Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier: Oz9xCyHlHdiGajyHStYr7++dNrc2ZbRApiKSbuDyWwg=
Subject key identifier: 9B:BB:6F:F2:58:57:D6:E2:97:FD:F4:06:A9:23:36:F1:79:B1:A4:0C
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 019D38D2F709B67F158007D81ECCD6231BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: JsLS+aEavoCl0/R6b/TfFAqd9rKgSG3yyN6qOQIs4Fg=)
2: NtxXA-SjdgbHpTLASmWhJ6aJbFY.roa (hash: 7oyXL0UoixqVgrFDH/GftqOI7ebeAAZ+o7MusuQL8Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f7:09:b6:7f:15:80:07:d8:1e:cc:d6:23:1b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=9bbb6ff25857d6e297fdf406a92336f179b1a40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:70:2f:34:d9:d5:91:14:cb:fb:49:88:83:
bc:53:b7:b7:d0:e2:9a:02:05:29:ec:18:92:2d:f8:
62:5a:98:ad:8b:11:ac:64:ed:9d:f3:f0:f9:a8:2c:
3e:cd:3d:a1:2a:10:07:e3:05:e0:3a:88:bf:f3:f4:
26:61:7f:e8:53:e3:e2:5b:2e:18:1f:41:b0:18:fe:
80:f3:05:28:89:41:af:8f:97:e7:15:16:fa:f6:be:
3d:4d:fc:62:c7:f6:be:51:15:a9:52:a9:4f:dc:bf:
af:61:f9:6b:38:a9:bc:66:38:12:b1:92:2b:1c:2d:
59:05:d4:c1:7f:22:11:42:0b:ab:28:0f:34:20:db:
f3:90:11:33:03:c1:b3:ae:f0:cf:1f:54:48:92:81:
b3:8a:47:70:7a:f9:9f:f0:96:16:c8:75:44:8a:e4:
48:62:da:fd:a3:7f:4d:21:4b:0f:2f:83:0c:06:b1:
28:19:44:1e:bd:62:b1:6a:23:56:2a:ed:50:1d:01:
3d:2b:20:fc:de:ff:5a:46:0b:9f:6c:0f:c5:b6:3a:
11:17:bf:8d:5d:e3:f6:39:9a:a9:56:4e:c5:8f:77:
d5:a0:89:98:0d:6b:33:fe:6e:3f:9f:2b:31:76:5d:
84:28:3f:bc:97:2a:b8:23:2e:5b:60:8d:2f:8c:f6:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:6F:F2:58:57:D6:E2:97:FD:F4:06:A9:23:36:F1:79:B1:A4:0C
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:c3:59:4b:ee:3d:46:da:cb:8e:dc:f9:66:ef:ba:da:0c:
c2:45:c3:c7:5f:43:47:70:b3:f2:ed:31:92:9d:a4:b6:53:ed:
95:8d:a6:be:9c:0f:77:7c:6d:a9:71:4b:48:a5:bc:ef:a4:01:
e5:fb:cb:95:58:51:d9:eb:e3:e9:07:cf:19:6e:89:25:ac:08:
e1:3d:fd:ed:1a:c5:7a:46:63:86:d9:b4:da:a9:52:64:ce:66:
9d:9f:52:6f:37:40:dc:17:ee:60:bf:61:cd:9f:c2:e5:2e:87:
33:67:71:a3:2a:fa:eb:ea:df:2a:61:15:01:6a:f8:70:ec:4e:
68:48:db:54:e6:54:13:05:ad:85:e3:78:63:ca:1f:73:31:17:
52:1d:4e:2c:07:84:0d:62:40:fb:ce:ff:fc:c8:6d:09:39:28:
f9:b9:0a:df:45:e0:c5:05:56:ed:35:0d:05:e5:ae:c4:dd:fa:
5a:27:46:d0:7e:d1:47:ea:a1:34:9a:d7:e1:8e:02:27:b0:3c:
6e:6e:95:6d:0f:47:e2:ee:16:48:25:cc:6b:c3:5e:7c:7a:f6:
c0:f8:fc:ce:ee:21:6a:5c:68:06:55:bb:e2:20:76:66:0d:ed:
4d:85:5c:ed:5b:98:73:1e:1a:3a:44:33:4a:53:04:7e:61:2a:
4b:68:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:41 2026 by rpki-client