Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier: GazdAuWTYt6eIZL991tzePssf1BHMVHAzlDoHMis7ts=
Subject key identifier: 53:2C:33:16:D0:86:A2:F2:AB:B7:36:F4:0A:DF:21:6B:A0:77:E6:80
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial: 019D39E59ECDA9CDDB4076196CFC77FD4D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number: 0601
Signing time: Sun 29 Mar 2026 14:00:42 +0000
Manifest this update: Sun 29 Mar 2026 14:00:42 +0000
Manifest next update: Mon 30 Mar 2026 14:00:42 +0000
Files and hashes: 1: CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa (hash: 5ttQMFlBuHqp4mBzNOycaLf8j5C57Lnf42hbj8hxe2g=)
2: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: wXHMdO+50Xrmr7WvZ/Y9EBPDPglux3exkctVFEbM058=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:9e:cd:a9:cd:db:40:76:19:6c:fc:77:fd:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Validity
Not Before: Mar 29 14:00:42 2026 GMT
Not After : Mar 30 14:00:42 2026 GMT
Subject: CN=532c3316d086a2f2abb736f40adf216ba077e680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:48:1a:d1:b4:a4:fb:21:f8:f6:0f:c9:e8:
e7:6e:f4:8f:16:e7:b9:05:4a:b2:67:b6:64:4f:d8:
1a:76:38:08:46:88:5a:11:6d:e5:fe:53:f4:6d:8f:
76:58:65:f3:04:db:c5:03:ef:57:d1:93:05:4d:db:
9d:6c:f8:d1:ec:ca:02:3b:8b:c0:ae:82:5f:ea:6d:
d6:8f:c9:92:85:d4:ae:6f:f9:40:68:c1:9e:ab:78:
67:4a:4f:61:01:ca:02:50:61:02:d5:23:09:13:c5:
d1:c6:a4:32:32:e9:2f:8d:bd:e5:c0:a6:75:a8:f4:
fd:cf:cf:7b:6c:2b:1e:7c:c4:45:2f:b3:b0:07:35:
85:7e:e7:a1:5d:20:16:df:66:4f:b4:0c:0d:77:91:
c5:ef:a1:54:5d:07:0a:05:61:b1:27:81:1a:5b:a0:
e8:72:ec:71:1c:db:e9:5a:01:8e:17:c9:92:51:2c:
6f:fe:e1:f9:4d:42:1e:37:8a:47:04:c1:2b:9f:44:
fe:07:77:dd:48:41:1d:07:85:8f:c4:09:5a:07:15:
0f:a6:56:3c:24:d7:a5:9b:41:bd:30:13:9c:0c:91:
ec:eb:68:5a:c3:08:a6:a2:37:63:61:35:20:e8:26:
bb:5a:3c:a1:12:55:49:3b:0c:f8:01:e1:33:bc:96:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:33:16:D0:86:A2:F2:AB:B7:36:F4:0A:DF:21:6B:A0:77:E6:80
X509v3 Authority Key Identifier:
keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:ea:51:07:d3:7b:4f:ce:20:d0:75:d4:77:57:6e:ba:e5:
2d:0e:f4:00:1b:ef:8e:39:ef:21:b3:b9:23:b7:06:d3:97:3a:
2f:2d:13:78:b2:22:2b:46:2f:83:37:21:15:51:98:ed:54:e8:
3a:f7:21:b6:fa:ce:9d:8e:4e:72:ca:3a:fc:05:2d:1e:c4:be:
7f:01:c8:4a:e7:ba:57:6f:87:37:0d:85:c7:62:01:42:84:e4:
41:56:75:84:08:40:17:0d:f2:7a:3d:12:9d:46:08:b0:05:eb:
cd:22:5e:6a:1a:01:19:ae:82:a8:a1:e1:c5:d5:30:80:2e:21:
1d:e2:e0:7d:59:ce:ff:40:ef:81:5b:6f:6b:80:01:0d:43:45:
94:0f:2a:c4:82:13:04:78:26:c1:41:1e:03:df:8e:af:41:25:
9c:85:29:83:89:b3:12:91:e4:98:00:fe:b0:ba:e7:e4:f4:b7:
19:e7:d6:7d:3b:a7:d4:b6:3f:3c:31:58:18:c0:65:28:78:be:
04:53:73:15:75:87:3b:f0:3d:6e:d5:09:15:62:3d:05:d6:fb:
e5:ff:6a:67:ac:26:69:f0:55:d4:ac:4f:5c:a5:e9:02:ed:93:
19:16:d9:c8:03:fa:85:be:2a:ce:e5:bb:7d:10:4e:a3:71:5b:
6c:28:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:08 2026 by rpki-client