Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: jUN2YQTWEaFfHmsidLNX6ZQVgZpP16V9Zb0JsYBLDGU=
Subject key identifier: 5D:4E:39:79:F1:B8:45:17:00:D3:AB:16:A1:7E:8A:B0:B3:B5:F4:20
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019CED14948AFC232B0E82C86965E6108667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0D8F
Signing time: Sat 14 Mar 2026 16:01:14 +0000
Manifest this update: Sat 14 Mar 2026 16:01:14 +0000
Manifest next update: Sun 15 Mar 2026 16:01:14 +0000
Files and hashes: 1: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: x5NMxOBVPyeLn1YuMsGBn9iFOpg5FZEOIQpwEm0V6ns=)
2: ryw8pANYiWDQuIyjdZ7oamR1t58.roa (hash: 2HMSeXqRqzVzH58INszxQlwSvF3HPks2TZimmKfWKr4=)
3: w1lnaXc0stYti4D5HKapAQ20wiM.roa (hash: dNDg8xo8m9AS8HO+Ntxotl19K7LOzsHs1ntt7tMGKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:14:94:8a:fc:23:2b:0e:82:c8:69:65:e6:10:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Mar 14 16:01:14 2026 GMT
Not After : Mar 15 16:01:14 2026 GMT
Subject: CN=5d4e3979f1b8451700d3ab16a17e8ab0b3b5f420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:97:8a:e7:ce:c2:67:e0:c5:5e:a6:3a:b9:
6d:c2:59:be:36:94:d6:e4:db:42:28:b3:d0:8e:bf:
d5:dd:6a:9a:e5:0e:83:fb:05:3c:6d:f0:53:ad:88:
32:84:de:0b:1a:aa:86:4f:95:06:9c:d5:da:17:2e:
25:a3:73:03:c1:5d:da:da:b6:20:01:81:4e:6a:d9:
ca:d4:61:8f:f8:d2:2d:52:d4:ea:d0:0f:14:6d:26:
75:17:0a:8e:5e:ac:49:13:cc:b0:5f:e1:62:56:69:
af:98:f9:01:7c:65:a8:59:86:c2:2a:7a:db:d3:33:
56:1b:2f:38:b0:94:36:0e:50:8e:df:21:5f:b9:14:
5f:8b:e3:d2:99:2f:9a:49:17:5d:c2:c7:5d:a6:4d:
11:9b:56:1a:4f:4c:da:cd:02:68:61:0f:d9:ee:2e:
fa:d3:e0:28:58:9e:5a:e3:d8:80:11:59:92:fc:2b:
43:88:9f:60:63:fe:dd:66:b2:e1:24:a7:74:3e:18:
d2:5b:4a:49:7e:a7:8a:4e:6b:83:7f:0e:b7:5e:75:
ec:7c:1b:5b:0f:42:45:26:55:ba:6f:38:3e:51:15:
bc:27:09:bd:cd:12:ef:88:76:ae:71:d3:18:05:ab:
e1:8f:3e:e6:90:19:b8:fe:2e:c9:e1:b0:e4:aa:f4:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:39:79:F1:B8:45:17:00:D3:AB:16:A1:7E:8A:B0:B3:B5:F4:20
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:77:ac:63:48:71:36:f2:e4:12:c5:cf:8e:7e:ba:86:c8:17:
75:38:f7:37:c2:8f:84:45:28:02:e0:f5:b3:b8:af:d9:74:96:
ef:46:ef:d4:d0:66:0a:ab:21:a2:ba:36:96:7c:2b:ae:6b:2e:
2e:df:8c:7c:1b:83:dc:d6:3d:d1:25:f8:20:b6:78:5a:06:e0:
c5:93:c6:e2:94:b0:01:c3:16:17:3f:20:92:c0:90:12:00:9d:
0a:ee:44:ad:02:69:15:18:15:38:3c:1e:59:7d:e3:00:35:e5:
85:e6:6c:3a:e2:b0:ff:7d:a4:4e:54:c6:66:d8:9d:e1:43:51:
c9:e8:30:3e:19:a4:61:93:2a:78:b8:27:3e:4b:c3:c9:0c:e1:
42:99:0d:e1:aa:4c:3f:b8:46:e0:46:5f:6a:37:85:16:c3:6b:
47:94:db:c4:3b:a4:45:69:40:f6:9b:b1:fe:b3:3d:45:ae:a3:
f9:1f:17:93:8f:18:f7:ea:95:56:e8:84:5e:4b:7d:55:e6:c8:
7c:2d:f7:c5:24:6f:73:7c:bb:92:c9:53:6b:c0:e0:e8:fb:27:
50:1e:61:72:b9:b1:80:2c:2a:1d:27:17:97:dc:29:0b:c1:05:
df:34:79:00:81:e6:6e:9c:db:9d:2c:51:40:e0:bb:57:13:fd:
18:82:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:19 2026 by rpki-client