Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: XJ0UIpGFtTkcoH2bXliezPNB2IPMHmJI0lzNWPktyDs=
Subject key identifier: ED:75:27:32:7D:CA:7F:D6:F5:7B:41:35:3E:91:8C:16:A0:44:AC:46
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 019D26CCB7BAF6F72ED992A099B14F1790DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 11EF
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: CZqvNVYFSfRBYVLJiSabBgGQgaVGbsscvsRa1YTMRfI=)
2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b7:ba:f6:f7:2e:d9:92:a0:99:b1:4f:17:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=ed7527327dca7fd6f57b41353e918c16a044ac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:53:e4:77:14:ee:e8:b2:45:de:2e:12:99:
79:d6:8b:2a:d4:9e:52:9d:73:d7:90:d9:d0:2b:85:
f9:ce:c5:f2:cb:70:9c:6a:ce:0f:05:21:57:dd:3a:
5a:d7:ab:ac:51:52:3f:3b:c8:f7:80:f5:22:b0:c7:
ab:a8:ff:23:23:ac:1f:43:e2:08:44:6f:33:cd:b7:
66:77:05:0e:ed:ac:1c:a5:48:73:17:e4:a1:a6:f2:
ad:43:e6:09:c3:5c:32:0f:9a:b5:5f:66:3e:c4:3d:
ff:be:08:c7:4c:50:69:61:ca:e1:c4:18:75:44:79:
bf:2b:c9:12:5e:bd:5e:a6:e2:13:fb:6a:b8:43:02:
1d:23:38:b9:91:60:9e:7c:1a:4e:70:02:2a:f5:54:
98:82:7a:d7:87:54:94:83:73:e0:07:14:e5:4c:56:
6f:8a:c5:f5:02:d7:de:76:ac:90:35:b9:36:b0:6f:
41:2e:73:90:79:16:83:92:6c:b0:7d:a2:59:3e:2d:
82:bf:76:c3:a9:72:7f:22:bd:1e:76:66:d0:7b:2c:
71:e0:20:93:10:b0:54:07:1c:c5:10:27:26:38:ae:
8c:95:e2:29:ad:18:52:4b:2f:48:77:c7:95:7d:f7:
12:0e:e3:7e:e5:dd:0d:66:4b:75:55:26:e7:79:f9:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:27:32:7D:CA:7F:D6:F5:7B:41:35:3E:91:8C:16:A0:44:AC:46
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:b1:57:5e:06:47:8d:10:2b:bf:ed:a1:eb:8b:a8:50:2b:
7d:f0:24:b2:13:c7:f6:34:f1:f6:8a:43:4f:eb:95:4b:a0:f0:
de:f2:09:59:ee:11:21:7b:82:85:1f:7d:35:08:c6:88:84:1b:
be:af:01:2b:57:ff:0e:31:8c:1a:06:f3:fc:31:da:78:61:5e:
77:70:6e:97:46:54:27:18:36:96:63:74:89:a6:87:36:e5:61:
32:67:3b:11:d4:d6:ee:da:74:bc:06:f6:0c:ba:8c:b4:f5:78:
d2:05:ac:1c:02:d7:ae:2b:f2:71:c3:5d:f9:16:fd:f6:e4:af:
b3:8c:78:b0:f4:e8:4b:ae:ae:31:7e:03:e4:4f:fb:f3:87:78:
a1:31:ac:ad:8a:a9:c1:0b:19:fb:54:90:cd:29:de:a5:89:30:
63:6f:e0:91:bf:df:d1:f4:97:44:55:61:48:f8:8b:0d:62:25:
33:df:27:ee:c6:4a:a2:d9:35:19:d5:4b:9a:de:a6:c0:76:df:
4a:74:de:cc:33:cd:56:9b:a0:8c:c9:3e:f4:04:8e:87:50:79:
4a:d9:3a:90:e4:80:e0:18:c3:59:39:57:c9:9f:a8:9b:f2:f6:
b9:65:17:c7:ef:3b:6f:55:cc:91:11:bd:18:f4:0e:68:9e:d9:
da:e0:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:35 2026 by rpki-client