Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: CJLJZkiuAgvEvb+oAuOuRjD53qpAh4McGUk3K8JchiQ=
Subject key identifier: 65:34:C4:60:EB:E3:B8:7A:F9:76:8A:07:EA:E7:06:F3:42:C7:C4:D5
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 019D38D3CEEA012EEBAC154A2AB9E5BF6B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: IGtfnayDYE0TSOhGAMPZnQ3qemqfKhoA9ZYFqSpe+IY=)
2: mR2p5e45av46CgVC8ySc8ptiq3w.roa (hash: HkKfgbvwzrYK3bDQighWrvWFH9JPW7Gk2xH/eoftL1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ce:ea:01:2e:eb:ac:15:4a:2a:b9:e5:bf:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=6534c460ebe3b87af9768a07eae706f342c7c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:37:7d:3b:2c:69:1b:9d:87:e2:92:37:1e:
35:16:3b:4c:53:4f:84:03:a1:7c:15:10:8f:22:02:
b9:a7:20:02:a1:5a:0a:8c:ce:f9:76:20:6a:93:71:
1b:05:d7:0e:d8:b1:f9:80:14:5d:71:4d:48:7e:75:
0a:b9:2e:63:6d:7e:94:12:8f:f1:ed:1b:a2:03:be:
8e:78:06:27:d4:b8:10:79:f4:c8:88:01:71:d1:8b:
c6:98:38:ba:1d:d7:99:2e:11:99:21:dd:bb:cf:ea:
e2:7c:f8:fe:5a:bf:ae:4d:24:83:c1:e5:0f:4e:90:
5e:69:b8:45:3a:42:8c:fc:8b:59:ad:bf:63:61:99:
42:4b:e5:ff:fd:d5:1b:7e:85:c3:2d:15:f3:c2:78:
b3:80:f5:2b:1a:3a:ff:e7:44:a5:79:e1:3e:d4:f5:
a4:c1:b8:82:4c:af:d1:e5:a2:17:54:ad:ad:8b:5f:
a3:7c:7e:9d:f3:7a:25:48:19:91:42:77:b7:bb:fb:
9c:85:63:64:3b:1a:69:3f:de:c9:90:35:81:99:36:
9d:17:90:88:04:b3:a7:68:1d:69:f6:27:36:3b:15:
a6:71:33:8d:25:56:07:65:76:76:7e:59:58:3b:c2:
2f:ec:fd:ae:92:a6:3e:ff:29:69:96:48:30:76:f9:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:C4:60:EB:E3:B8:7A:F9:76:8A:07:EA:E7:06:F3:42:C7:C4:D5
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:53:2d:69:64:b8:69:38:ef:93:0b:0d:d0:df:c9:7f:d2:00:
0a:f6:1d:6b:58:f7:99:27:22:17:4a:0e:04:e5:0a:b5:c5:c6:
3b:eb:90:3a:33:76:c5:40:b1:1d:1b:70:41:86:9b:12:87:34:
d6:e7:68:5b:2e:37:43:bd:b0:8e:c2:7c:e6:79:43:d7:c6:ef:
79:62:bb:7c:55:91:39:40:f4:1e:6d:a8:c5:96:9a:0d:56:52:
75:19:4f:dd:7b:ee:ae:40:33:46:14:7f:5d:8b:0a:2c:a8:6c:
f0:7f:67:76:2a:84:86:c5:f3:85:52:ec:18:54:e3:72:9a:b2:
0b:5b:4c:e4:66:5c:bd:93:38:15:9c:33:8f:1b:3d:55:35:29:
c7:56:0e:30:b2:3b:0f:4f:29:f6:29:af:05:8c:f5:bd:dc:26:
4c:cd:8b:ce:66:6f:fc:b0:98:f5:ef:50:c6:51:cf:f9:83:ef:
fa:60:e2:56:03:3f:99:dc:ec:d4:5d:ce:98:ec:18:59:5d:0b:
f8:09:21:30:ad:c2:86:28:a1:c1:44:c1:60:07:37:8a:05:a6:
6c:a5:3b:e5:c2:c2:3d:04:8a:de:d6:62:9a:ed:23:19:af:e0:
f9:58:05:0d:bc:c1:ef:b3:db:00:55:5e:79:98:ab:f3:4f:28:
1a:05:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:33 2026 by rpki-client