Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: XxzCVmy//2qvAfvCh+xoJGvA440PuBQy4DZb4hKBPkY=
Subject key identifier: 31:9B:B4:BB:F5:20:24:34:2B:39:95:7E:61:B8:9F:FB:51:7D:67:76
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 019D2A04E344CA6FBB85759CBD8D907AF207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 04B1
Signing time: Thu 26 Mar 2026 12:00:56 +0000
Manifest this update: Thu 26 Mar 2026 12:00:56 +0000
Manifest next update: Fri 27 Mar 2026 12:00:56 +0000
Files and hashes: 1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: NsWEbLM50mTZFywRDj3d1/sXpbO3aJ8/5vKitFO3LD4=)
2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:e3:44:ca:6f:bb:85:75:9c:bd:8d:90:7a:f2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Mar 26 12:00:56 2026 GMT
Not After : Mar 27 12:00:56 2026 GMT
Subject: CN=319bb4bbf52024342b39957e61b89ffb517d6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:81:5e:30:20:ae:8d:3a:b1:50:7e:f5:25:
0a:2b:0b:39:9b:7f:3d:69:02:9d:32:f6:2d:e0:13:
c9:64:c1:43:18:1c:74:99:a1:e6:17:ac:0f:82:53:
96:6d:db:7b:ac:9f:1a:78:31:c0:3b:82:92:df:c7:
0a:47:c7:04:a0:07:4c:24:ac:8e:d5:19:d9:d3:be:
ec:c5:ad:61:99:62:ec:03:4e:9a:e0:94:4b:ce:2e:
0a:97:41:e0:c2:83:44:54:ae:a8:8c:18:f0:74:28:
51:b9:80:33:83:a5:0f:bd:d5:7c:a7:d8:f1:cd:0a:
50:9e:19:d0:81:00:52:94:c0:b3:76:15:75:f0:f9:
2e:25:d0:b5:26:ff:0e:29:91:d5:ca:25:12:e0:7a:
14:52:70:65:32:f9:30:80:42:2c:10:51:79:cc:30:
c3:fe:df:45:92:28:c0:f4:59:fc:24:3d:00:c2:08:
05:25:6c:ae:36:51:f8:8e:c4:7d:3c:01:1f:a4:7c:
12:54:82:24:93:d8:68:58:e9:c5:0e:e1:3b:f2:a0:
bf:10:b9:16:fa:2a:57:e1:ba:83:cc:c4:e9:b9:81:
70:07:38:16:04:71:7c:34:17:a5:cd:2f:c6:23:b4:
0b:94:12:6b:2d:2f:55:50:9f:8d:88:5f:88:79:ab:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:B4:BB:F5:20:24:34:2B:39:95:7E:61:B8:9F:FB:51:7D:67:76
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cd:c9:40:65:85:97:23:f0:5f:d9:b6:ef:86:28:2d:71:88:
10:1d:93:d2:f7:15:a8:c8:8d:12:cf:d7:b6:97:ca:f7:3c:fc:
a7:43:00:27:d0:92:7c:f1:c9:48:cf:f1:fa:81:34:f6:30:08:
da:7b:6d:dc:03:2d:c6:a0:42:0e:39:32:d9:0d:e3:f4:b3:5b:
f1:73:3b:52:4d:5d:24:aa:77:ae:56:c2:f5:0f:c1:ac:8e:ea:
cc:c4:2a:fa:a3:23:47:b1:ea:cd:37:87:bd:fa:98:61:83:02:
04:19:66:48:f2:d3:b5:38:08:0f:fe:d6:0a:bc:b4:63:ce:98:
d3:12:9f:2b:be:fb:93:16:12:9d:65:6e:c2:44:b9:50:1f:0b:
63:b7:e3:20:ef:45:53:e1:6b:5f:4a:e0:d0:3d:72:f7:75:eb:
4d:27:f6:87:55:82:9d:ff:a6:d3:e4:41:83:a9:78:95:2d:35:
33:16:a6:5d:cc:99:b6:b4:fe:2e:8d:e6:6d:09:ee:95:92:36:
45:b0:3a:f9:1d:ff:21:c0:ea:35:38:75:49:3a:ab:05:e0:cd:
a0:bd:68:f1:44:a6:77:46:fa:95:bc:50:5d:19:fc:09:7b:3d:
f5:ce:43:98:27:33:6f:ed:6c:25:e4:c1:60:0f:74:4a:b6:cf:
ba:db:6e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBONEym+7hXWcvY2QevIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm
ZmU3YjUwHhcNMjYwMzI2MTIwMDU2WhcNMjYwMzI3MTIwMDU2WjAzMTEwLwYDVQQD
EygzMTliYjRiYmY1MjAyNDM0MmIzOTk1N2U2MWI4OWZmYjUxN2Q2Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRCBXjAgro06sVB+9SUKKws5m389
aQKdMvYt4BPJZMFDGBx0maHmF6wPglOWbdt7rJ8aeDHAO4KS38cKR8cEoAdMJKyO
1RnZ077sxa1hmWLsA06a4JRLzi4Kl0HgwoNEVK6ojBjwdChRuYAzg6UPvdV8p9jx
zQpQnhnQgQBSlMCzdhV18PkuJdC1Jv8OKZHVyiUS4HoUUnBlMvkwgEIsEFF5zDDD
/t9FkijA9Fn8JD0AwggFJWyuNlH4jsR9PAEfpHwSVIIkk9hoWOnFDuE78qC/ELkW
+ipX4bqDzMTpuYFwBzgWBHF8NBelzS/GI7QLlBJrLS9VUJ+NiF+IeaumFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGbtLv1ICQ0KzmVfmG4n/tRfWd2MB8GA1UdIwQY
MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt
MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh
LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc3JQGWF
lyPwX9m274YoLXGIEB2T0vcVqMiNEs/XtpfK9zz8p0MAJ9CSfPHJSM/x+oE09jAI
2ntt3AMtxqBCDjky2Q3j9LNb8XM7Uk1dJKp3rlbC9Q/BrI7qzMQq+qMjR7HqzTeH
vfqYYYMCBBlmSPLTtTgID/7WCry0Y86Y0xKfK777kxYSnWVuwkS5UB8LY7fjIO9F
U+FrX0rg0D1y93XrTSf2h1WCnf+m0+RBg6l4lS01MxamXcyZtrT+Lo3mbQnulZI2
RbA6+R3/IcDqNTh1STqrBeDNoL1o8USmd0b6lbxQXRn8CXs99c5DmCczb+1sJeTB
YA90SrbPuttu2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:34 2026 by rpki-client