Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: lpGB3ECXybSktFIguMqjUguo5xST08q5e0xY7xV2LV4=
Subject key identifier: 92:74:9E:19:B6:BE:3F:2C:6B:66:71:77:1F:EB:D1:E5:32:8B:3F:96
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019D39AED3580D9983B52592AB1E6105F198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0ED3
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: Bg+IE576HL4um/Rl4CN696LI/q8kdnYv5D4Edz/K8wU=)
2: EodnXNpOUyBjNjY3K3YWA2EuVcI.roa (hash: TKxk7LeBChJbYfrZKELWl7rVNYFHoj3ofoNl/a0KdQU=)
3: WOkIHZ_QXuDVffIDeDyURK804aE.roa (hash: XuXaE0/bL4SMN9Fmdr4I3pvWojHD0UjSff7wtZuLd18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d3:58:0d:99:83:b5:25:92:ab:1e:61:05:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=92749e19b6be3f2c6b6671771febd1e5328b3f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:4d:31:79:45:85:39:ca:a4:a8:b7:46:a4:
67:5b:88:eb:15:8e:e6:0c:02:8b:99:82:d9:94:78:
a2:0b:25:1c:17:9a:e4:15:25:33:da:3b:15:c3:88:
cd:88:d6:39:99:e6:bb:a8:b8:77:5d:e2:e2:5d:e3:
49:8d:a1:a0:13:f2:d6:3c:dc:52:e6:c2:1e:69:e7:
72:1c:93:60:5b:c6:29:fc:05:dc:9b:a5:63:b4:08:
f2:da:b7:ff:3d:53:01:8b:84:8c:72:f5:16:6e:5e:
ba:d1:df:61:92:1c:42:d8:32:41:99:e1:13:1b:b1:
ee:9d:0a:34:fa:05:06:b4:23:e4:92:de:ae:d8:43:
6d:e7:19:94:be:bb:3e:3f:e7:47:1d:d7:2e:9f:e4:
99:bb:30:33:29:28:14:12:60:aa:d5:48:d4:65:c5:
89:ea:82:ae:4e:3a:c8:29:ee:ee:e1:a0:83:33:42:
b7:e4:5e:f4:ee:4f:55:92:57:6d:03:d8:0c:56:8d:
4b:29:34:c0:b9:57:28:3c:c7:38:c2:98:6e:fc:83:
ac:1f:b2:d1:34:b7:ff:1a:4c:69:5b:39:59:15:f8:
ab:02:c4:e3:b8:44:67:c7:7e:7d:4d:d8:58:f2:51:
82:fe:e6:28:bb:f7:ba:f3:09:b7:fd:21:42:f4:75:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:9E:19:B6:BE:3F:2C:6B:66:71:77:1F:EB:D1:E5:32:8B:3F:96
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:19:71:0d:51:63:e2:68:68:b3:62:b0:08:38:8b:af:37:
e9:45:93:3d:1e:cb:ae:6c:82:a4:b6:3d:c1:08:24:68:40:c7:
54:a1:a7:a2:f9:68:a6:1e:dc:0c:17:94:e0:64:86:a2:5f:d9:
d0:0c:70:84:dc:bd:81:34:99:31:11:21:84:cf:1b:1f:e5:f8:
ed:82:33:cd:bc:91:fb:93:19:47:b2:14:78:6c:84:c4:8a:19:
d1:de:f9:0b:59:8e:9d:5c:9c:7c:9c:eb:9e:4d:c4:58:88:12:
4f:a7:d4:da:f5:c6:92:b5:3e:e9:f3:13:a0:ee:0c:df:c6:ce:
fa:21:1d:5d:fa:cd:49:35:d7:08:3a:7e:0e:5a:9d:e8:22:60:
5e:27:fd:33:58:0f:14:3a:da:7d:53:82:17:f0:60:a5:b5:f8:
80:1f:21:c7:57:cf:3c:11:55:6d:cc:b4:cc:39:cb:94:57:d9:
e6:9b:3b:39:4b:33:57:55:b2:f0:9e:db:d2:84:4a:19:a5:16:
24:fb:9a:f1:10:7c:cf:68:9a:59:fa:0d:18:c5:d6:9b:af:ed:
1c:ce:63:87:8a:f9:ea:bc:92:09:67:81:b6:5c:09:e1:9d:34:
73:97:68:ba:82:76:5c:f0:a4:e6:56:81:91:5b:a0:c6:79:47:
85:0c:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:52 2026 by rpki-client