
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: 1Mfj0RUp5az4vqApWZFmO8SisqDrrJDseP/+thZ8K+4=
Subject key identifier: 72:64:0C:9C:C5:B6:77:71:2F:13:B6:19:3F:C9:2E:C9:33:E8:FC:BC
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019D3865D852035C00C4528721659B694171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 1qHgV2QW9PbnyHBQnFG0Y6ZuYoJF/oYzDq4d8GfnGVE=)
3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d8:52:03:5c:00:c4:52:87:21:65:9b:69:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=72640c9cc5b677712f13b6193fc92ec933e8fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:d8:49:69:73:89:cb:ca:e5:45:b1:c0:f7:
99:15:77:2a:72:09:4b:96:60:09:9d:09:a6:0a:e1:
10:71:d0:eb:37:b6:10:59:92:5c:17:a1:5c:bc:c6:
2c:27:6f:12:64:a3:8e:58:02:09:8e:64:90:c8:52:
0e:dd:7d:09:76:a9:bc:24:b2:cd:7d:3d:b8:de:fa:
be:44:34:a5:08:17:82:1a:26:b4:c1:9b:16:e9:cf:
05:6c:92:b1:41:ab:91:f7:e1:6c:f3:05:3b:10:70:
45:27:79:93:83:11:7e:05:e0:0f:c6:e8:02:ab:33:
64:f7:b3:1a:07:3e:de:9b:f6:6c:43:fd:a8:86:6d:
4e:e3:6c:3e:aa:ad:0c:87:c2:62:ae:a0:91:c5:b1:
e5:c7:73:fe:28:4f:73:9e:b5:45:27:19:24:cd:37:
b4:77:05:db:07:ae:27:09:1a:d4:d8:c1:a0:38:12:
83:e0:af:9f:54:30:1b:59:55:90:d4:c6:a6:e0:38:
25:37:61:39:17:af:e2:70:48:2a:4f:b5:e7:3a:a3:
77:ba:20:96:57:47:d0:2b:72:cf:55:01:d2:f8:6a:
b2:99:09:2b:16:6e:ab:de:76:3e:11:71:b2:28:1e:
26:80:25:bc:76:05:34:8e:fe:0d:cc:79:69:49:b8:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:64:0C:9C:C5:B6:77:71:2F:13:B6:19:3F:C9:2E:C9:33:E8:FC:BC
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ab:bc:30:25:05:ac:4b:71:17:6e:c4:6e:34:0a:78:f8:7b:
c1:28:c5:ba:41:c4:70:6f:e3:88:54:8f:ab:71:15:eb:52:0e:
fa:ed:02:78:13:74:0e:4d:ed:94:32:a4:07:a6:0f:0e:52:b7:
f1:cf:ae:4f:62:76:14:5b:1b:2c:c4:e7:68:e0:14:9a:d0:3f:
3e:6b:3c:e8:f8:7f:72:13:bd:a8:64:25:c3:06:61:9d:5b:25:
0e:85:ba:ee:4d:67:3e:df:f7:76:d0:a6:08:f9:f4:f5:1e:2d:
8d:ff:e7:80:fb:f9:f0:55:06:af:c5:85:78:44:69:ac:0b:e5:
42:59:f3:ef:83:af:c6:e7:f8:fd:3e:53:8a:8d:c2:cb:da:a1:
f9:de:c1:e9:29:13:5d:9a:5d:16:96:6f:2b:b4:30:3b:03:7a:
7b:22:52:6c:0d:e2:4f:d0:9c:54:e7:99:dc:99:32:4d:20:85:
69:66:35:d7:04:98:30:a6:84:77:50:74:16:0d:a5:04:49:85:
5a:bd:6b:4e:e6:e4:fa:e5:62:05:2a:76:49:34:26:0d:7a:5a:
da:12:4b:4b:30:01:3e:8f:ac:4a:38:06:08:3c:d9:1e:51:ba:
61:eb:38:f3:2d:e4:52:6e:cf:55:3f:0e:62:90:26:40:48:89:
bb:53:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:49 2026 by rpki-client