Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
File: E5TuUsNlrR06vA4w5A0RBZkmF5A.mft (raw, json)
Hash identifier: Qfhkv2gNMN9nfzzKUz2shTuQaOGA5vX+FW4/xTVzyRM=
Subject key identifier: EC:C6:22:2A:49:93:A6:44:8E:E8:F8:75:3B:2E:30:92:D0:BD:C8:8F
Authority key identifier: 13:94:EE:52:C3:65:AD:1D:3A:BC:0E:30:E4:0D:11:05:99:26:17:90
Certificate issuer: /CN=1394ee52c365ad1d3abc0e30e40d110599261790
Certificate serial: 019DD3E8E7F1397BAB09252F01B811E98093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
Manifest number: 02
Signing time: Tue 28 Apr 2026 11:45:49 +0000
Manifest this update: Tue 28 Apr 2026 11:45:49 +0000
Manifest next update: Wed 29 Apr 2026 11:45:49 +0000
Files and hashes: 1: 67omSHCgJ7E6ODNlsF6qaRqTPEA.roa (hash: dOFOtK+G0q4faDtqEdXQ7Mev65YvmGNEPtq6H3hEE94=)
2: E5TuUsNlrR06vA4w5A0RBZkmF5A.crl (hash: jcPNZ2+BgjTgtI68600eZ9qmpk5IJWw92mpWdMRilCA=)
3: isUJZOaXIRAqYRY6Xld132B6Ex8.roa (hash: NI6Uy2XnIgyFjNGQe4ZCVVIsMvDHrME9JquZr4Xe+qs=)
4: oqTmfsc1D4MnyBsZee6BcgL9gJo.roa (hash: OWbz1TN8yFNhIWGhpwvJQESVbEDOFQPGS/pO8lsLego=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 11:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:e8:e7:f1:39:7b:ab:09:25:2f:01:b8:11:e9:80:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1394ee52c365ad1d3abc0e30e40d110599261790
Validity
Not Before: Apr 28 11:45:49 2026 GMT
Not After : Apr 29 11:45:49 2026 GMT
Subject: CN=ecc6222a4993a6448ee8f8753b2e3092d0bdc88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:7d:99:27:b2:e9:09:0c:ee:f1:d3:ab:7a:
3c:22:2b:b5:00:19:d2:ff:89:06:20:5d:b8:ce:8c:
be:46:4b:60:b0:87:12:1f:88:0a:b3:78:a6:f8:23:
b0:34:c4:ed:53:81:c5:14:fd:9a:16:d4:99:c9:30:
3e:58:85:66:7b:bd:91:ac:73:16:35:16:96:18:8c:
c3:65:d9:28:4e:c1:74:7b:2c:9c:5a:9d:42:23:81:
b2:7d:d2:29:da:08:14:3b:6b:5a:5b:bb:33:c4:8d:
97:1f:c4:4a:94:a7:25:85:c0:14:6c:ff:34:2b:e1:
83:ef:e0:9f:da:0d:74:fd:6f:a4:fc:ef:f7:cb:0a:
f9:30:3b:65:ce:da:9f:8a:a8:e8:b5:42:ef:c9:f6:
e8:7e:ad:92:4d:6d:b4:85:ea:e9:8d:85:a4:11:e7:
61:4e:19:2f:d5:47:b7:82:13:3e:e0:de:f6:76:35:
92:e3:40:13:9c:55:3c:69:50:cd:98:73:c3:07:c5:
c8:5c:cb:b8:c5:0f:ad:59:51:b8:29:bd:fc:f6:b5:
2d:d7:41:b2:31:6a:fe:ae:94:9e:55:ef:fb:f8:45:
d7:16:c5:22:86:57:89:31:31:e0:ab:64:c6:d8:79:
c2:cf:9d:1e:79:89:21:12:65:0b:63:30:85:d1:43:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:22:2A:49:93:A6:44:8E:E8:F8:75:3B:2E:30:92:D0:BD:C8:8F
X509v3 Authority Key Identifier:
keyid:13:94:EE:52:C3:65:AD:1D:3A:BC:0E:30:E4:0D:11:05:99:26:17:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:6d:83:9d:4b:93:97:cb:09:0e:db:03:bf:21:d9:63:97:
7e:5d:30:51:0a:72:4d:94:a5:81:dc:a2:4e:6f:80:07:be:5b:
53:53:9e:73:fd:c8:4e:46:b6:c8:a8:af:03:02:34:e8:7f:9a:
67:8a:a3:f9:4f:99:58:a7:10:30:f4:69:26:4c:cf:44:53:06:
e8:6b:b5:fa:d1:00:b0:bb:30:e5:e3:1f:1c:92:80:9c:ac:0c:
bb:66:b9:d1:c5:42:ac:6e:fa:89:3a:96:23:e4:46:d9:d7:45:
e8:f3:7c:17:6e:96:85:80:d7:90:dd:4e:af:e3:ce:a9:38:7e:
63:29:99:48:fe:66:94:dd:f6:cc:5d:ac:cd:0e:7d:40:11:1a:
d9:b3:82:0b:26:56:65:0e:a7:ec:4c:d7:0b:c1:0e:ad:6e:d3:
c6:de:43:70:75:4e:8a:6c:21:69:47:43:b9:20:2d:54:99:30:
9a:ff:cc:2c:8c:a7:f4:e5:ff:01:69:8b:a8:11:9b:95:ab:7e:
22:d9:e4:6b:76:34:91:55:bd:4e:bc:5c:cd:b8:e6:a0:f4:3a:
24:d6:23:4e:df:8f:b4:28:d6:d6:ef:75:9e:cc:7e:70:1b:31:
d8:4f:75:de:41:c6:3f:64:60:49:65:0a:8f:54:44:cd:2e:45:
5f:4d:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 18:36:59 2026 by rpki-client