Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File: E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier: 43YojVO/O2tNwfLMktmS2D6+5owR5dSooGoaL8HVUuI=
Subject key identifier: 8D:14:E9:24:E8:79:12:89:FC:C1:8C:30:BC:50:22:D3:8E:08:6F:A5
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 019D273B31B120E523BC9AC0862ECA4309A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number: 17CA
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: 11234ZaSJmm/7SwHdYV8GE3zLf4AgHizwm9rVy+DRwY=)
2: vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa (hash: FU6gWknx4r9SNx85ldpTBO/Ox8NOWmKPGxQLrSXC4Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:31:b1:20:e5:23:bc:9a:c0:86:2e:ca:43:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=8d14e924e8791289fcc18c30bc5022d38e086fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:27:e9:2e:94:ad:91:a9:1a:dc:5e:6b:30:
a3:ab:c4:11:16:40:51:79:52:a7:20:e2:bc:a2:2d:
fb:a2:c9:dd:bc:94:95:6b:b6:3f:67:93:72:14:2f:
62:70:4e:8b:4c:fc:a0:84:46:3f:c6:ca:3b:74:ff:
f7:9e:4f:c8:14:e7:04:d9:d9:0a:b5:9f:48:69:d4:
34:11:04:8e:54:55:5a:18:f0:78:7d:dd:ef:fa:dd:
3c:2e:0a:85:ba:66:86:58:83:ba:9c:7a:dd:09:20:
1f:e7:a8:80:61:93:67:b4:7b:47:22:9e:d8:1d:78:
d9:2d:95:b9:27:be:96:08:25:2b:b1:05:63:21:7a:
04:c7:b7:9f:4b:cf:5b:65:8d:0c:20:b2:1d:8d:19:
91:54:b6:e7:f3:82:ee:45:2d:f5:8a:c3:7e:0a:68:
3c:2f:40:e4:a7:50:05:a1:7f:2f:d9:37:ef:3c:ae:
cc:5a:b5:9d:5d:11:da:e5:81:ef:d0:03:ab:46:50:
51:1d:23:37:2d:a6:09:54:2e:fc:af:d3:7b:21:c8:
57:d1:91:ce:85:5e:8b:50:38:89:36:d2:84:88:3f:
0c:1f:dc:94:77:d1:05:1b:fc:23:60:e4:b3:ca:86:
5a:41:f4:fb:2b:70:86:9b:a1:2d:1c:09:6e:5f:38:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:14:E9:24:E8:79:12:89:FC:C1:8C:30:BC:50:22:D3:8E:08:6F:A5
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ed:1b:6c:68:e9:5e:83:8e:58:4d:4f:a1:94:4f:e7:c6:aa:
8a:83:81:2f:d4:2b:55:f5:1f:22:d7:8e:39:94:d0:af:66:32:
77:85:c1:29:4b:fe:42:e4:b5:4f:43:66:4b:68:1c:9f:3c:c9:
e1:33:9f:7e:0d:c4:67:dd:ec:17:14:0f:d5:92:1a:f5:cf:16:
0c:98:14:5d:d9:0b:f6:3b:94:06:b6:79:e5:e2:41:e7:96:33:
a9:9c:48:bf:78:ad:38:4a:c4:3b:d8:b2:19:c0:51:e1:1d:88:
cf:13:ff:7c:1d:dc:73:44:69:59:a9:a0:44:e8:56:19:8a:59:
2e:8e:a2:55:df:48:28:09:0b:2b:0f:23:cf:53:df:5b:16:aa:
d7:22:a3:c0:a0:a8:77:7b:4a:55:c6:14:4b:a4:14:b8:50:61:
5d:be:6d:a1:1e:25:23:66:9e:9e:22:e7:fd:e5:a6:07:71:2e:
68:e6:5a:60:6d:19:eb:7e:d3:cf:41:e3:54:88:5a:e4:cf:d5:
73:8f:23:d9:bb:17:b4:20:f4:b2:5e:28:37:55:a7:5b:7b:20:
77:94:f3:4b:2e:69:fa:f2:10:7e:a4:66:4b:ca:5d:af:52:7d:
d2:b0:a8:a9:59:cb:9a:61:3d:11:a8:af:66:91:7d:92:f6:37:
35:b5:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:25 2026 by rpki-client