Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
File: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft (raw, json)
Hash identifier: +CrS4hn9r2pgr/h3xhZ+VNP+twvabpXTFniLjEMotWM=
Subject key identifier: 9C:50:27:17:1B:16:3A:3A:B3:4E:81:47:75:BE:A2:BD:E2:77:76:6B
Authority key identifier: 13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
Certificate issuer: /CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Certificate serial: 019DD01A0162B6101726ACBCC7CE3510195C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
Manifest number: 22
Signing time: Mon 27 Apr 2026 18:00:58 +0000
Manifest this update: Mon 27 Apr 2026 18:00:58 +0000
Manifest next update: Tue 28 Apr 2026 18:00:58 +0000
Files and hashes: 1: Dg75WaAECc2_16xSrrua_Jl9vNA.roa (hash: Sqm9spSXxwwPSmf7/I85TDjTAS8g51LglO7cWoTaYU0=)
2: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl (hash: 0pfW1hXEXq27D0qNSGYu5TBczGvBfzFB140tJT+CHhw=)
3: e5_vLejBPA3EP_yr_mC9Szf-bWM.roa (hash: RYb6H9omfbHfmdu03QeSOGuQd/N/QMFTHjBVUp9L/MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:01:62:b6:10:17:26:ac:bc:c7:ce:35:10:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Validity
Not Before: Apr 27 18:00:58 2026 GMT
Not After : Apr 28 18:00:58 2026 GMT
Subject: CN=9c5027171b163a3ab34e814775bea2bde277766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:ec:a2:79:a6:3c:3c:23:9c:68:e2:5d:32:
c7:37:2c:13:9a:a1:e5:b9:a8:b6:20:c0:0b:d1:40:
19:d5:a1:df:8b:4e:c8:88:26:4d:20:0c:24:dc:d8:
92:fe:5e:eb:8b:16:12:76:73:29:3a:76:e7:02:e4:
ae:55:de:68:85:63:c2:cf:ea:ab:f8:aa:f0:42:b6:
56:2f:ad:44:17:7d:db:a9:00:c0:08:af:95:c3:4d:
7f:d4:60:d1:da:5a:20:a1:44:6b:84:0a:ff:f2:0e:
43:0b:fa:b4:33:1e:59:84:f3:00:5f:70:ae:3a:8f:
f4:72:51:74:11:b3:b8:f0:03:40:c6:e4:3d:c3:de:
39:2f:e3:09:d9:d8:8d:96:a9:1a:2f:fa:71:aa:6a:
50:d2:85:ec:ef:21:7b:d1:f0:a3:d7:f1:10:cf:89:
66:53:8b:38:a4:49:a7:da:e3:0d:10:b1:7e:35:f0:
23:4d:bc:52:66:b9:35:30:d7:03:5b:55:65:32:b5:
7a:95:98:ee:05:66:00:08:c5:e2:17:23:bf:a8:46:
ea:33:cb:0c:ce:77:c3:83:74:8a:cf:6b:3f:16:cd:
63:03:e3:44:f9:90:f3:8e:6a:00:25:03:37:15:bc:
ab:a8:48:50:cd:b5:8b:c2:51:f5:9c:50:86:a2:6b:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:27:17:1B:16:3A:3A:B3:4E:81:47:75:BE:A2:BD:E2:77:76:6B
X509v3 Authority Key Identifier:
keyid:13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:9f:52:d1:24:a4:94:2d:4d:96:4b:ad:3c:c2:76:54:81:
5f:a4:7b:41:a8:25:ac:d9:5d:37:c4:88:ba:8f:94:e6:cd:15:
86:52:1e:57:c5:31:1a:c6:8a:27:10:55:e1:49:1e:39:e7:50:
f5:8a:af:3d:81:a5:da:5c:79:86:e5:94:54:fd:3c:da:39:25:
eb:41:7a:3e:31:5b:b7:b9:9c:c5:35:e6:04:23:20:38:84:eb:
f9:04:27:3c:16:8f:4e:1c:dd:e6:ee:cf:5c:eb:8a:bc:da:b7:
cd:07:73:35:10:e5:f9:18:12:61:63:68:21:b7:00:0a:f7:17:
3e:dd:35:da:aa:a5:71:7f:67:86:72:01:8b:69:7c:71:c3:f9:
71:39:95:79:ee:fc:fb:d6:3a:a7:e9:37:e8:a2:79:68:41:d8:
7a:a4:54:91:59:25:ed:ba:a4:dd:17:93:8d:c2:52:be:23:41:
27:f1:cb:a2:7b:60:42:f2:4c:8c:f7:c0:4c:cc:5f:23:89:79:
62:c3:0b:33:56:e0:79:24:05:2c:20:e0:71:d1:3a:b8:9e:50:
8e:b6:96:e7:46:93:6e:b8:d6:a7:ad:04:8e:6f:73:38:1e:1d:
a1:d1:40:90:8e:44:44:14:53:0b:ed:e7:ca:2e:52:0c:10:07:
11:55:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:41 2026 by rpki-client