Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: F0JnrizPYu5aqVs2lVoPiTTTo6DX13bGdwsoNmeLu/U=
Subject key identifier: 12:BB:E1:E9:41:E9:BE:D4:09:88:2A:8C:44:38:D4:87:A7:C2:8E:A4
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019E1E6CC04F7F4A0DE2DA7432DCF0E68204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 082F
Signing time: Tue 12 May 2026 23:01:43 +0000
Manifest this update: Tue 12 May 2026 23:01:43 +0000
Manifest next update: Wed 13 May 2026 23:01:43 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: DraU32KvXgR6jD0sQX8asckFiFGd1uaWMGiOS8OYf54=)
2: FlBj5E86mMaezxnELPbZi5fwTQY.roa (hash: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=)
3: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:c0:4f:7f:4a:0d:e2:da:74:32:dc:f0:e6:82:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: May 12 23:01:43 2026 GMT
Not After : May 13 23:01:43 2026 GMT
Subject: CN=12bbe1e941e9bed409882a8c4438d487a7c28ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:89:c8:ee:a4:b3:6a:0e:86:a7:f3:09:c0:
0d:5d:0f:82:ff:6d:3e:99:92:31:d4:74:bf:a6:79:
ea:16:76:96:9e:03:cb:b1:89:16:6f:ad:40:6d:29:
4d:f1:89:59:d1:e0:7d:19:11:a2:ee:66:74:ab:aa:
22:e9:89:1c:04:82:ba:0f:3e:af:b4:10:2e:20:72:
f1:f5:1d:56:77:7c:b0:c4:2c:2c:08:ee:05:92:c4:
59:16:5b:ba:be:ce:8c:10:66:bf:8b:7f:43:36:2d:
a1:41:0a:c5:24:bf:05:37:57:85:c1:da:70:71:51:
52:a6:cc:36:c5:45:60:3d:54:a3:26:c4:eb:94:41:
11:5b:c4:c6:fb:3f:83:6c:09:43:13:8e:f2:04:b3:
40:23:46:0e:b3:c3:30:1a:a6:f5:20:83:82:f0:b8:
c7:3d:32:48:f2:dd:09:06:13:e0:3f:ab:e8:ca:a2:
a7:4c:bb:4e:0a:c7:f8:89:8b:fe:3e:08:80:b2:c1:
b0:8d:f0:58:f0:2c:0a:d9:29:8e:16:6d:19:d2:2e:
e9:89:cc:f0:96:3e:c5:79:0c:58:63:86:a9:0e:e6:
f8:60:e3:94:e7:9f:0e:43:52:6e:1f:19:30:bb:c0:
f1:59:b4:b4:c8:09:e2:70:60:fb:0f:dd:4e:1a:fe:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:E1:E9:41:E9:BE:D4:09:88:2A:8C:44:38:D4:87:A7:C2:8E:A4
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:a7:a6:c9:10:fb:d5:91:f1:fb:96:58:22:ff:03:8c:7e:
8d:f4:c5:82:c0:ac:c8:7d:0a:c6:94:ca:58:16:a7:e4:f6:74:
1d:45:dd:62:fd:c7:1f:b8:a5:50:06:39:6f:68:96:70:0a:d4:
df:b0:65:a2:47:29:2d:81:48:92:55:f1:8f:8d:79:df:0f:b6:
fc:be:ea:de:cd:1b:8b:7d:a6:fd:93:ba:5d:d7:87:64:9d:7f:
a9:34:62:4e:d3:42:7d:df:a1:46:ae:3a:6b:b2:3c:b5:ea:df:
76:41:98:9d:f7:94:3d:84:82:78:f0:63:95:77:52:a0:4d:e6:
ac:c2:18:23:d1:09:a3:39:c8:c8:45:6e:b7:6c:2b:8a:86:a9:
b9:3c:34:ac:40:42:a4:fc:d8:df:1c:7f:2f:ae:04:6f:18:f7:
89:65:a8:3a:9e:12:21:58:5a:bf:b1:2f:56:1e:1d:9d:49:f4:
4b:3a:71:7d:a0:09:f6:ea:54:80:d9:b6:04:eb:51:52:52:0e:
04:55:6a:e8:cb:62:67:c0:66:3f:8a:43:51:99:a9:5a:0e:46:
a1:0d:05:64:6c:cc:c3:db:0f:a2:2b:d7:bf:58:fc:2c:02:e7:
7d:df:55:2e:27:fa:a8:f3:c7:ce:e7:44:1c:3e:04:cc:8c:73:
28:72:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:04 2026 by rpki-client