Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier: JSSEvB0efiJK6+enJaSuvZuARVLcbH+Jat7yvmFOd2U=
Subject key identifier: D2:42:04:C3:8F:55:4D:7F:0A:92:C4:95:68:0B:A5:73:31:F1:74:C8
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial: 019D2772260342A4525BFBD5DB2FF6BE7A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number: 0F0A
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: MN3EKksgnJ48XynfkE4ySIKeaaMxwKnaE3GX0X4QThY=)
2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:26:03:42:a4:52:5b:fb:d5:db:2f:f6:be:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=d24204c38f554d7f0a92c495680ba57331f174c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:69:c9:29:27:8c:c1:b8:8a:0f:b6:d5:1f:
f7:be:b9:6f:e5:b5:b0:29:1f:d1:8e:62:72:be:87:
a3:20:47:d7:cd:dc:30:37:d4:ab:18:23:63:68:30:
a5:f6:82:39:78:5b:ff:66:a0:74:eb:6d:19:50:15:
f6:ca:45:c1:d0:1c:cc:c0:a9:aa:d1:46:00:18:ef:
9a:19:88:63:be:0b:52:ff:55:65:da:96:6d:4d:20:
46:2f:06:fc:ec:58:fa:fb:23:f7:8f:41:ac:a7:30:
7a:2f:1d:33:64:4b:0c:63:c5:97:d3:f2:ad:44:11:
37:09:51:16:cb:2f:a6:71:e1:65:5b:62:2d:a9:23:
91:f9:3b:61:71:f4:66:b0:d9:02:4f:0b:a7:ab:af:
ca:6e:a6:f8:10:9f:87:5a:bb:28:51:03:d8:e3:26:
fc:41:d5:d7:45:99:02:a6:a0:38:5e:49:2a:79:4f:
8f:c7:b2:1c:af:b9:23:ad:f1:05:fe:4e:09:49:e4:
9f:f5:d9:e3:b0:47:fb:f1:64:6d:06:aa:3f:48:25:
00:d9:86:f3:7e:0a:73:81:47:b8:86:d5:de:b0:c5:
eb:7d:a6:72:cb:dc:da:95:97:f6:9f:10:36:f7:4a:
12:b1:31:b9:94:8c:aa:eb:4d:e9:47:03:69:1f:34:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:04:C3:8F:55:4D:7F:0A:92:C4:95:68:0B:A5:73:31:F1:74:C8
X509v3 Authority Key Identifier:
keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:aa:1f:9a:53:51:f3:72:81:7b:e6:7b:df:42:6a:e5:6c:
c3:df:f8:4c:93:6e:99:0c:be:be:24:65:1d:5a:94:9d:2f:e0:
05:fb:52:56:fc:18:f8:53:0a:5d:94:4c:2b:17:38:00:7e:2d:
b4:a2:2c:19:0b:1a:1e:ba:62:9f:6e:d8:27:15:e9:d9:1c:e3:
2b:c4:03:fe:92:60:3b:1b:53:04:5f:23:df:e9:dd:e1:79:97:
57:2a:07:0e:45:dd:fb:95:0a:d2:93:7d:0d:b8:f2:f2:38:27:
41:6e:65:d6:59:6d:50:9b:9e:2f:e3:61:ae:0f:e0:d4:f5:e6:
4f:45:52:fe:26:59:10:f3:54:8c:7b:d5:3b:d7:8d:61:a9:b1:
6c:d2:b7:d4:c4:95:12:43:39:c4:6b:ed:ce:33:d7:56:18:4f:
85:b2:79:02:cf:c7:2c:b8:21:a8:4f:31:48:8f:9f:a3:6f:df:
54:8a:f2:d7:81:84:f9:ce:c3:02:f0:09:e3:cb:d2:9f:46:39:
fb:0d:99:19:1f:f9:a2:cd:e5:19:7a:3f:be:a6:f5:47:e7:69:
d1:38:3a:01:f5:fa:9a:ec:3a:70:ea:d8:70:69:58:c3:ff:bd:
63:75:6a:32:ac:d3:dd:45:25:5a:71:40:b0:43:77:9e:dc:32:
46:e7:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:57 2026 by rpki-client