Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: MqB7RA4FAEBNXGPkLH9slcludpCR2KkrOglkvaFEGac=
Subject key identifier: B3:60:03:23:0C:E7:97:C4:AF:B6:91:75:4F:69:33:76:00:60:BA:1B
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 019D39E55BDD2CC70536D4539E469DA52C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: 02ED
Signing time: Sun 29 Mar 2026 14:00:25 +0000
Manifest this update: Sun 29 Mar 2026 14:00:25 +0000
Manifest next update: Mon 30 Mar 2026 14:00:25 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: fDJrLcQeSzsZrqszUV5n0QPKq0cutykfMoiqrQZAFH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:5b:dd:2c:c7:05:36:d4:53:9e:46:9d:a5:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: Mar 29 14:00:25 2026 GMT
Not After : Mar 30 14:00:25 2026 GMT
Subject: CN=b36003230ce797c4afb691754f6933760060ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:b2:be:b6:72:cf:5a:9b:86:1b:05:d6:10:
d4:50:c2:b9:25:4f:7a:22:af:11:f5:ee:4e:12:01:
b5:83:f2:6e:f6:42:84:5f:80:3e:41:e2:b5:f2:f2:
b1:58:d8:17:69:73:c5:c0:b2:66:42:5f:db:42:ba:
1d:4f:33:be:44:5e:5c:89:6c:e7:62:d2:8b:c3:2e:
fb:52:c0:dc:39:6d:53:d9:f1:c3:ba:85:99:89:0e:
e9:6d:2b:c5:89:2e:7b:da:4a:61:0d:de:57:fa:31:
01:df:46:76:fa:f0:94:6a:4d:a5:93:a9:cf:12:8b:
38:fc:83:74:29:f7:65:90:19:43:ec:1f:89:51:8b:
4f:ef:92:01:7c:69:35:45:7d:c7:40:db:45:96:a8:
c6:7d:2b:21:9c:ec:c8:36:04:66:b9:4a:75:be:33:
1a:71:80:6b:e8:36:e0:c5:23:39:44:89:a4:11:35:
98:18:0a:19:bd:85:ba:6f:33:b8:18:27:5d:55:f0:
a6:f4:32:eb:78:2c:33:cf:3f:4b:25:38:82:b8:fa:
c4:4b:d7:ab:48:b3:08:87:ae:e7:f5:2d:43:d7:2d:
40:9b:7e:fe:49:fa:aa:1b:12:b0:2c:df:15:46:b2:
ca:7c:84:27:06:b5:ee:38:09:76:f8:3e:02:75:71:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:03:23:0C:E7:97:C4:AF:B6:91:75:4F:69:33:76:00:60:BA:1B
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:35:df:45:7a:71:1a:15:d6:73:f3:9d:cf:90:38:fe:1e:1e:
20:00:b1:bf:67:ae:93:9e:8b:b7:d7:0a:69:72:51:e2:57:df:
7c:c6:fa:3b:12:99:0e:37:98:39:50:bb:e6:6c:57:b1:c5:40:
57:28:28:7c:29:0f:fc:36:6d:68:cb:d1:3e:26:de:99:f6:b7:
99:ea:ca:cb:06:d1:2e:6b:0c:d8:69:10:1f:0b:0e:a6:87:41:
1a:4f:14:76:08:b5:2a:f7:b2:4d:61:b4:dc:f9:79:c9:e5:80:
99:94:f0:db:78:16:f5:bf:2b:fc:01:61:1e:c3:a9:7d:73:37:
99:86:9c:18:43:41:38:f5:4a:aa:9d:0b:e8:60:41:05:44:1a:
dc:87:d7:fa:4d:88:c5:4b:7e:3b:8b:80:ce:16:14:5b:ec:07:
2b:1a:7b:21:04:95:e6:a2:b3:b6:05:e7:43:ea:cd:cc:27:aa:
b7:11:72:86:22:61:22:6d:2d:49:7c:c6:cb:70:b3:2b:76:d5:
ed:cc:75:18:75:0e:41:e5:3e:e8:f9:24:2c:63:7b:b8:4d:af:
de:a0:e1:8d:bd:68:2e:92:8e:6d:9b:db:2d:98:30:9c:11:3f:
24:7c:6a:09:a0:0b:9b:dc:e5:4d:85:87:49:ba:cc:03:3e:5e:
60:0c:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:05:59 2026 by rpki-client