Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File: E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier: HUpqLA0ugN5YnysZ167hCLKfiY8+Qpnn4pYjVxXns8A=
Subject key identifier: 77:35:BE:D2:5F:F7:2D:52:49:28:69:DC:5B:1E:3A:E6:A2:7E:6E:39
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer: /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial: 019D390A025C7979BA9F66397EBCA20AB2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number: 095C
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: ivZg1dhpD7GcrWFdYvYQh90zBwEC1Q1t2/X3fv49dIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:02:5c:79:79:ba:9f:66:39:7e:bc:a2:0a:b2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=7735bed25ff72d52492869dc5b1e3ae6a27e6e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:b3:27:eb:1f:e5:d3:77:69:63:a3:74:b1:
44:e1:a4:ad:0a:19:d0:a1:19:33:de:08:b2:4f:3b:
ab:9d:ce:b1:4a:bc:52:62:16:2b:d1:4b:c5:b7:1a:
05:20:ff:b9:21:c5:c8:af:40:86:fa:f6:cc:58:5a:
f7:e7:af:21:a9:cf:05:15:8f:62:f4:c2:6e:ab:36:
47:4a:10:19:03:84:3d:62:39:77:5f:cf:a4:fe:44:
6f:a1:11:61:ad:25:f6:9c:22:c4:a7:e2:ca:20:f3:
e4:13:90:31:05:cf:d7:54:10:bb:6f:18:5a:62:5a:
fe:fe:71:ce:fa:3f:d3:5f:bf:df:5b:4f:25:47:59:
42:d0:b1:0e:d1:c4:1e:8a:b9:c2:7d:58:55:a8:ca:
35:ca:92:3d:8d:ff:4d:16:82:82:60:e5:4b:79:8a:
51:49:9b:66:85:e9:01:9e:44:c0:23:77:5c:ab:3f:
e5:3c:78:c9:71:28:b3:65:64:dd:0f:15:14:a1:f5:
b2:3d:8d:75:aa:43:2d:10:3a:44:fd:84:dc:d2:78:
c2:95:94:6e:5d:1c:14:d4:9e:bb:7b:ee:c5:4c:c5:
c5:63:f3:45:23:54:27:5e:02:28:87:ce:79:f5:b1:
8f:48:f1:e7:30:1c:12:14:ad:19:f0:d6:1e:b1:52:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:35:BE:D2:5F:F7:2D:52:49:28:69:DC:5B:1E:3A:E6:A2:7E:6E:39
X509v3 Authority Key Identifier:
keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7f:55:bd:63:cc:2c:0e:30:95:ef:6d:74:30:28:df:6e:b1:
ce:c8:a4:3c:cf:b7:b8:15:77:ac:18:8d:f0:bc:e2:6c:02:14:
2c:3b:36:f2:11:cf:48:c6:e2:4c:68:4e:55:be:d6:86:d0:9c:
26:92:58:7c:9a:71:76:de:63:70:fb:21:31:9f:a7:b2:98:11:
36:53:9f:2c:18:70:ee:86:d8:fc:db:a1:ee:1d:26:ff:7c:93:
0e:61:d6:26:26:55:ee:26:e3:99:d8:ec:6c:e8:85:72:36:c1:
a6:7d:4e:98:17:81:70:c0:0f:ae:97:13:3c:d6:e7:dc:3c:24:
97:ea:71:e4:f3:67:50:3b:7f:27:98:24:16:ed:7d:0a:2b:59:
2f:55:fc:17:ac:71:3a:5c:fe:bb:39:fc:5f:1d:5f:98:18:dd:
8d:60:c0:c3:d5:46:b9:24:39:db:f8:80:66:62:97:9d:aa:cb:
3b:4c:2e:e9:e9:97:52:b1:81:6d:ac:e0:e3:1d:d7:27:3c:01:
38:bd:01:66:bd:ac:51:2b:de:95:24:e8:ea:98:fd:6c:2e:8e:
df:8b:2b:7b:cc:a0:0b:5c:3d:50:ee:5c:10:fb:2b:9c:96:79:
6f:4f:61:5c:4f:c7:8b:78:70:61:68:26:4b:68:f3:6b:04:fd:
2c:24:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:01 2026 by rpki-client