Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: Bes9lOmHFB6RVyxtEKxs624fqHG3Vf3RgeYkJJMuHow=
Subject key identifier: AE:75:AC:34:E2:7D:74:27:E2:72:2D:2A:94:36:63:CF:D5:D5:3C:53
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019D38D3CE018BC7AC56568B44A320632DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 060E
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: WfTr280OH96fFxVo8Y1G0xKfn4VYgejg/Gk0jL2TcQ8=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ce:01:8b:c7:ac:56:56:8b:44:a3:20:63:2d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=ae75ac34e27d7427e2722d2a943663cfd5d53c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:ee:d7:e0:7e:b8:6a:1f:21:e3:3d:9d:b2:
c0:62:35:cf:8b:1f:4e:53:bb:02:bb:77:9a:9d:1c:
5c:63:4a:8a:71:aa:0f:4b:f1:25:fe:9e:24:c4:f0:
34:49:be:c5:bc:6c:c5:77:6d:b9:e2:29:4b:8a:14:
66:1a:30:fd:50:29:0d:e2:f9:18:6b:c3:8a:04:5a:
c5:5d:90:a8:a7:57:c0:5e:36:dd:29:f2:bb:ba:ad:
9e:a8:08:84:8e:71:7f:2c:01:d4:3a:65:71:6b:fa:
fd:83:03:be:72:53:fe:73:a2:14:dd:75:5c:f0:18:
b4:55:a4:7b:37:dd:6f:89:c7:99:a0:51:1d:56:d2:
b5:7b:30:97:41:26:7a:36:f5:f5:f3:84:aa:7c:fc:
af:6d:a7:b9:9c:60:96:34:ee:ff:92:25:9b:6d:c8:
6a:cc:92:23:b8:f0:a7:06:2d:9b:ee:86:e7:e5:5e:
68:08:77:17:06:2c:81:d2:52:04:14:e6:c9:04:bb:
4f:97:f0:d6:8a:ae:0a:20:75:09:a7:e6:d8:9f:5c:
73:d2:19:f2:44:91:4e:22:33:a7:da:ce:c1:95:3e:
ff:a9:43:b5:d1:4b:db:fe:7f:c1:b0:3f:01:77:74:
ec:fe:f1:4b:4a:7c:17:dd:5a:b7:6c:6a:6a:c7:0e:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:AC:34:E2:7D:74:27:E2:72:2D:2A:94:36:63:CF:D5:D5:3C:53
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c6:37:2d:17:23:60:39:1b:59:c1:37:b1:7c:d5:77:24:7a:
37:e9:d6:55:eb:b6:b8:0d:ef:d3:a9:a2:ac:7e:49:e4:cb:ad:
b0:d0:fb:78:e6:08:59:23:69:39:db:c8:15:9a:37:8c:3c:39:
44:33:db:94:24:63:12:05:7a:74:b3:07:b4:0f:ce:22:a6:15:
91:a0:cf:0c:e1:e7:f7:5a:8d:fa:d6:c2:e8:30:4e:f6:e7:20:
02:1a:0c:65:4b:76:ab:72:6a:2c:77:41:ff:21:e4:55:a2:9f:
9d:b1:57:c8:4d:d9:57:a0:dc:4b:7d:96:74:7c:d2:dc:27:dc:
c5:3c:63:3f:f7:91:63:49:e6:b0:fe:ef:18:58:ea:7a:c1:4d:
53:04:57:9b:7e:3c:6a:da:8e:16:76:26:c4:a3:00:a6:d5:8e:
7b:3b:df:f6:5c:85:76:da:5f:00:7a:10:a8:1e:cc:c3:aa:51:
b8:45:fc:99:ea:da:f4:48:57:3d:9c:c0:26:3c:78:7d:69:7e:
e0:d1:74:72:dd:05:4b:f3:a0:a3:5a:f5:c2:58:a7:8e:2e:35:
75:37:9c:43:f7:88:24:1a:80:02:f2:c2:d1:70:6b:7a:ab:88:
b0:6a:86:2b:cc:30:48:7e:e2:e8:86:60:94:32:14:ca:bc:d5:
fd:d5:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:37 2026 by rpki-client