Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File: E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier: XqdeSxc0vi0I19JFsz7WC/J5QbjdAtf28359wLLT+7E=
Subject key identifier: 18:AF:76:9C:DD:26:7C:FE:1B:66:9B:A5:34:38:9F:72:D1:7B:E2:25
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer: /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial: 019D37BFEF807CC74F13E180F8DE5265D816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number: 12EA
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: QzICHo1pnmUIjUG0NaY11N5D/JLWV/8ThwwxMmFzaQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ef:80:7c:c7:4f:13:e1:80:f8:de:52:65:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=18af769cdd267cfe1b669ba534389f72d17be225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:7a:e1:97:56:50:88:56:f9:c4:a3:ea:57:
70:d0:1c:3d:d7:d8:22:c3:81:44:24:9e:16:47:c8:
fb:07:ad:9d:58:c0:aa:2d:7e:3f:d5:b9:1d:7c:ed:
d3:3c:ab:2d:c7:8f:52:17:d0:77:1d:e3:93:39:d0:
e2:08:17:44:8f:24:87:ae:db:e8:f7:4a:3a:45:e2:
57:23:5b:4f:1f:f9:37:bc:19:27:20:df:07:8d:0c:
34:c4:41:50:b5:26:91:3c:01:1c:44:46:d2:f9:f6:
13:72:b2:c8:87:27:e6:1a:e6:5a:dc:f1:94:3b:e8:
6d:b5:ef:ab:de:94:f7:ef:4b:ec:09:f1:2e:78:f8:
c0:02:17:63:c8:bb:ce:e9:ec:02:5e:c5:80:30:12:
9d:59:1e:0f:23:89:78:41:3c:46:c1:4e:82:21:dc:
d6:1f:01:25:b8:05:c2:46:c2:c7:d9:a3:37:7e:6f:
27:e0:a9:d4:81:c2:f1:00:84:84:c9:be:ac:f9:9a:
83:38:26:34:4f:5e:1e:ef:d0:f4:53:15:06:ae:45:
2a:67:da:41:9d:c0:20:dd:58:58:a8:5c:f6:64:30:
14:d7:24:6a:56:d3:a0:11:ad:38:b0:8a:8d:92:e8:
76:59:63:2e:74:ba:19:aa:c8:be:ac:c2:e8:22:ea:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:76:9C:DD:26:7C:FE:1B:66:9B:A5:34:38:9F:72:D1:7B:E2:25
X509v3 Authority Key Identifier:
keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:b6:66:8d:96:3e:bf:07:25:b3:4c:bb:f7:b5:c6:f1:65:
99:b5:b9:e1:63:a1:e1:92:93:72:98:c5:ed:f2:d6:76:65:e1:
49:ed:dc:0e:b0:d9:ef:7e:08:5e:69:97:a9:86:d6:c2:ae:f2:
17:fc:50:44:84:3d:7b:27:b1:8b:3f:62:80:c9:24:5b:f7:14:
1c:9a:df:91:53:8e:86:20:bd:7b:c0:de:c2:61:d5:e9:47:ba:
4b:8a:09:f2:43:d7:f2:4c:8c:6d:44:8a:cb:3b:57:eb:02:ba:
2a:f0:e9:81:4f:cd:d0:f7:5b:23:6f:0e:8d:a7:cf:0a:b8:dc:
ce:2b:f3:00:f6:15:59:fd:19:c6:65:97:7d:c3:9e:57:c2:05:
dd:dd:52:3f:b3:62:56:f0:e2:b5:06:6b:a0:48:23:11:81:2a:
84:5d:51:6e:11:08:0f:5d:df:42:56:18:33:ef:6a:18:01:88:
1d:7f:99:e7:46:fb:56:e2:0f:44:f6:3f:b3:e6:8d:0a:a7:51:
b0:f6:f9:95:f1:c9:e5:52:02:04:1b:d3:5c:22:b1:9f:a2:80:
48:4a:8a:f9:ac:04:46:7e:09:ed:5f:76:ce:db:9b:07:40:24:
c7:c7:d3:61:81:2a:9d:42:f4:d8:e8:72:90:26:b9:fa:56:67:
7d:49:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:12 2026 by rpki-client