Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File: e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier: nbASkUQlhtGR6NnFAZdvvfC/4PkvWIoZk63hMkoUKj0=
Subject key identifier: 9C:06:01:BD:30:54:0C:B8:9B:55:7A:A9:B6:4C:10:D1:6D:8A:2A:49
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer: /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial: 019D107C8457B22283F3A06B022AFCFC7973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number: 0BFE
Signing time: Sat 21 Mar 2026 13:01:28 +0000
Manifest this update: Sat 21 Mar 2026 13:01:28 +0000
Manifest next update: Sun 22 Mar 2026 13:01:28 +0000
Files and hashes: 1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: J4EQt5vmq5velfTwD+Dw9XqUBeF0FFWDHHGaxg012XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:7c:84:57:b2:22:83:f3:a0:6b:02:2a:fc:fc:79:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Validity
Not Before: Mar 21 13:01:28 2026 GMT
Not After : Mar 22 13:01:28 2026 GMT
Subject: CN=9c0601bd30540cb89b557aa9b64c10d16d8a2a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:38:28:3d:c0:8a:d9:00:41:9e:21:ab:0c:
f4:b3:c3:24:70:61:c4:e9:bc:dd:e6:31:da:5c:04:
f6:02:58:26:d2:82:2a:ac:af:a1:e7:e2:58:80:24:
d8:7d:72:4d:83:2c:10:42:ff:c8:e5:c7:7e:96:6e:
71:6f:29:c8:49:25:ab:ce:e3:e6:0b:50:9d:77:1b:
b5:87:c8:04:0a:39:c4:da:32:a9:ed:7b:94:ec:48:
6b:5d:f5:45:fd:35:5d:0c:74:8c:2d:ca:91:3f:fe:
0a:a8:c7:71:2f:37:62:0a:bc:9f:1f:69:ce:9a:62:
8c:47:14:5d:bf:cf:44:3f:fe:80:3d:e9:4c:5e:8c:
7d:bd:9f:4e:e1:c0:3d:29:ff:32:8e:01:4b:d9:88:
bc:4b:27:30:b8:bc:5e:37:f2:26:04:51:d2:14:f6:
af:a4:e2:fe:aa:e9:13:1d:fe:a7:e6:b0:88:00:fe:
a1:a5:24:da:b1:05:94:73:e0:e1:5b:48:03:c4:5b:
2a:9a:87:56:e0:fd:e7:c5:7b:b4:b2:a4:f0:41:fe:
78:92:4e:f2:06:1c:c2:b3:d3:01:5d:bd:db:7d:be:
19:bd:06:e6:ad:de:ef:d3:bb:e4:64:ce:59:8c:7c:
f0:39:99:65:84:a8:e8:02:dd:ce:f6:de:45:e2:8d:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:01:BD:30:54:0C:B8:9B:55:7A:A9:B6:4C:10:D1:6D:8A:2A:49
X509v3 Authority Key Identifier:
keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:59:30:95:50:41:ca:b0:b4:6d:ef:fa:c2:97:5e:aa:b4:
0d:b2:77:28:24:2e:c5:73:71:8b:d3:1d:47:4f:64:d4:05:24:
a3:4c:77:00:ed:24:ca:38:e4:e8:cb:d8:4f:78:b5:95:54:ea:
6a:b1:3e:ad:6e:fc:a4:8d:e0:c6:b7:89:a3:34:9b:4f:b6:ef:
db:7a:cc:72:5d:d5:f9:5a:31:a3:a3:4c:4d:3a:ed:08:d8:c9:
4d:3e:0a:c5:36:e0:1c:02:ed:4b:71:a9:41:5f:aa:82:f6:7a:
de:9a:75:ae:1b:54:8f:9c:2a:fa:da:ee:bb:c9:18:87:8e:07:
87:b9:0a:32:da:9b:af:04:20:cc:f1:bd:ad:e2:87:16:27:ee:
25:a0:a7:10:c4:f4:a9:3d:85:99:e1:7c:8a:f7:d0:3f:76:e4:
4f:9b:e7:2a:d2:df:94:8a:37:29:8a:cf:98:9e:ed:4d:d8:96:
9b:31:5c:5b:cb:ac:69:2b:d1:78:1e:0d:9a:50:6f:2c:c4:52:
88:97:9d:b8:69:43:00:4a:a0:95:b4:63:c6:e3:ea:34:23:bc:
b6:1b:ce:fb:1f:63:8a:31:fb:c7:79:7d:62:12:16:03:81:b6:
c3:22:29:a0:16:c9:b9:5e:a2:de:22:ee:5c:01:ce:f5:bf:b7:
72:4b:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:07:36 2026 by rpki-client