Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File: e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier: 9dunHCd5MoSJDCcYn7ACjFMn8DIHpe3+jocf5mj3o/8=
Subject key identifier: 9E:49:EB:D5:CD:FD:CD:80:67:E6:FC:C9:89:5B:09:20:BE:BD:62:E9
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019D27A8EA35C383FA14ED2696DEF1B25011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number: 15A4
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: 4k9wl/vaNqOnWAClLfLh/xa9Fd0D+nFrGYR+FRLPOSE=)
2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ea:35:c3:83:fa:14:ed:26:96:de:f1:b2:50:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=9e49ebd5cdfdcd8067e6fcc9895b0920bebd62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:6e:c5:3c:d8:7f:bf:a8:69:43:ba:4f:07:
f6:96:6f:9e:55:9f:54:7c:6f:16:e1:2a:b6:ce:fc:
13:ba:4f:12:b7:43:08:72:fa:21:bb:6b:bb:8f:62:
ee:b1:7f:3f:6b:a4:3d:6d:50:a2:1a:a7:95:76:b6:
8d:62:5e:c4:34:eb:1e:23:f1:d7:e5:68:ef:c8:56:
64:0e:17:63:f4:24:8d:1f:b3:bb:13:bd:4a:4f:88:
1f:dc:0b:6e:73:bc:71:f3:dc:9a:bd:c9:ea:98:3a:
48:48:52:59:96:cc:69:6e:7c:a7:52:6d:06:51:b3:
90:ad:84:bb:40:da:55:18:9b:4c:84:df:4d:76:d1:
c3:69:db:bb:63:be:2f:f1:41:84:f2:c6:26:12:01:
b2:a8:90:5b:ca:7f:ac:19:29:41:b0:99:3c:23:4f:
1c:4f:04:c2:68:b8:fa:ec:e2:06:57:43:e0:de:94:
cd:77:3d:bc:ef:d5:22:e6:28:4a:61:31:6e:fe:23:
e6:b7:f1:89:70:b7:7b:99:fe:2d:a4:bb:07:f2:1a:
a2:da:ba:bf:3e:cb:9d:bf:e6:7e:6c:0d:ca:c3:9f:
2c:51:6a:da:a6:c5:5d:6c:9d:4c:9f:eb:da:41:74:
40:dd:cd:ea:3c:ad:ec:a8:b0:d9:ee:15:48:8d:af:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:EB:D5:CD:FD:CD:80:67:E6:FC:C9:89:5B:09:20:BE:BD:62:E9
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8c:a6:c4:1e:b0:f3:b2:24:ad:bb:fe:5b:36:50:39:bc:ce:
51:b2:67:ba:3c:c2:77:a6:b2:90:c9:12:8d:15:e0:83:4e:6e:
d7:71:10:20:30:38:c6:96:17:42:bf:d9:09:0a:cb:8c:6c:df:
31:29:17:1d:4c:3e:16:5b:83:18:cf:a2:38:aa:08:aa:24:16:
4f:72:f3:ed:c5:99:d0:44:c9:52:30:5f:3f:48:18:1b:d4:20:
e8:06:fc:53:d9:7a:44:3b:43:91:6b:ff:c8:5c:2a:ad:cb:fc:
8f:1e:f1:6d:cb:8d:9e:73:d4:da:45:4c:6a:0d:ce:6c:eb:3a:
40:7e:d4:94:e0:fd:1f:32:9b:78:1e:4f:72:1b:8d:08:8b:67:
c8:ca:34:61:1e:ee:72:c6:68:a6:34:3e:f2:ec:45:e9:f5:5b:
7f:a0:4d:22:59:48:4d:47:48:f0:96:2d:f5:cc:92:63:0c:f0:
ee:6e:52:b1:39:08:94:a9:87:5b:0a:c9:3d:f4:7b:de:db:0f:
4c:62:27:72:bb:06:df:96:d2:03:43:c2:51:63:37:d4:f0:a4:
97:47:ab:c6:58:d6:3b:85:86:65:41:fa:a5:26:ce:a0:82:d2:
e1:59:b3:ed:39:29:c0:96:76:52:b9:07:02:af:85:d7:36:d0:
81:08:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:59 2026 by rpki-client