Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File: E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier: /m8Sgl7olDpF8Uw95xcNrZvlBIfrLxrUdKRjQrEr5Qk=
Subject key identifier: C3:AE:81:20:12:F5:C7:1F:EE:3E:84:F3:62:B5:63:4D:7D:05:8B:EB
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer: /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial: 019D3A1CEBAB9074EAA77FA5F45ABBFC57CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number: 0148
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: SWVbiqKTFNMjVQhS0tpWyN5x8EEa5vSwwOmJreph7XQ=)
2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:eb:ab:90:74:ea:a7:7f:a5:f4:5a:bb:fc:57:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=c3ae812012f5c71fee3e84f362b5634d7d058beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:1e:f4:f2:25:ea:a1:4c:15:bc:e7:63:63:
64:c8:97:eb:62:89:9b:38:74:66:c8:9e:e1:88:06:
15:25:1f:23:8c:ba:d4:c6:f5:d4:45:b2:d6:b5:8c:
d5:75:5f:0e:dd:72:43:7f:8a:ae:99:73:0d:8d:05:
eb:67:8d:3c:41:bf:c3:9a:b4:4b:e7:71:09:2a:3d:
11:44:6c:06:f2:94:47:bb:9b:55:29:83:bb:a8:23:
8a:39:02:8b:06:89:4e:89:d7:ca:5f:12:e1:ff:87:
c3:07:44:aa:c2:f4:77:bb:7e:a3:aa:32:7c:88:93:
32:40:4a:a6:b7:3f:64:af:b1:99:26:03:f9:c6:9e:
74:76:8a:3b:02:6d:bd:bd:30:f3:db:ff:09:e0:be:
6f:82:90:37:f1:0e:d4:30:15:9c:1f:88:f5:3e:41:
2d:3a:3f:d9:61:25:bd:7d:4a:78:59:30:5e:e2:61:
ab:1f:d6:ba:af:11:08:b8:8b:0a:71:73:0b:59:fa:
c2:b6:dd:a1:87:3b:a7:0b:2e:06:9d:78:34:e8:1e:
bc:0e:a5:0e:8a:a7:9d:b0:80:7c:0c:e3:85:95:da:
61:7c:09:0d:6b:a8:c7:a3:64:40:01:5b:6f:d2:1c:
c5:7d:86:e5:a3:f2:4e:b7:7e:b0:b9:b5:cc:14:c2:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:81:20:12:F5:C7:1F:EE:3E:84:F3:62:B5:63:4D:7D:05:8B:EB
X509v3 Authority Key Identifier:
keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:30:9d:24:52:3a:0f:eb:d3:69:5a:06:4a:76:a9:09:14:a4:
60:8d:2b:e2:37:82:61:b6:45:a5:4b:c2:52:69:07:73:cf:73:
f1:2f:f6:40:55:92:2c:35:d0:00:2b:88:bd:04:f8:a2:b7:05:
f1:c1:c8:44:d0:e4:08:78:75:ff:ac:03:85:08:35:57:b7:09:
59:70:c8:79:f7:bc:6b:d0:1a:81:63:6d:24:ac:41:51:e5:bd:
c5:e9:a4:38:46:51:07:84:71:1f:ef:99:e4:49:b9:be:41:49:
8b:4f:0b:49:32:1c:db:d5:da:83:46:a3:21:a2:52:71:a6:aa:
fa:57:ff:14:08:69:32:c7:81:d1:4b:06:58:06:ee:32:48:25:
32:3c:e2:9e:bb:ea:a2:2c:09:95:8d:8d:e1:7e:63:77:5d:e0:
9e:fc:d8:66:b3:7d:9e:5e:d6:51:24:d6:24:14:4b:4a:f7:0e:
17:36:5f:a7:af:ad:e4:01:54:7d:a9:4f:e3:f4:f4:36:29:1d:
60:0b:40:95:36:98:4f:ba:9d:3f:05:9b:fc:91:f8:8c:ff:ff:
a3:0b:81:54:54:d0:f9:cc:cd:04:8a:bf:99:6b:7d:74:69:f1:
f0:67:ab:02:b8:b7:50:b6:1e:c0:26:d2:d0:69:8b:6e:5d:5f:
e2:3b:3e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HOurkHTqp3+l9Fq7/FfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWZiNmU3NzAxOGM5MzU1YTUzODg1NmQ0ZWI5ZTUwNjk3
NWY1MzUwHhcNMjYwMzI5MTUwMTA2WhcNMjYwMzMwMTUwMTA2WjAzMTEwLwYDVQQD
EyhjM2FlODEyMDEyZjVjNzFmZWUzZTg0ZjM2MmI1NjM0ZDdkMDU4YmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphUe9PIl6qFMFbznY2NkyJfrYomb
OHRmyJ7hiAYVJR8jjLrUxvXURbLWtYzVdV8O3XJDf4qumXMNjQXrZ408Qb/DmrRL
53EJKj0RRGwG8pRHu5tVKYO7qCOKOQKLBolOidfKXxLh/4fDB0SqwvR3u36jqjJ8
iJMyQEqmtz9kr7GZJgP5xp50doo7Am29vTDz2/8J4L5vgpA38Q7UMBWcH4j1PkEt
Oj/ZYSW9fUp4WTBe4mGrH9a6rxEIuIsKcXMLWfrCtt2hhzunCy4GnXg06B68DqUO
iqedsIB8DOOFldphfAkNa6jHo2RAAVtv0hzFfYblo/JOt36wubXMFMLYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOugSAS9ccf7j6E82K1Y019BYvrMB8GA1UdIwQY
MBaAFBPvtudwGMk1WlOIVtTrnlBpdfU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYt
ZWJjNWI2NzgyM2M1LzEvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYtZWJjNWI2NzgyM2M1
LzEvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDCdJFI6
D+vTaVoGSnapCRSkYI0r4jeCYbZFpUvCUmkHc89z8S/2QFWSLDXQACuIvQT4orcF
8cHIRNDkCHh1/6wDhQg1V7cJWXDIefe8a9AagWNtJKxBUeW9xemkOEZRB4RxH++Z
5Em5vkFJi08LSTIc29Xag0ajIaJScaaq+lf/FAhpMseB0UsGWAbuMkglMjzinrvq
oiwJlY2N4X5jd13gnvzYZrN9nl7WUSTWJBRLSvcOFzZfp6+t5AFUfalP4/T0Nikd
YAtAlTaYT7qdPwWb/JH4jP//owuBVFTQ+czNBIq/mWt9dGnx8GerAri3ULYewCbS
0GmLbl1f4js+2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:21 2026 by rpki-client