Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: BDfdkuIYeRR+DJjREKDNzXFDo98fCTZi2sXDzQNOFXg=
Subject key identifier: C9:F7:88:3A:2C:3A:A1:2B:C2:A2:FA:47:38:4C:C3:E5:7A:42:57:13
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019D2BBCB435F60D0B8CD6B0420090391717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 080A
Signing time: Thu 26 Mar 2026 20:01:20 +0000
Manifest this update: Thu 26 Mar 2026 20:01:20 +0000
Manifest next update: Fri 27 Mar 2026 20:01:20 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: 26mQM7n25AHhJpe3ArSKcjglvfoTa2ya6xDxwNTEk9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:b4:35:f6:0d:0b:8c:d6:b0:42:00:90:39:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Mar 26 20:01:20 2026 GMT
Not After : Mar 27 20:01:20 2026 GMT
Subject: CN=c9f7883a2c3aa12bc2a2fa47384cc3e57a425713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:9e:3d:f8:22:44:6e:b0:41:40:b9:e6:24:
1a:26:14:55:b1:34:ba:2e:27:90:a1:96:43:30:f7:
15:ee:b8:5c:d9:2f:7d:73:24:fb:49:47:4a:54:69:
8d:ec:2d:d9:31:1c:f4:45:98:34:f9:9f:e9:9b:57:
fe:b2:08:23:d2:33:0f:05:09:8e:6a:04:2f:cb:89:
b2:26:23:92:d6:03:e9:35:85:e3:b8:f0:40:9a:b3:
70:bf:48:3b:28:aa:e5:d1:5e:af:08:d6:92:50:d1:
ab:af:98:b8:7d:10:aa:9b:d2:71:9f:c4:96:73:aa:
48:82:d6:4b:ae:5f:89:2d:a7:4a:e7:7b:62:5c:8b:
d7:7a:90:f5:a4:ab:cd:6e:41:05:8c:4f:15:c5:c5:
ac:93:68:ca:a9:d0:cd:4e:45:9e:67:1d:a9:1d:a6:
80:82:64:fe:34:cb:51:2c:cd:b7:59:0e:da:60:2c:
d5:a1:05:77:c3:cb:1a:ae:0b:8e:31:f7:90:be:c6:
ab:5c:cd:54:87:9e:8a:d1:b1:5f:b2:f2:20:a5:a4:
55:1a:30:e5:e3:01:17:86:c0:15:2c:25:e3:bb:34:
f8:46:ed:ae:4a:39:73:9b:ce:c4:36:d2:7a:c9:51:
74:57:aa:36:4e:de:98:3e:e8:57:53:a7:7b:68:55:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:88:3A:2C:3A:A1:2B:C2:A2:FA:47:38:4C:C3:E5:7A:42:57:13
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:59:5c:a4:9d:a5:2a:e4:57:cf:31:f3:b5:bb:4f:f1:c1:
90:b6:09:d7:97:2e:4b:b0:dd:f1:95:eb:be:6d:14:57:da:84:
8d:51:98:c3:4f:08:0c:ce:28:e7:2f:ec:e0:c6:2f:ed:91:c8:
c2:2c:06:63:1c:c2:64:d5:d3:b5:a0:77:cd:d2:cf:33:a2:f0:
fa:6e:7b:03:24:ec:8f:e0:f9:8f:7b:38:1e:44:12:e1:c4:46:
68:9d:9d:88:14:a6:7a:d5:2a:5e:57:fd:4d:59:11:fc:67:54:
fc:74:fe:3a:bb:e9:f1:ad:3d:0b:2a:80:00:27:13:da:68:f2:
9d:41:08:d2:17:ba:f4:38:e4:72:54:11:24:71:e7:ba:f0:86:
76:b7:a4:00:8c:4f:cf:71:aa:fa:3e:92:90:00:29:34:b5:20:
9f:fd:d1:0e:42:aa:01:2d:5d:a7:30:35:6d:dc:a8:6a:22:a8:
39:be:ce:97:bb:ed:09:40:c2:45:55:21:e4:af:d6:2f:ce:5e:
ae:35:57:fb:1a:b8:14:e7:f1:41:6a:e4:03:f1:04:5f:68:2a:
e4:e6:0f:5e:e5:8a:4c:92:2e:2b:9c:61:09:d3:66:b1:42:38:
a1:87:7c:d4:fb:a0:bc:e7:b7:95:62:0c:d3:7f:ba:9a:5e:ab:
49:e7:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:57 2026 by rpki-client