Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: WYp/zVXh8waeQeuElB71eMhT7iOZzUvVtfkhDFhJkv8=
Subject key identifier: 13:29:A2:A4:45:79:DE:0B:85:EC:1C:4C:91:00:0D:00:BE:E1:25:44
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019CE591178EE0FD1AD72AF48BCC5EDD911A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 17F4
Signing time: Fri 13 Mar 2026 05:00:17 +0000
Manifest this update: Fri 13 Mar 2026 05:00:17 +0000
Manifest next update: Sat 14 Mar 2026 05:00:17 +0000
Files and hashes: 1: AWdnvO_fGYURQMiK3WsDBvu78og.roa (hash: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE=)
2: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: h2ixdqwwGkdImU7TJP0KRkWPUbYte08MFolxaRboPrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:17:8e:e0:fd:1a:d7:2a:f4:8b:cc:5e:dd:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Mar 13 05:00:17 2026 GMT
Not After : Mar 14 05:00:17 2026 GMT
Subject: CN=1329a2a44579de0b85ec1c4c91000d00bee12544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:e1:5f:e3:7f:17:2e:c2:5e:ff:99:3f:18:
0a:08:1a:95:b4:80:5c:30:44:ed:d9:5d:e9:65:07:
ba:9f:59:99:d4:6b:a2:19:5a:d4:aa:76:eb:76:90:
96:78:d7:0a:2e:92:28:5b:bd:51:bd:3a:c3:a6:b8:
03:64:54:66:24:55:ca:d8:25:2d:69:0a:88:d9:17:
dc:4a:2e:c6:5d:56:08:82:8f:e8:fc:a9:32:61:be:
90:3d:29:ee:90:95:99:a4:9c:01:d8:22:1d:09:11:
f9:df:00:b4:10:1d:c7:ed:f9:57:b2:22:7f:32:c1:
c7:d0:f3:80:a4:12:1a:59:27:07:46:1e:49:bf:4c:
bb:ca:47:1b:c6:53:37:1c:ed:4e:eb:34:dc:5c:21:
ea:a8:db:8b:e2:12:f8:4c:d0:8c:60:36:21:45:fb:
94:26:4e:1f:e8:1d:c1:07:60:ff:84:d1:7f:24:03:
71:f7:62:ec:d2:0d:10:56:be:2f:5b:ae:7c:2d:bd:
be:e2:a9:40:1c:bb:89:30:4a:3a:19:28:67:8a:aa:
1e:ee:44:6c:8b:20:0a:b0:ae:d9:5f:31:e7:dd:c8:
f9:25:6d:9f:57:85:6b:69:4e:28:59:52:49:45:a3:
55:11:5b:9c:b6:9f:f0:88:99:05:0e:6d:d7:2a:8a:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:A2:A4:45:79:DE:0B:85:EC:1C:4C:91:00:0D:00:BE:E1:25:44
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:dc:52:61:43:25:6f:6e:35:41:40:77:2a:8c:5f:fd:a6:
7b:a9:c8:f8:31:70:82:d3:9b:fa:72:51:07:c0:39:40:fa:74:
30:49:4c:af:25:2d:d8:8c:84:60:67:17:5f:41:6d:ac:62:d5:
ab:66:be:3c:9d:e6:4f:c3:e8:48:e9:f3:86:de:4c:ae:cb:08:
d7:6f:15:23:cc:ca:ea:65:f8:b2:b8:ba:f1:ce:f1:cc:42:ec:
27:ca:1c:cc:c3:ba:bf:c9:e7:f5:bd:82:36:43:56:75:76:1c:
1f:54:c3:46:5c:95:a0:48:d1:24:5d:fd:aa:91:1c:cb:8f:b9:
93:13:cd:80:04:c8:b0:b2:55:59:b6:b8:50:f7:a4:25:b0:eb:
c8:4b:a1:fc:de:22:7b:03:61:d8:cc:8f:2d:e2:f9:ec:f0:ef:
96:cc:de:2b:a5:db:93:70:ad:3b:7d:3b:08:8c:2e:a9:84:0f:
0b:23:b0:3a:06:eb:69:1b:fc:4a:7f:7d:48:96:db:dd:33:2c:
98:7d:ce:df:4c:28:50:d4:43:0f:62:34:9b:3d:59:e6:15:2f:
05:59:e4:f7:d3:27:cc:4a:9b:eb:5c:55:d6:e7:08:b7:e8:6e:
d5:21:1f:c0:fa:67:f8:a3:31:34:5c:78:38:b2:42:a2:58:bd:
d6:92:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:09:34 2026 by rpki-client