Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: 0TLXS8IkkVrnzZrQTiPTgVOZeJlioDOuAiwPZUv/1uU=
Subject key identifier: 25:02:45:39:4E:9C:FB:9E:B8:96:1F:0E:8C:5E:90:55:BA:EC:2E:B4
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019D37F6FDE7A7EF0A6C0A2ECC20A4F5AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: EWx88v7b2MS4df75xtp1hMGTniq3R9SuUpLegtaPlps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fd:e7:a7:ef:0a:6c:0a:2e:cc:20:a4:f5:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=250245394e9cfb9eb8961f0e8c5e9055baec2eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:a5:4b:56:96:78:48:17:09:5d:4d:d7:ef:
34:82:42:09:de:85:f4:ec:5d:d5:22:bf:58:c4:06:
70:34:fd:51:0a:46:43:19:fd:d0:21:96:4c:b3:77:
fe:ed:f3:3c:ba:56:4d:66:35:fa:99:12:bf:e0:10:
d4:bc:08:78:91:a5:41:6e:31:21:f0:67:31:b8:08:
d4:7b:2c:c6:d1:ad:c9:cb:88:0e:22:53:f2:a5:75:
9c:36:9e:b9:6d:d7:d0:f9:f5:11:22:40:80:33:49:
55:14:7c:1f:2f:77:40:bb:77:b4:53:c4:7f:50:36:
8d:c1:a1:8b:6c:9d:cb:1f:76:cf:05:1e:47:a3:85:
f4:bd:be:0d:6e:78:3e:39:ff:2f:a5:95:90:71:90:
e9:36:eb:35:0d:df:7d:53:f0:35:38:73:e5:6b:34:
c2:d1:78:f8:59:07:56:ce:5f:c7:7e:e2:24:68:bb:
d9:2f:69:69:3f:78:ba:7b:c2:6d:b0:eb:cf:75:8d:
94:28:b3:97:eb:d6:9e:e9:36:83:ad:10:01:13:01:
34:40:b1:c6:17:4f:96:81:51:ce:97:c7:f2:4b:0f:
04:f1:4c:c0:55:e0:d4:97:ca:34:ad:01:cc:8b:4f:
5e:43:36:47:17:36:5f:17:6e:70:9c:6f:e9:a5:3e:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:45:39:4E:9C:FB:9E:B8:96:1F:0E:8C:5E:90:55:BA:EC:2E:B4
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:93:a0:26:00:df:a7:0d:ac:18:7b:8a:04:c8:99:16:68:cf:
c3:f7:7c:4c:a6:0b:5e:bc:6b:22:66:0f:49:f0:e4:f2:61:08:
aa:c1:16:e3:12:07:a4:05:3c:02:ad:2c:9a:c6:ce:65:5f:8e:
4f:03:23:09:51:f3:0a:f8:a6:32:d6:d3:bb:fa:dd:1d:ee:7d:
93:3c:63:53:ba:ad:a6:fc:98:f2:ca:03:30:34:71:2e:6b:d7:
fa:30:97:18:16:b9:a7:10:12:3f:ac:27:c1:8d:9e:e8:2a:ee:
3b:4c:81:90:7a:87:9f:eb:f1:32:08:e1:85:c7:89:96:26:9b:
a7:ca:01:d8:e6:ee:5b:55:d0:f3:71:4d:21:23:8b:1d:bd:95:
ec:f1:6e:33:5f:13:dc:4c:26:9d:c4:50:b1:0d:e4:60:13:d9:
48:68:72:f7:20:11:bb:80:79:57:55:57:09:2d:fd:14:94:2b:
c8:e1:09:25:6e:fd:c2:04:5e:71:7c:bb:5e:77:e4:a8:47:da:
fd:e0:9d:57:10:33:73:0a:f5:1e:47:43:44:30:2a:75:f5:b9:
ab:05:ee:45:2e:62:6a:f3:aa:34:e8:ba:c4:4d:3c:16:e9:cd:
5c:bf:04:b7:dc:e5:c3:0c:59:92:15:1a:4a:d7:91:89:6e:a4:
6b:2d:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:42 2026 by rpki-client