Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: 6SlmW+tBbpBkFk3Ed4UPqitAp0X34oJOhxHz+d9lifM=
Subject key identifier: 9C:B7:53:E3:7C:C5:8D:D5:17:79:1A:6E:6F:D5:FD:FE:C4:81:33:93
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 019D2A04F0104FDCA6041B1F633A49576680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 12:00:59 +0000
Manifest this update: Thu 26 Mar 2026 12:00:59 +0000
Manifest next update: Fri 27 Mar 2026 12:00:59 +0000
Files and hashes: 1: 4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa (hash: R6o6h7FPQ78N3YyiGkBHhpV10pWrv1sif+o6N3TYJMg=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: TNf6hO6ejvouOSkgSbsBRAvwgvMAVYDiqQ1aj2cEn2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f0:10:4f:dc:a6:04:1b:1f:63:3a:49:57:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Mar 26 12:00:59 2026 GMT
Not After : Mar 27 12:00:59 2026 GMT
Subject: CN=9cb753e37cc58dd517791a6e6fd5fdfec4813393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:f0:ef:a8:c4:b1:13:fe:1b:e7:72:89:6d:
72:33:96:16:f3:c5:e9:db:01:02:e9:05:32:82:bd:
9f:98:a5:65:54:bb:68:f4:8f:78:14:d8:1b:ea:a7:
18:79:8c:bc:e7:02:3d:1a:84:f4:6f:0c:b1:36:66:
19:af:e9:ab:72:f5:a6:a1:3f:bb:75:b4:04:d8:12:
73:88:59:1e:f1:a3:ba:0b:e6:90:56:17:d4:ac:1d:
c2:87:4e:78:69:a7:86:25:17:02:1d:64:e7:4d:5a:
6c:13:0f:75:6b:2e:7c:11:86:04:08:a9:ca:e4:48:
32:04:7e:14:86:90:f7:b1:56:e9:da:bf:96:7b:47:
06:1d:42:59:68:f6:cd:f6:5a:55:63:8f:c8:c6:0b:
e6:54:c1:a0:e6:0f:90:25:4b:e9:e0:6c:c7:f9:57:
e7:54:6f:7b:2a:93:16:67:0c:a7:95:e7:e1:b4:ed:
fd:8a:94:17:58:a5:44:2d:a7:49:de:c6:04:ef:1a:
94:58:87:e2:1d:e7:c2:ed:b6:42:8d:f0:5f:55:dd:
1c:65:b2:99:15:4f:ff:33:3d:4a:f7:b6:57:a0:ac:
18:82:4b:00:5f:27:7d:ea:77:10:74:ef:d1:b6:9e:
9a:50:7f:43:8f:ee:2a:cb:46:6e:d4:51:b5:b7:28:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B7:53:E3:7C:C5:8D:D5:17:79:1A:6E:6F:D5:FD:FE:C4:81:33:93
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a4:dc:19:21:62:72:4a:ca:72:6e:b0:43:0c:2d:b7:b5:a0:
f8:73:fb:1f:d6:e7:27:61:95:e3:32:92:75:63:8d:8b:dd:d5:
0e:40:97:ce:86:42:c0:0f:a7:94:e2:42:04:97:f8:a0:d5:8f:
02:43:66:25:2b:af:2d:53:4d:97:65:d3:46:85:c1:b0:05:24:
5c:43:07:87:b8:01:57:d7:06:bf:c0:1c:d3:90:19:98:56:47:
07:86:fb:30:9b:7c:a4:f0:5f:c8:ec:01:88:00:3c:7c:13:f7:
8a:fd:e6:0c:40:d8:7b:c6:a4:8b:eb:2d:67:73:c7:35:df:a6:
0c:6f:eb:2a:6e:9d:09:0b:cc:ad:55:c0:16:e3:78:f4:fb:5e:
7c:39:6d:a1:44:ce:98:cb:5b:40:7b:d0:8f:cc:e0:86:74:35:
46:94:f6:76:1c:11:ca:ac:cd:8e:40:ee:a5:7d:6c:d4:6d:75:
f2:ff:29:1b:4d:ee:44:17:07:a6:a7:cf:c2:5e:1d:72:2c:53:
6e:34:ea:41:d3:b2:f4:98:84:29:22:35:28:54:57:b5:43:9c:
a1:f5:a5:86:de:a1:f3:f4:00:94:92:55:01:81:52:9f:e6:ac:
b5:66:34:02:54:ba:2b:9c:e5:da:b3:ae:9e:1b:b8:5c:1c:84:
42:fc:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:02 2026 by rpki-client