Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: 2lSm8UxIxjvGw/jCkE6x+mZBIgU/Ggk9ka0OxG8rdWM=
Subject key identifier: 28:AB:95:15:ED:0A:10:99:40:B8:04:D3:45:6B:95:CB:04:2E:D8:58
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019D27049802729779C1D3655313C8DAE520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 15B6
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: RBmJ7H3OxXN2Mrk10dPhKrnp9ksoW4Tkm/5IvvzycUU=)
2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:98:02:72:97:79:c1:d3:65:53:13:c8:da:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=28ab9515ed0a109940b804d3456b95cb042ed858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:c2:44:98:f0:a0:22:2b:c5:47:e2:87:e0:
b2:73:56:38:96:dd:ab:16:bd:79:96:75:16:10:c8:
81:78:c0:2a:a6:c0:b4:af:e6:41:ad:1b:1f:4a:4a:
72:0f:6e:4e:d9:a3:cb:a5:d1:e8:a7:be:0f:8b:bd:
8a:82:92:a0:4a:50:d6:24:9c:2c:38:ea:65:4e:3c:
d5:6e:32:f7:c3:59:4c:91:16:14:81:61:f0:dd:3c:
00:01:27:16:78:ab:24:77:13:bf:1c:1b:e7:ed:c1:
0d:c9:83:a9:12:ea:b4:18:e2:fe:d1:ef:c3:e7:6d:
09:ae:bf:69:50:18:08:c5:6e:1c:a5:cb:84:3a:3b:
5c:fb:b4:3c:0a:30:81:38:7e:d1:fa:1d:4a:8b:2e:
e7:53:fb:cc:58:e8:da:78:87:6b:72:66:4d:dd:63:
70:c1:b4:ce:44:99:60:64:27:8e:e9:ff:b4:b7:5a:
e2:4c:71:d0:f5:15:75:f8:be:35:21:87:d8:30:50:
79:31:96:39:d3:b6:68:33:9c:ba:64:e1:d1:60:5b:
41:21:79:67:c9:6a:6e:35:be:14:71:aa:27:53:23:
13:d5:cb:34:a5:91:d5:04:8a:88:7e:cb:bf:3f:e9:
4a:5f:6b:be:a8:41:64:78:e7:57:3c:4c:14:ce:af:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:95:15:ED:0A:10:99:40:B8:04:D3:45:6B:95:CB:04:2E:D8:58
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:33:79:75:90:20:b2:e7:0f:ea:94:af:db:ce:ca:de:da:
0f:ad:d4:29:1c:fb:ce:ea:3a:47:bc:b0:0b:56:6d:e8:b1:0a:
ff:36:9d:60:19:fc:8b:e5:a7:f5:14:c3:d8:32:30:78:b0:3d:
c6:7c:02:b5:09:93:26:09:ea:c7:e6:a0:90:93:12:42:7b:f2:
19:53:e7:68:87:1d:62:dc:07:c6:31:b9:82:9b:a0:29:cd:db:
26:1a:3b:20:9c:c7:18:97:95:4e:8c:e9:47:c0:0e:8b:80:33:
f0:93:5f:d3:0b:83:8e:7f:01:5a:e6:b5:2b:14:14:bf:95:87:
66:e9:5a:ad:5f:65:27:db:7c:80:20:c6:0a:c8:7a:42:d3:80:
b7:31:ed:0c:b6:36:8d:07:c6:c8:d9:52:63:25:da:f9:a8:8d:
bc:83:28:c4:73:1a:72:31:13:f5:b2:36:2e:87:c0:b2:6c:e4:
16:f8:77:31:2e:8a:70:ab:eb:44:db:db:b0:bd:b0:ac:3a:38:
b6:9b:aa:09:94:6d:fc:c2:b8:4c:7f:ba:fe:08:24:f2:95:a3:
76:1c:56:33:67:ad:03:ec:15:c0:da:01:21:04:8c:69:ee:2e:
5c:ff:7a:bb:c0:71:54:0e:34:c6:7c:82:52:08:51:5c:9b:9f:
c2:69:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:47 2026 by rpki-client