Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: I7kYqN4hScy12RPr5Xfvc0oLDg1gGxcJ2UYHXixQv/8=
Subject key identifier: CE:32:6F:BE:01:32:B8:AF:34:7B:4E:E5:8A:6B:48:B0:E9:69:7F:B9
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019DCFAC1621A9B9D4CBC9C42BAC965C9487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 1691
Signing time: Mon 27 Apr 2026 16:00:54 +0000
Manifest this update: Mon 27 Apr 2026 16:00:54 +0000
Manifest next update: Tue 28 Apr 2026 16:00:54 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: wCHeagyzdGQplTjy03ljtBekCAK0lSK6clyAMm8pdyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:16:21:a9:b9:d4:cb:c9:c4:2b:ac:96:5c:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Apr 27 16:00:54 2026 GMT
Not After : Apr 28 16:00:54 2026 GMT
Subject: CN=ce326fbe0132b8af347b4ee58a6b48b0e9697fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:b0:60:57:ec:35:35:22:d4:c3:06:6b:bc:
c7:7d:ee:1c:a8:ea:f4:eb:65:41:3f:ab:91:fe:0a:
53:a6:3f:3e:17:23:43:1f:af:1a:8e:36:f0:f2:d5:
5b:1c:50:32:9e:89:e6:20:b7:ad:de:73:38:ac:5c:
9a:9f:82:88:ab:e6:9c:1a:ac:0b:e3:ff:0d:56:0b:
21:7a:7a:c2:76:6d:e5:eb:b3:ba:64:91:52:ae:32:
9b:32:b7:bc:c4:2b:a3:1b:ae:54:d5:e2:72:80:e3:
e0:95:ae:1a:e9:12:8a:56:a2:54:55:34:29:05:09:
af:ec:35:91:a6:27:be:ab:ab:18:77:d1:fb:18:c4:
83:19:3b:5e:7d:ce:61:2a:e0:b2:14:39:84:d1:1f:
ee:cf:bc:3a:ee:75:01:4a:c7:d9:57:df:e2:34:16:
40:d1:fd:a6:75:23:de:c9:e1:03:bf:39:76:82:8c:
0c:dc:4b:d1:ff:75:0b:8f:6c:06:da:c8:2d:97:93:
cb:15:80:3b:a1:5c:52:34:6c:fb:64:3d:29:99:6b:
de:04:9a:5b:a6:ed:f8:25:70:a9:48:19:ec:c0:41:
b5:c4:a2:9d:58:42:45:b4:db:65:f7:71:63:56:c7:
c8:a8:a9:27:81:f0:5c:e9:a9:4e:04:2e:6a:5f:d4:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:6F:BE:01:32:B8:AF:34:7B:4E:E5:8A:6B:48:B0:E9:69:7F:B9
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:48:0d:15:d9:46:8f:6b:00:ee:bf:43:c5:64:c2:aa:e3:
55:b9:6c:85:d8:84:51:bc:68:23:b7:3e:06:90:c9:d8:b1:f1:
0b:22:83:83:d3:ea:43:14:00:54:4f:33:6f:b2:2b:5c:b8:80:
01:2b:09:05:c6:18:32:ff:f2:ee:ce:ae:8b:7e:6e:29:e2:60:
f3:5a:35:37:51:8e:f7:cc:6b:de:5b:79:75:60:3a:77:05:3b:
ee:cb:bc:ec:27:79:e7:4d:41:7a:fb:7b:e3:52:e8:e1:9b:c2:
06:f5:fd:1f:75:c9:f3:00:eb:c4:88:32:51:d8:d0:dc:41:5c:
dd:67:18:08:9c:8b:20:37:9b:56:c8:91:b3:e6:48:69:8f:32:
07:ad:90:b7:6c:bc:40:96:d4:59:32:1a:56:b6:cc:6d:6c:cc:
4c:73:f1:ce:74:26:3b:65:88:8a:e2:e8:47:17:57:7f:66:b2:
44:69:39:3f:4d:dd:63:ed:f2:58:60:bc:81:d7:c5:8e:b4:b9:
00:47:2a:33:90:4a:32:f9:bb:14:e1:83:1a:ae:5c:40:dd:74:
66:b8:c6:5b:be:92:27:e1:86:36:bc:88:10:c7:bc:7a:26:bf:
19:f5:17:ee:71:b1:b5:e0:98:24:ef:b7:71:fd:c8:ff:82:0c:
74:ca:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:26 2026 by rpki-client