Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: F2LAIlXL9Mkk1Lewmcii27cW5pwOiUzlv43AsSHZWgg=
Subject key identifier: B7:88:C1:08:2E:47:F5:D2:14:EC:70:B4:1F:E1:9E:CA:37:7E:70:91
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019D378957C1A4174756751EE8C9349B4AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 13A2
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: G3ctjytF6HtDnlVjhJhcDHmH14HrXfYAC7RFRHM5FKo=)
2: e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa (hash: s4RfX2gBANtJwnzla52YXp/+/wPoOUDbAQSSVBhIKuE=)
3: j_am5tvWSODEl-1F1N6GpUgDtG0.asa (hash: BHkFq4X9N/KlEfD7Uqlg8e5+ZIt+cDIE3YR+BDu/kOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:57:c1:a4:17:47:56:75:1e:e8:c9:34:9b:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=b788c1082e47f5d214ec70b41fe19eca377e7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:cb:4b:ce:e8:c2:54:6f:5b:3a:da:c0:4b:
58:15:4f:64:8a:5d:31:83:27:1b:1a:04:cb:72:c9:
d9:5e:43:78:4f:3c:5c:c4:ef:7f:ee:b5:d6:12:fa:
e7:19:03:11:8a:90:3d:62:fd:03:94:d4:d0:96:d8:
db:40:c7:37:a9:7c:e9:74:5e:95:65:69:7f:ca:f7:
07:bf:6b:4e:3f:3f:fd:05:1b:43:2e:a8:a9:1b:28:
8c:c6:6e:30:a1:93:7b:8c:8e:be:a3:21:d4:b9:42:
f3:c9:2d:bf:7a:ec:00:d3:93:e5:af:53:ab:49:e2:
11:39:0c:fc:bf:1f:20:c4:f0:97:46:99:ab:98:27:
0c:79:31:bb:2a:d3:a9:b7:d9:a3:31:6a:24:ce:44:
7d:cb:bf:35:51:65:74:47:aa:22:44:16:6d:4c:ec:
99:e2:f1:00:aa:7c:2f:ed:3f:7a:c5:b2:91:eb:30:
d7:30:a3:66:88:bf:04:f7:c5:4c:77:bb:69:92:d7:
3f:05:9f:ac:e8:be:f2:8a:42:b5:81:f7:a5:aa:cf:
ba:f6:54:99:20:d0:b7:6f:e7:65:a8:69:ad:8a:39:
e6:a3:28:26:e0:4f:be:51:5a:91:50:a9:14:81:64:
b7:bf:66:01:d3:30:66:7d:df:06:50:d3:15:61:fc:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:C1:08:2E:47:F5:D2:14:EC:70:B4:1F:E1:9E:CA:37:7E:70:91
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:5d:f8:25:82:f1:b4:77:da:16:06:f2:bc:14:c4:1e:9a:
62:a5:30:86:0e:84:df:e5:84:c1:9e:5b:4f:43:19:9c:b0:88:
91:8b:b9:6d:5d:32:5f:78:53:cb:12:77:0f:29:ef:34:a9:ad:
22:25:2f:a1:fb:2b:8e:29:6c:fe:c4:6c:db:e6:b7:5a:8c:20:
f0:18:bf:8e:b8:ea:e3:e6:ad:c2:32:5a:41:ed:9c:86:d5:e5:
b0:a5:53:d4:0e:61:5f:e6:f4:3b:1d:0d:ed:4e:24:b1:ca:cc:
9d:5b:c8:ec:3d:82:94:07:b0:a3:57:0b:b2:a1:22:be:da:25:
03:2a:f3:f6:b8:41:57:e4:6e:cc:61:94:aa:b2:56:90:88:b7:
3f:c6:c3:36:81:3b:ec:1d:bc:87:ed:5e:ee:14:9e:bd:19:f5:
ff:30:b2:c0:60:93:f6:e4:a1:d9:0e:cb:d3:e3:d7:20:3b:da:
f5:05:40:74:ef:c1:4a:47:fc:ad:a2:96:2a:f6:05:55:e6:0a:
40:ee:a9:09:59:4a:80:15:8b:42:d5:13:78:44:f2:72:09:9d:
4f:6d:67:11:7e:eb:e4:f5:42:33:c6:b5:c3:61:0b:ba:cc:10:
51:91:23:af:3b:2f:ae:11:39:86:08:9d:66:a1:3d:48:0a:aa:
d2:e6:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:24 2026 by rpki-client