Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: dpWqwcoFcFMNUr7uGnW8WhVeRj+oWKLvVLKxuR60BR4=
Subject key identifier: 8D:42:03:B9:5F:45:29:F5:25:52:83:A6:BE:CF:0A:AE:72:9F:E6:76
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 019D2816B29AF5335A9751618D7D58EBDCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 1185
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: gn2yCeE0Qj5UGOsWVUEEoZpwXHY1cOLxQSbwWiwhr8A=)
2: a_ww7qv94cntVvxMyEa8w2y4rQQ.roa (hash: gcAP6sbYaBz9r+BWocW6ovurpJc3pHNDobJ/C/x7Cag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b2:9a:f5:33:5a:97:51:61:8d:7d:58:eb:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=8d4203b95f4529f5255283a6becf0aae729fe676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:77:ed:c6:31:35:da:46:f2:48:28:c8:61:
ad:f8:b5:9c:e5:28:94:f0:99:9a:7b:4b:bd:30:9b:
28:fc:73:76:a8:94:04:85:70:fb:e0:17:3c:b3:19:
df:92:41:06:62:ee:f0:54:e2:2c:ba:ea:44:a4:ee:
79:2e:cb:c4:32:b1:20:13:47:63:97:6e:9c:48:06:
44:2c:98:dc:5a:5f:0a:0c:80:c9:ff:13:a7:f5:78:
e9:bb:05:31:20:c8:b4:d7:84:28:70:7f:ec:e1:12:
e7:9b:c4:23:e4:b8:d9:c5:28:ec:89:0f:54:e0:a8:
db:bc:15:41:fe:ad:b8:65:41:f3:bf:67:df:be:37:
94:0b:ab:98:98:9f:8a:d3:15:e0:b4:43:cb:b1:54:
52:c9:05:57:2c:2e:24:b6:dd:b1:fc:47:af:89:43:
88:ad:18:3a:9a:20:62:98:28:29:a6:3c:d5:26:ea:
ab:ec:f5:9f:2a:42:a9:7e:52:be:c2:ac:fc:57:85:
52:a7:bc:40:6f:76:43:62:11:d1:fb:3f:cb:a3:55:
c0:23:54:fb:9c:5a:ce:53:47:94:e2:25:1f:af:5b:
a0:e7:f7:24:a9:29:28:e7:0b:54:23:97:4b:58:17:
03:a0:76:12:ab:6a:95:c6:e2:ae:b4:51:03:ac:8a:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:03:B9:5F:45:29:F5:25:52:83:A6:BE:CF:0A:AE:72:9F:E6:76
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:17:2d:1c:3b:11:a5:97:3f:e3:2b:7f:1c:12:44:9d:d4:
22:ef:b6:95:da:6e:c4:ca:70:98:89:cd:12:3e:cd:28:86:f6:
7b:39:b8:cd:9a:1b:b7:5c:a8:bb:41:ee:8e:10:4a:2a:85:89:
d3:b1:e5:68:30:fc:7c:d2:bb:80:d1:af:0b:cd:65:41:2c:60:
22:b2:07:14:78:a9:f3:66:99:25:72:d6:c2:49:78:91:78:1d:
ce:29:c4:3f:dc:62:c2:53:72:0b:97:b5:2c:95:ae:99:8c:2d:
54:6e:26:6a:3c:9b:a7:ea:ba:27:77:0f:3d:53:cf:ad:89:1c:
19:e0:ed:14:81:f4:5b:2d:66:81:af:eb:eb:f5:69:7d:7d:16:
7d:96:05:35:ed:f1:a9:23:62:73:32:ad:28:23:87:44:8e:f0:
86:ad:9c:47:26:60:f8:0e:f9:6f:16:e5:ac:1a:28:f3:71:75:
48:47:34:1b:59:6f:bf:00:48:7f:7f:6b:ef:1e:4e:c3:1e:43:
e8:7b:54:8f:94:1e:da:f1:4d:7a:e2:a3:62:b4:57:b4:43:1b:
3e:4c:e7:a5:38:74:ab:4c:19:aa:b1:5b:34:6e:93:2c:d7:b6:
7d:6b:e3:1f:95:d1:b6:4c:fa:df:13:c7:d7:4a:3d:8f:10:71:
a2:76:8a:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrKa9TNal1FhjX1Y69zMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzViNDA5MzhkODdjZDMzMjcyNmFhYTQ4MWFhNzFhZTZl
OTg3MTcwHhcNMjYwMzI2MDMwMTA5WhcNMjYwMzI3MDMwMTA5WjAzMTEwLwYDVQQD
Eyg4ZDQyMDNiOTVmNDUyOWY1MjU1MjgzYTZiZWNmMGFhZTcyOWZlNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ER37cYxNdpG8kgoyGGt+LWc5SiU
8Jmae0u9MJso/HN2qJQEhXD74Bc8sxnfkkEGYu7wVOIsuupEpO55LsvEMrEgE0dj
l26cSAZELJjcWl8KDIDJ/xOn9XjpuwUxIMi014QocH/s4RLnm8Qj5LjZxSjsiQ9U
4KjbvBVB/q24ZUHzv2ffvjeUC6uYmJ+K0xXgtEPLsVRSyQVXLC4ktt2x/EeviUOI
rRg6miBimCgppjzVJuqr7PWfKkKpflK+wqz8V4VSp7xAb3ZDYhHR+z/Lo1XAI1T7
nFrOU0eU4iUfr1ug5/ckqSko5wtUI5dLWBcDoHYSq2qVxuKutFEDrIolCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1CA7lfRSn1JVKDpr7PCq5yn+Z2MB8GA1UdIwQY
MBaAFBN1tAk42HzTMnJqqkgapxrm6YcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQt
YTI1MGRhMTNkNjhhLzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQtYTI1MGRhMTNkNjhh
LzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMQXLRw7
EaWXP+MrfxwSRJ3UIu+2ldpuxMpwmInNEj7NKIb2ezm4zZobt1you0HujhBKKoWJ
07HlaDD8fNK7gNGvC81lQSxgIrIHFHip82aZJXLWwkl4kXgdzinEP9xiwlNyC5e1
LJWumYwtVG4majybp+q6J3cPPVPPrYkcGeDtFIH0Wy1mga/r6/VpfX0WfZYFNe3x
qSNiczKtKCOHRI7whq2cRyZg+A75bxblrBoo83F1SEc0G1lvvwBIf39r7x5Owx5D
6HtUj5Qe2vFNeuKjYrRXtEMbPkznpTh0q0wZqrFbNG6TLNe2fWvjH5XRtkz63xPH
10o9jxBxonaKPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:09 2026 by rpki-client