Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: jgcyEBBSvGCSXlYtRwWILIfWoPK9s6Rshkqtwjr2qCQ=
Subject key identifier: 58:CE:F4:9D:8A:91:43:90:2D:DF:46:1D:82:E1:D6:0B:1B:2D:34:B5
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019D27E0658945FAA1BD0F8E5036EEFFD43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: UGd1PfqzMnFbv/cOEO0RzKjHmeL/JyQtOAR2GClfJlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:65:89:45:fa:a1:bd:0f:8e:50:36:ee:ff:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=58cef49d8a9143902ddf461d82e1d60b1b2d34b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:bb:52:cf:63:4c:e3:9a:df:b3:5e:8b:c7:
9a:59:ea:d7:63:e0:b5:f1:90:79:0d:15:48:29:dd:
34:c0:03:c3:02:41:36:6b:ca:8f:14:df:17:9a:ca:
02:a7:67:c0:71:e3:4f:f2:25:3a:b3:5e:45:14:45:
fa:2b:1a:00:11:49:a9:75:99:58:dd:7b:95:56:fe:
7b:61:22:c6:24:78:0d:60:f9:65:24:e9:24:cf:b8:
14:42:63:a2:6e:43:67:26:b4:0a:ee:03:92:6c:6a:
d1:01:69:9e:e6:0a:4a:c8:40:05:fb:6b:96:4c:2a:
55:62:29:6f:09:7d:3f:77:a1:a3:45:76:96:e8:7d:
e0:36:51:67:b0:6c:7c:b9:38:a6:65:4c:c7:af:b1:
b9:db:be:07:43:87:57:73:1c:49:e6:3a:dc:bf:fb:
e5:37:64:12:12:c8:6b:47:62:9d:ef:d6:f3:ba:33:
a2:b8:39:ab:50:5f:3a:00:a5:28:1c:4d:ad:30:73:
bb:f2:cf:58:67:64:37:cd:c6:d9:7b:41:6c:e9:f7:
c5:c2:03:b4:71:79:59:d2:87:85:a3:0e:81:c1:53:
b8:a2:55:11:b8:9b:fd:1c:d1:47:87:13:7e:91:a0:
93:20:4f:60:e2:1c:a9:80:fa:cc:6f:56:db:b3:81:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:F4:9D:8A:91:43:90:2D:DF:46:1D:82:E1:D6:0B:1B:2D:34:B5
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:b1:21:15:97:05:31:58:ba:eb:a2:83:e8:24:16:6d:ee:
6a:45:4c:19:38:38:3d:5e:9d:b0:cf:41:12:f4:85:2e:81:75:
90:e6:23:00:a9:9d:d3:74:95:d6:e2:41:4b:93:63:b9:83:d3:
18:eb:26:7a:88:7f:a6:00:fe:93:54:b1:8f:f3:48:d7:50:86:
7a:1b:9b:c2:f4:92:33:bf:5d:26:88:92:1a:37:73:6c:ee:2a:
ab:df:79:22:8f:bb:fd:51:11:4b:07:f7:c4:02:5c:ce:fc:8d:
cc:38:d7:fd:7a:15:a7:6b:ae:aa:bf:b0:22:90:12:f2:cb:62:
f7:7c:cb:d5:60:f5:84:9f:54:b6:49:21:1f:8f:55:5a:44:f3:
78:24:f8:b9:01:6c:fe:58:6f:cb:87:cc:5c:5b:ee:37:0c:49:
89:db:dc:0d:af:d6:1f:45:83:60:eb:71:ed:a3:60:30:f6:ef:
40:fd:27:55:2b:06:21:4c:98:9e:e0:c5:78:25:dc:80:af:64:
aa:92:ce:59:93:b3:66:19:a9:31:a4:90:fc:d6:15:03:30:6f:
13:00:a7:14:6b:46:50:8a:e1:b2:ef:86:cf:14:01:f0:10:3e:
6b:fe:30:8e:27:3a:11:bc:01:54:27:52:b7:dd:c7:ea:96:4d:
07:b0:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:19 2026 by rpki-client