Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: /VnHkz+ACwrUIHYZN+nqUjDD+hpZ8BRoKN6XfQdcbeg=
Subject key identifier: 72:87:9B:EB:AA:18:D5:CB:46:77:1A:E1:83:CD:A6:0A:E8:D8:0F:E9
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019D36E503CD7EE76964478F2533B6FFC294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 00:01:11 +0000
Manifest this update: Sun 29 Mar 2026 00:01:11 +0000
Manifest next update: Mon 30 Mar 2026 00:01:11 +0000
Files and hashes: 1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: lCkbVjr9UKtJFmk8eNNCPBPRviPdtTQ1e1TsCS1md3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:03:cd:7e:e7:69:64:47:8f:25:33:b6:ff:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Mar 29 00:01:11 2026 GMT
Not After : Mar 30 00:01:11 2026 GMT
Subject: CN=72879bebaa18d5cb46771ae183cda60ae8d80fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:89:f3:16:27:27:00:bb:e5:9f:bd:f1:07:
5e:ac:0a:58:ab:a5:ea:c3:93:2b:1b:bb:da:98:0a:
5c:3e:ed:a6:94:d2:ec:c0:39:b4:67:5c:3d:42:12:
d9:92:a1:41:ce:66:e3:e4:79:79:7c:05:f8:51:a6:
3f:48:54:bf:4c:44:d4:35:4a:79:44:34:5a:87:da:
2e:e9:a9:41:5c:59:fa:8f:b9:b5:b2:e8:6f:49:6a:
03:f6:ae:02:2a:7d:08:49:49:c6:78:44:cb:75:7e:
10:0e:2e:5f:06:d5:f5:b2:80:81:c9:e3:33:9a:3b:
dd:a2:74:56:94:ec:3a:8f:7d:c5:c6:d8:97:20:68:
45:77:13:65:06:5d:25:0e:9f:eb:f6:93:1e:1c:9c:
ac:dd:49:03:9c:1e:a7:f4:59:de:4b:9f:04:5f:79:
2a:57:6a:33:c8:09:b4:da:d0:27:b6:8d:31:7f:89:
19:6f:6e:d5:9e:72:59:d2:24:44:dc:e2:e1:3b:bc:
e9:99:23:d1:d4:37:ae:bf:b8:da:68:07:da:2a:55:
0c:36:0d:c4:66:f8:0e:fd:85:7b:b6:17:a7:a9:ee:
20:74:9c:ee:d5:57:19:b8:89:f6:1e:70:31:db:8b:
29:07:ba:be:64:fa:63:7c:d4:45:10:f4:05:c6:2a:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:9B:EB:AA:18:D5:CB:46:77:1A:E1:83:CD:A6:0A:E8:D8:0F:E9
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:62:d3:0a:4d:42:23:06:db:7a:e3:13:2a:91:a2:5c:25:78:
86:5f:0b:19:db:c5:5b:f7:54:bc:6a:c5:ff:4f:2b:f4:4e:1a:
ad:45:b4:a1:95:5a:58:25:f8:e9:75:64:55:61:e6:ec:4a:c2:
17:7a:5b:97:0e:8a:8a:8e:f1:ed:e7:a3:45:9d:f9:a5:4f:a7:
42:aa:50:94:48:d3:b5:56:27:08:50:49:e8:dc:c5:43:9b:74:
9b:a2:08:b4:ed:88:33:34:92:53:33:2f:c4:45:cc:92:f9:c4:
f1:39:f2:c9:d4:25:62:4d:fa:1c:f7:32:e8:5d:a1:8a:53:8c:
62:96:b9:59:80:d2:96:e7:b1:42:72:db:82:ae:a2:6d:3c:fd:
1b:a5:2e:17:57:56:ce:c1:9a:43:26:ef:ff:60:71:2b:3f:be:
64:f4:74:b3:9d:b9:d1:ad:68:85:bc:04:aa:cf:b8:9f:4c:fa:
b0:12:ac:26:b7:6b:11:de:88:fa:39:31:61:a3:4c:01:90:fc:
76:4f:dc:7b:52:be:90:03:e1:40:c5:73:e2:ef:b9:5b:83:f7:
4e:da:bb:2f:93:3a:23:66:5a:34:d8:be:eb:76:0e:12:71:a0:
09:d1:14:05:fe:29:b2:ff:e5:30:f2:d3:51:6a:1c:38:c8:d8:
0e:ae:67:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025QPNfudpZEePJTO2/8KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm
MjI3NmQwHhcNMjYwMzI5MDAwMTExWhcNMjYwMzMwMDAwMTExWjAzMTEwLwYDVQQD
Eyg3Mjg3OWJlYmFhMThkNWNiNDY3NzFhZTE4M2NkYTYwYWU4ZDgwZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWOJ8xYnJwC75Z+98QderApYq6Xq
w5MrG7vamApcPu2mlNLswDm0Z1w9QhLZkqFBzmbj5Hl5fAX4UaY/SFS/TETUNUp5
RDRah9ou6alBXFn6j7m1suhvSWoD9q4CKn0ISUnGeETLdX4QDi5fBtX1soCByeMz
mjvdonRWlOw6j33FxtiXIGhFdxNlBl0lDp/r9pMeHJys3UkDnB6n9FneS58EX3kq
V2ozyAm02tAnto0xf4kZb27VnnJZ0iRE3OLhO7zpmSPR1Deuv7jaaAfaKlUMNg3E
ZvgO/YV7thenqe4gdJzu1VcZuIn2HnAx24spB7q+ZPpjfNRFEPQFxir7RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKHm+uqGNXLRnca4YPNpgro2A/pMB8GA1UdIwQY
MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt
NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2
LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGLTCk1C
IwbbeuMTKpGiXCV4hl8LGdvFW/dUvGrF/08r9E4arUW0oZVaWCX46XVkVWHm7ErC
F3pblw6Kio7x7eejRZ35pU+nQqpQlEjTtVYnCFBJ6NzFQ5t0m6IItO2IMzSSUzMv
xEXMkvnE8TnyydQlYk36HPcy6F2hilOMYpa5WYDSluexQnLbgq6ibTz9G6UuF1dW
zsGaQybv/2BxKz++ZPR0s5250a1ohbwEqs+4n0z6sBKsJrdrEd6I+jkxYaNMAZD8
dk/ce1K+kAPhQMVz4u+5W4P3Ttq7L5M6I2ZaNNi+63YOEnGgCdEUBf4psv/lMPLT
UWocOMjYDq5nUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client