Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: hvMd8yH1s/xbs/SjUTV7OWBwKyG6ahkFA919hlG854U=
Subject key identifier: 14:25:73:25:40:DC:8C:47:60:54:59:91:0B:23:36:68:74:FC:A2:09
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 019F17C29FFAFACF0B9197AB6756F8367479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 0858
Signing time: Tue 30 Jun 2026 09:00:58 +0000
Manifest this update: Tue 30 Jun 2026 09:00:58 +0000
Manifest next update: Wed 01 Jul 2026 09:00:58 +0000
Files and hashes: 1: E0bPvqxVf13qVW0K3FOh43rFeAA.roa (hash: L83gXrZ7ml1x6pbEKqasf9zLxkSub+uRzDvUjH/MeVU=)
2: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: S8d7ksdeNW9x0AXXZfJbOYpaFgo9qViNUdMV7+i+RM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:9f:fa:fa:cf:0b:91:97:ab:67:56:f8:36:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Jun 30 09:00:58 2026 GMT
Not After : Jul 1 09:00:58 2026 GMT
Subject: CN=1425732540dc8c47605459910b23366874fca209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:d8:6c:76:35:b0:a6:a8:23:f9:f5:82:5f:
81:50:21:ac:99:fc:c7:70:a7:db:6a:0b:14:08:a9:
ac:4e:58:4f:28:37:95:7b:77:00:ea:dc:dc:48:cb:
25:47:4c:d0:23:3e:7a:a8:31:21:69:bd:fd:80:f5:
d4:b9:38:56:b5:c9:8a:f3:d1:99:c4:e3:ba:9e:ac:
b9:f7:47:26:d2:d3:f6:40:f1:00:37:0f:1b:d1:07:
ab:d3:10:71:0d:0f:b0:fe:be:13:8f:ed:2c:34:e3:
45:d5:d3:1e:02:c4:77:bd:18:21:44:2c:a9:d8:d9:
1e:79:2a:4f:3f:39:e1:1b:ae:a9:49:6b:c8:0c:90:
88:a0:4e:6a:c3:cd:ea:07:95:e6:5d:48:96:0e:46:
7c:ed:84:ca:aa:32:ca:b0:82:16:ff:10:b2:4c:5f:
5a:48:4d:5c:b2:fe:f5:b5:3d:f6:02:de:57:73:25:
8b:a3:ac:a9:67:81:9e:8f:75:60:6f:ec:24:84:e3:
29:b2:30:a2:03:1b:b7:f7:39:5d:51:e5:4d:d4:ff:
cc:d1:02:4d:9f:54:d5:36:dc:c0:db:16:5a:4e:30:
dc:6d:c4:5b:fa:32:05:66:35:15:90:c5:22:a3:5c:
77:ef:2a:b7:03:a6:bc:96:95:cb:e0:ca:a0:c7:1e:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:73:25:40:DC:8C:47:60:54:59:91:0B:23:36:68:74:FC:A2:09
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:cd:ec:e9:53:72:64:ab:30:da:f2:c9:45:b9:a5:11:15:
ac:53:50:9d:c1:f8:58:d1:7a:33:04:a1:a0:37:3c:0d:0c:c1:
d8:18:93:a8:12:58:32:ba:e6:d3:c3:3d:68:58:4a:e3:23:5e:
a5:d5:3e:9d:e6:19:81:02:9f:42:43:b5:ce:3e:d3:1f:cc:9c:
d1:4f:9c:5d:0a:d6:95:01:e5:91:c3:a9:ef:4b:0a:b4:13:8f:
8c:90:94:ef:e9:a5:4f:d2:d5:19:cd:68:2e:af:3d:08:b8:93:
ea:b9:29:62:91:6a:07:83:e8:1b:96:5f:21:f1:9c:bc:30:2e:
70:31:2f:75:00:88:01:02:4f:89:a4:65:39:76:53:a7:49:80:
a1:0d:bc:b0:cf:35:24:7d:68:bc:36:18:b6:f4:40:c3:01:c0:
98:62:85:1e:99:c7:80:9f:b4:2f:46:c5:28:1b:40:ac:bc:fe:
c2:58:69:2e:58:f1:a3:7a:7d:bf:c0:fd:2c:6b:34:ad:1f:86:
db:69:ca:63:15:9a:de:c6:30:83:e7:63:a9:9b:aa:b9:c0:95:
cb:cf:e3:4c:fe:58:71:6b:12:ae:43:81:19:e8:14:32:87:d7:
30:76:ff:e9:0f:83:ec:8d:c9:fa:a6:9e:6b:ee:f6:43:4b:b4:
be:8b:3c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xwp/6+s8LkZerZ1b4NnR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh
Y2E2YjUwHhcNMjYwNjMwMDkwMDU4WhcNMjYwNzAxMDkwMDU4WjAzMTEwLwYDVQQD
EygxNDI1NzMyNTQwZGM4YzQ3NjA1NDU5OTEwYjIzMzY2ODc0ZmNhMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lvYbHY1sKaoI/n1gl+BUCGsmfzH
cKfbagsUCKmsTlhPKDeVe3cA6tzcSMslR0zQIz56qDEhab39gPXUuThWtcmK89GZ
xOO6nqy590cm0tP2QPEANw8b0Qer0xBxDQ+w/r4Tj+0sNONF1dMeAsR3vRghRCyp
2NkeeSpPPznhG66pSWvIDJCIoE5qw83qB5XmXUiWDkZ87YTKqjLKsIIW/xCyTF9a
SE1csv71tT32At5XcyWLo6ypZ4Gej3Vgb+wkhOMpsjCiAxu39zldUeVN1P/M0QJN
n1TVNtzA2xZaTjDcbcRb+jIFZjUVkMUio1x37yq3A6a8lpXL4Mqgxx5+uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQlcyVA3IxHYFRZkQsjNmh0/KIJMB8GA1UdIwQY
MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt
ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj
LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcLN7OlT
cmSrMNryyUW5pREVrFNQncH4WNF6MwShoDc8DQzB2BiTqBJYMrrm08M9aFhK4yNe
pdU+neYZgQKfQkO1zj7TH8yc0U+cXQrWlQHlkcOp70sKtBOPjJCU7+mlT9LVGc1o
Lq89CLiT6rkpYpFqB4PoG5ZfIfGcvDAucDEvdQCIAQJPiaRlOXZTp0mAoQ28sM81
JH1ovDYYtvRAwwHAmGKFHpnHgJ+0L0bFKBtArLz+wlhpLljxo3p9v8D9LGs0rR+G
22nKYxWa3sYwg+djqZuqucCVy8/jTP5YcWsSrkOBGegUMofXMHb/6Q+D7I3J+qae
a+72Q0u0vos8rw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:29 2026 by rpki-client