Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: UUTC6HGnI//BJvBx6qjNFcLlYLYBBnUaXXImdWWOHdI=
Subject key identifier: 14:9F:F5:F9:05:F4:4C:1F:AF:BA:66:C5:CF:EE:0D:44:C2:AB:35:9E
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019D382E28B737295078B5D8312EE0C4706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 15CD
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: kd045af50O/MKAsdCnz1YA9WJtfqhijpapAhOZHWcsU=)
2: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (hash: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:b7:37:29:50:78:b5:d8:31:2e:e0:c4:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=149ff5f905f44c1fafba66c5cfee0d44c2ab359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:47:e9:6d:41:6b:f1:56:64:4d:6c:36:9a:
88:16:9c:b2:02:47:37:60:aa:f3:27:47:92:be:4d:
15:36:a1:5f:c9:ad:b3:5e:55:19:76:96:a7:77:3e:
87:b4:09:ce:c8:f0:fd:d7:9b:54:8d:ee:7a:5c:01:
e8:7a:bc:a3:6e:03:ed:f1:5c:f8:69:dd:7a:74:5e:
38:ab:31:65:14:e8:dc:e0:0e:86:55:94:76:20:db:
35:5d:f6:2f:15:84:e7:f1:55:79:8c:6d:90:be:8e:
c0:46:1d:cf:55:1b:dd:86:09:70:39:83:d6:cd:5a:
55:99:f6:42:d6:4b:60:54:74:fc:52:c9:2c:0e:0f:
43:10:8c:88:34:4e:6b:a0:f5:9d:e5:b5:d0:5a:7d:
c3:f5:5c:bd:08:3d:42:73:62:77:dc:6f:b0:6d:8f:
13:83:87:00:8f:8b:93:7a:4d:d5:5e:50:93:37:f6:
57:7a:76:5f:31:5f:5e:f7:49:b0:ef:6d:10:63:fa:
12:e0:f2:5d:8f:51:a1:6e:a3:a8:60:8d:63:da:cf:
1f:87:ca:8d:9c:66:95:e6:d4:50:ce:6a:94:f2:92:
c9:a2:4b:a1:73:e1:9b:75:34:4f:dc:58:5a:1d:78:
a4:9a:b0:cc:df:60:65:f9:63:22:dd:d4:7c:19:8e:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9F:F5:F9:05:F4:4C:1F:AF:BA:66:C5:CF:EE:0D:44:C2:AB:35:9E
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4c:26:6d:8a:4c:1f:5c:1f:14:db:cd:b7:e4:90:62:0c:67:
aa:d7:7c:d7:e7:37:83:8e:bc:8a:1d:39:96:09:a0:3f:68:e8:
ea:40:a5:aa:66:5b:1c:28:09:60:e5:f5:a3:f4:16:5b:6a:c5:
36:9a:82:4b:8d:d1:f6:31:3f:fe:9e:88:91:53:e1:70:84:bd:
81:50:3d:4c:0c:cf:74:29:04:87:a8:76:15:ca:7a:e6:eb:84:
b3:28:40:52:48:df:2a:a8:25:ce:31:96:10:e7:85:e3:48:b9:
98:a3:11:fa:b9:21:45:b0:5b:da:bf:a6:95:55:72:c2:8c:9c:
fb:81:f6:f0:57:2e:24:26:28:2e:bd:20:31:8b:8c:ea:e5:64:
ba:80:c1:d5:ed:15:05:86:84:79:56:8c:1a:90:3f:67:cd:d3:
25:02:c0:53:45:46:10:1f:3d:fc:93:d1:be:6d:a2:63:03:f0:
75:45:4d:7e:33:07:d4:83:49:6e:22:02:f1:7e:7b:7f:05:89:
c7:fd:3c:91:8c:33:72:85:20:44:0d:e0:6e:3e:e4:62:5c:41:
dc:1f:65:d2:73:c7:b9:47:d0:1d:15:18:f8:f1:8e:15:61:cf:
f4:cb:59:d7:61:03:f1:21:7e:d5:60:a2:77:15:f6:b4:51:a0:
e6:d8:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client