Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: w6LpmY/FByGW083d7H4zGncZu9Acsubc2kJHJoxBuMo=
Subject key identifier: 88:05:7B:B4:77:C8:5C:A6:6A:E5:5D:E0:86:AE:D1:C7:9B:27:8A:A3
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019D273AD977F03321BA97877C822CA525D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 07AF
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: fczEakrnMey+TLQwQCT9mEExfK9ptodwZsN5nagNi9A=)
2: FlBj5E86mMaezxnELPbZi5fwTQY.roa (hash: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=)
3: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d9:77:f0:33:21:ba:97:87:7c:82:2c:a5:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=88057bb477c85ca66ae55de086aed1c79b278aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:6a:da:a8:9c:41:c8:79:75:21:39:ad:1c:
cc:f0:e2:79:1a:9a:93:f0:4d:39:2b:ed:13:fd:bf:
94:cd:2a:c8:76:e2:35:48:9e:f2:b5:5b:ba:bf:ea:
b0:8e:d5:9d:20:b6:6e:53:d5:e7:d5:69:14:43:9e:
fd:a5:b2:30:f8:32:02:e8:45:50:02:81:59:7f:bf:
3a:3a:af:be:31:2f:f6:c9:3d:6f:00:8f:74:b1:21:
2b:b2:16:c6:bc:8e:6a:47:04:72:61:95:b5:fd:25:
9c:95:6f:e5:0d:cd:87:6d:70:59:ee:86:c8:b1:b9:
fe:07:cc:e7:d9:db:85:ff:a5:60:6a:dc:e2:b5:ac:
50:ee:7e:50:84:94:af:07:5c:ff:35:0d:9c:19:3f:
e0:eb:0c:ca:3c:67:57:d3:fb:5c:04:80:f0:d3:4c:
ba:a7:df:d9:ca:16:09:54:ee:2a:ed:42:e0:34:51:
d7:74:aa:d6:7b:29:31:b7:10:e1:84:65:c9:18:d8:
ec:5a:ea:b7:47:89:df:74:6a:6a:d9:49:97:1d:64:
51:fb:92:ce:e4:f6:5d:d2:cf:2b:7c:20:48:b4:66:
09:86:81:37:89:11:8b:31:e0:b9:d8:2b:74:ef:e0:
e2:52:1a:7b:f2:5c:b0:cf:be:a1:95:63:c4:b4:c7:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:7B:B4:77:C8:5C:A6:6A:E5:5D:E0:86:AE:D1:C7:9B:27:8A:A3
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a4:ad:d0:b4:ed:ae:0b:6f:d9:18:0d:cc:0b:66:f0:e2:14:
ce:f6:ab:b0:95:f8:59:b3:78:11:15:78:87:e3:c6:32:b7:65:
b1:40:af:b1:a3:bb:b5:e0:65:94:68:ca:98:d7:e5:2d:c5:34:
5b:76:5c:78:aa:fc:97:f8:1c:8a:2c:d3:7f:03:60:e0:9b:6a:
f3:e7:dc:e5:62:1a:49:6e:d6:c1:b4:25:d7:a3:05:05:4e:17:
b5:20:cb:97:66:c7:c3:32:0f:ab:5c:de:11:01:2a:9b:6c:74:
c1:0c:b4:d8:cb:f0:d2:ab:d8:8b:38:b6:fc:1f:fc:72:88:22:
d6:8c:7d:a5:7c:f3:25:78:05:77:16:f5:5d:13:2c:62:5d:25:
93:ed:70:ea:17:a3:36:63:d6:d4:15:b3:24:61:39:33:a5:79:
f2:97:a1:49:a2:8a:39:4c:77:e0:06:d3:04:c5:09:16:27:5a:
fb:be:d9:26:7d:1b:8d:42:96:99:d6:4e:e8:6f:66:f7:5e:10:
39:af:29:64:2f:3f:66:91:d4:db:af:12:b1:c4:fb:4d:71:58:
92:df:93:d9:4e:94:cf:16:e0:f1:90:91:ab:6b:76:65:2e:2c:
4a:62:59:91:fa:53:61:51:e5:1c:aa:77:bf:f3:f4:b9:57:5a:
d9:e6:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:03 2026 by rpki-client