Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
File: E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json)
Hash identifier: cW5PI+0OD0Czgu8vmHikFgGYAaVOvpD7L/orjafLUZI=
Subject key identifier: BA:46:E5:C1:C7:69:BF:A5:CD:AA:A0:1C:0E:E2:F9:C5:56:F3:CA:3F
Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F
Certificate issuer: /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
Certificate serial: 019D38D388166F73227B8810E421DE9AC30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: 7mM5Vy0FmcI57nVM2N0-AfSVBXc.roa (hash: wP1KvF9QYlB6hksxmuYINc357Erv5WH0zwJdvB/xu/M=)
2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: nmDQTSMcmg5cUVIYooofwNBUj7thMq6X30M5sS/AoaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:88:16:6f:73:22:7b:88:10:e4:21:de:9a:c3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=ba46e5c1c769bfa5cdaaa01c0ee2f9c556f3ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:1e:31:0b:88:5c:d6:18:8d:74:42:f7:63:
5f:8e:6a:2a:ab:2b:46:46:57:83:51:de:86:71:70:
1d:33:be:e9:a7:be:d6:29:a2:95:86:e4:52:b0:9b:
52:38:cf:3b:4e:ed:b7:a8:ae:30:52:f3:0c:a7:8a:
01:df:76:42:24:16:e4:92:b2:4b:9d:d6:ce:aa:80:
01:c6:49:71:8f:d4:21:d5:38:d5:38:b2:8e:4d:17:
9f:eb:8e:c9:cf:59:37:1d:dc:13:0f:86:3c:20:8e:
a6:22:03:6a:7a:5a:35:f2:0f:cb:4a:26:23:a9:ce:
94:21:9a:37:34:73:b0:c6:b7:59:df:23:17:d8:dd:
57:f4:c5:79:ca:79:ac:8f:b4:d5:f1:54:a6:ef:11:
a9:ec:f5:8f:0c:71:be:b3:a3:ba:b0:e8:28:64:07:
b4:99:5d:7d:83:30:98:84:ce:b9:e0:96:66:e5:92:
c3:0b:7f:44:90:2f:84:72:ac:d1:51:73:36:d3:c6:
3e:2e:b2:5d:ee:e7:33:cd:e0:0f:b9:39:c0:5d:64:
63:ea:4f:be:dc:5f:fc:49:9f:26:54:3a:0f:ad:06:
cc:41:d2:b9:b6:a1:06:7b:5b:26:c9:5d:1e:84:12:
ad:a2:0f:df:3f:03:8d:ab:d3:82:26:c9:40:64:47:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:E5:C1:C7:69:BF:A5:CD:AA:A0:1C:0E:E2:F9:C5:56:F3:CA:3F
X509v3 Authority Key Identifier:
keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:de:ff:16:36:65:ef:97:df:d0:1b:d4:fc:60:f9:3f:99:ea:
f2:d4:cd:b2:ab:bf:02:2d:77:d8:76:e8:ad:c0:b0:bf:85:99:
a8:43:a6:d6:2f:2b:a5:f0:da:b2:83:70:ff:22:4e:99:36:8d:
37:dc:65:28:9d:13:09:0e:c8:37:ff:22:04:7c:a9:dc:f0:3f:
c7:33:b0:92:d7:02:f0:db:4e:ac:de:f1:d9:24:b7:bb:ce:84:
0f:1c:8e:cc:96:49:98:7a:24:0d:bd:3f:16:5e:e6:9e:8c:5e:
e7:7f:e4:9f:6c:e4:07:56:f7:5e:0a:ee:6b:cb:a6:e9:6b:4a:
80:b7:92:fe:d1:4d:0b:d6:ca:d9:ab:eb:d4:f8:e3:07:97:db:
f0:7f:d3:ae:46:ca:7b:73:1c:aa:95:60:55:1c:21:0a:52:04:
8f:e9:f4:52:1b:53:9c:65:e7:c8:ca:35:1e:35:de:f2:76:65:
c0:eb:d5:e7:27:6b:03:ee:35:4a:d2:15:5b:77:ad:e6:17:c3:
d2:5b:8b:bf:bc:e6:05:38:b0:7a:ce:8c:72:79:60:80:c5:c7:
38:a8:18:6a:a0:2d:3f:6b:8d:36:bb:cc:38:3c:0c:77:80:d0:
e2:a0:2a:ae:44:2e:ba:6c:67:7a:dc:d0:61:62:da:cc:72:3c:
36:9f:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:27 2026 by rpki-client