Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: PCifAGtQetJENqBc4O7PX1qigx9kZfsY1Yxzmnf3AEQ=
Subject key identifier: 0B:46:1D:42:D4:FF:65:9C:E6:B4:59:2E:3C:EE:F9:46:38:5D:8B:47
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 019D2A045BBFCC06B10317CE1AAA22BC1A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 17E1
Signing time: Thu 26 Mar 2026 12:00:21 +0000
Manifest this update: Thu 26 Mar 2026 12:00:21 +0000
Manifest next update: Fri 27 Mar 2026 12:00:21 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: u03zfR9bRvR4mK8VazNM4XzVA5BRiV6x19EAqf4dE5E=)
2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:5b:bf:cc:06:b1:03:17:ce:1a:aa:22:bc:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Mar 26 12:00:21 2026 GMT
Not After : Mar 27 12:00:21 2026 GMT
Subject: CN=0b461d42d4ff659ce6b4592e3ceef946385d8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:69:5d:f9:47:3f:fc:80:18:e9:87:0e:1d:
c1:c7:a2:cc:5c:6a:8c:7b:03:f3:3a:c8:d1:b5:7a:
b7:89:4c:43:31:e2:b1:23:63:ec:e1:ac:b2:27:3c:
71:f5:33:ba:e0:80:c2:95:95:f4:60:76:2b:0c:fe:
e2:62:8b:09:20:de:22:c8:49:cc:6e:75:d6:f6:10:
82:d3:a4:e1:49:40:d1:73:42:93:5c:17:39:b1:60:
0e:63:d8:24:f6:de:40:23:74:09:60:eb:93:25:35:
8b:fd:e9:50:08:29:6b:3b:07:76:2c:68:71:2b:32:
98:24:57:4f:e8:6a:46:be:cb:e8:15:dd:d1:30:02:
49:37:7b:53:23:5b:82:18:96:cc:29:1b:c2:16:d6:
51:9f:79:0b:11:e5:e6:16:8c:eb:ce:a8:d9:ee:ae:
6c:22:57:ca:37:60:bd:9a:fb:d8:12:30:00:44:59:
c7:b6:cb:fb:9c:8e:ec:fb:62:7c:60:56:65:74:d0:
95:ed:93:15:0e:86:a8:c0:eb:8f:a0:97:95:17:10:
a7:a4:4d:2f:33:07:e4:32:f0:d8:35:85:52:11:e3:
e7:a9:3b:4b:5c:23:5b:1b:70:57:c1:de:9f:5e:25:
b0:dc:15:81:67:e0:2d:b3:9c:ba:9a:b9:3d:c4:8d:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:1D:42:D4:FF:65:9C:E6:B4:59:2E:3C:EE:F9:46:38:5D:8B:47
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:da:39:61:72:65:1c:46:1f:6b:5d:dd:b8:0a:d8:0c:40:0d:
61:9f:ca:76:90:4b:5b:9e:6f:80:63:51:e4:a2:fc:3c:74:e8:
74:2c:0a:57:a5:87:93:ed:e8:dd:6d:15:7c:c5:d8:64:c9:b5:
f3:81:66:6b:c7:92:d4:7d:67:fc:89:ae:54:3b:f6:ed:38:14:
93:1e:a0:5c:d2:4f:f4:34:8d:e4:62:d4:32:b2:d3:ff:a7:6c:
05:62:e6:33:96:b3:c6:a5:1e:82:15:92:d3:da:25:f0:ab:4f:
d0:34:aa:0c:d5:29:30:0d:32:82:64:6f:04:91:92:e9:01:70:
7d:90:7e:37:8e:ad:7b:f5:46:34:8c:3c:d6:2d:38:0e:ab:e3:
3b:67:08:8d:11:af:ac:3a:bb:b8:6a:72:e2:c4:8a:be:0a:9f:
6a:45:96:ea:f9:b2:0f:09:de:0f:7b:5b:ab:b3:b2:32:83:ab:
c4:91:ed:68:5c:ee:f3:fc:71:cb:8c:c1:56:ae:9f:c2:ac:6e:
35:bc:5d:be:4e:56:31:47:f9:e0:a7:99:8f:90:f1:1f:70:80:
4b:23:a9:0a:e2:86:ca:10:3c:9d:58:97:fa:41:c3:55:c5:60:
a6:64:7e:ad:cb:48:c9:5e:2c:84:52:59:eb:2c:bf:7e:fc:04:
a4:f1:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:32 2026 by rpki-client