Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
File: e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json)
Hash identifier: 8OL/9tmfknpr4/4aVehS4zqwHfBpvcq8mxFcinzsD/g=
Subject key identifier: 28:B1:CD:0B:D5:7D:47:B1:2D:1F:05:D4:4F:86:D2:A7:9C:F7:E8:E0
Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Certificate serial: 019D38D3896CC0DE2327774F6397C464F5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
Manifest number: 0487
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: bE/eFi+25gOP80wvvuwJRxwHIvZW8OL3jnOP6Y2sHhs=)
2: syiGHqWRr52kAI1vbn_mnBjc4MY.roa (hash: tagtkwEIlDskbL5IUXv2uqWmzPh+xNBLyFzqwgk1zJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:89:6c:c0:de:23:27:77:4f:63:97:c4:64:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=28b1cd0bd57d47b12d1f05d44f86d2a79cf7e8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:24:d1:19:12:02:bb:4b:f7:db:4f:40:70:
97:cb:50:68:e2:e5:74:c0:82:19:ce:d4:58:e0:c6:
f7:34:d9:e5:09:9e:29:a2:e8:88:05:10:a8:1f:59:
93:9a:91:93:8c:cf:14:46:3f:1f:31:13:31:dd:c5:
8d:7f:7a:2d:b3:eb:1c:a1:27:6e:ca:10:56:a3:b2:
a8:bc:8c:78:de:ad:a2:73:1d:60:e1:d3:d8:f9:bc:
15:39:e8:ee:ae:1e:a0:fe:6b:21:b6:f1:a9:d2:0f:
43:63:5b:31:e3:b4:54:96:d6:2c:a5:c8:ef:32:29:
fd:fa:a7:ea:b4:be:11:70:02:08:f6:84:d8:6f:f5:
41:8c:dc:f1:2a:d0:e8:ef:65:5b:04:7d:9f:5c:c2:
72:82:ed:15:1e:ca:76:56:ce:48:6d:fc:73:b6:cd:
50:e5:fa:f7:72:25:31:17:20:ef:8c:36:01:83:da:
35:95:60:61:21:3f:41:b1:00:df:19:39:79:da:c7:
4a:db:39:b9:05:bc:f1:f4:d2:2e:68:06:63:cf:16:
5f:c1:09:41:e7:e8:27:42:42:eb:f7:8f:fd:56:88:
02:be:60:dd:89:57:db:40:ae:b4:6f:c2:7d:ff:87:
90:41:03:e2:7a:39:e6:0b:8f:2b:ba:3b:6c:c1:1f:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:CD:0B:D5:7D:47:B1:2D:1F:05:D4:4F:86:D2:A7:9C:F7:E8:E0
X509v3 Authority Key Identifier:
keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:96:bf:2a:65:19:a8:05:0c:cc:a7:09:82:72:73:80:ab:
81:70:19:7a:de:d5:d1:6a:2a:81:10:9b:f2:df:62:9f:e9:23:
96:fa:63:bd:ad:71:2f:b6:2f:75:16:97:71:01:db:6e:e0:33:
ed:7c:ad:74:f9:66:2a:b7:4a:c4:e1:28:37:d3:2e:a3:fd:22:
40:af:c9:73:c2:64:51:61:31:90:66:6d:54:a6:69:45:f6:fb:
5f:68:f0:74:e5:a8:8b:ab:5b:23:be:22:b8:b8:bc:fe:83:26:
b5:08:72:01:9a:6b:3b:59:f7:98:66:5c:64:bd:cf:e5:ce:d4:
a5:00:ca:6b:eb:5d:9e:de:de:ca:da:20:05:26:d4:fc:d8:cd:
50:bf:7e:6c:a3:91:78:01:d5:cc:27:82:ef:3c:42:bb:8f:66:
5e:29:70:9b:e7:17:46:db:36:de:3c:c4:33:ba:f9:dd:9a:55:
db:03:2f:8d:35:33:43:d6:11:c2:29:ef:5c:a5:c6:ca:53:63:
c9:b9:0c:48:7d:13:7e:aa:16:49:0e:16:7b:1c:c4:3b:df:ec:
28:62:39:80:e0:05:97:9b:03:31:23:90:85:24:54:91:51:16:
e5:21:4d:8e:56:ec:30:52:40:5f:3d:8f:97:57:84:8f:b5:51:
8a:45:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:25 2026 by rpki-client