ef:61:08:2b:8f:4f:32:50:
13:7d:38:dd:9a:45:82:e5:79:f6:4b:c2:a1:4f:2c:cf:6d:ea:
cb:82:0c:2c:6a:4c:8d:50:4d:3d:b4:ec:be:2b:ae:33:fa:c5:
10:ab:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client