Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
File: E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json)
Hash identifier: T6jQWyPKyN1ML7XqXwgHiiY0Vdsdjd9tX3kE4GjJCp0=
Subject key identifier: 0E:59:B2:40:C8:B2:A1:97:5A:63:49:C8:88:C1:C4:CB:4A:CA:05:BB
Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F
Certificate issuer: /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
Certificate serial: 019D277213C10E5534421A21A890857BDA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:20 +0000
Manifest this update: Thu 26 Mar 2026 00:01:20 +0000
Manifest next update: Fri 27 Mar 2026 00:01:20 +0000
Files and hashes: 1: 7mM5Vy0FmcI57nVM2N0-AfSVBXc.roa (hash: wP1KvF9QYlB6hksxmuYINc357Erv5WH0zwJdvB/xu/M=)
2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: 6RFWwavvDWJKttVSxvwvuqTmrHtaEoHo1KNbagTWAN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:13:c1:0e:55:34:42:1a:21:a8:90:85:7b:da:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
Validity
Not Before: Mar 26 00:01:20 2026 GMT
Not After : Mar 27 00:01:20 2026 GMT
Subject: CN=0e59b240c8b2a1975a6349c888c1c4cb4aca05bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:8f:40:f7:e5:06:b9:59:59:69:b9:44:69:
a3:ec:ac:32:46:25:d3:7d:3b:69:ab:ac:e5:c4:f4:
de:34:35:f9:f4:c6:ec:ea:30:cb:2d:12:de:54:3d:
0a:07:65:83:98:72:c5:4b:53:86:67:42:89:9e:86:
16:37:bd:d4:84:ea:64:3e:96:49:21:43:b6:e8:c0:
98:a7:c3:b7:49:81:7b:ed:03:cf:af:57:1b:3f:e8:
7b:ea:0b:a6:60:c3:e2:e9:38:9a:6f:9e:9c:08:2f:
d5:63:0b:fe:6c:92:91:ef:f5:e7:3b:66:e8:9f:e0:
99:a0:c3:60:e9:2c:af:eb:1d:61:87:4f:44:4e:15:
6f:d6:bd:51:db:b8:db:7d:85:39:04:5d:35:f8:9c:
4b:4a:cf:ad:d0:ee:ef:c1:0a:f6:50:54:21:e0:ce:
6d:40:8a:ee:60:fa:f4:0d:f0:4e:af:98:fd:ba:12:
08:c2:73:ca:c5:bf:6f:c6:cd:ec:79:1e:0c:64:46:
3b:e9:55:61:ae:28:e0:25:cd:bb:fe:db:ea:c0:5b:
3e:55:c4:f2:fe:d8:2d:17:49:69:72:58:b9:99:c3:
13:e8:76:fb:c5:de:b2:f8:b2:f6:a1:45:c0:9c:dc:
c6:4d:64:8e:2a:f7:59:25:9f:81:fb:18:5d:22:b5:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:B2:40:C8:B2:A1:97:5A:63:49:C8:88:C1:C4:CB:4A:CA:05:BB
X509v3 Authority Key Identifier:
keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:d5:4c:14:a5:47:66:00:e2:c7:4a:27:f0:d8:e0:5a:40:
51:63:f0:c0:7c:73:c5:c4:1d:b2:c3:86:44:6c:ff:98:45:b1:
9a:f6:ff:86:28:b0:01:54:56:94:01:f1:99:74:8f:99:a7:45:
3c:9e:9f:cb:30:b8:46:a3:8f:06:8a:5a:c8:a9:44:4d:ed:e3:
6b:99:55:29:68:5c:fe:a0:46:4d:e0:e8:c1:0c:f6:a5:47:cb:
4e:b1:4b:ee:31:ba:09:1e:92:31:ee:23:8c:e5:cb:b5:c0:5e:
59:cc:5e:7a:0d:4b:2a:96:7b:06:60:6e:e1:5e:e2:84:90:02:
1b:b7:4b:77:20:74:19:25:82:66:c5:60:83:b2:7a:b5:93:99:
41:1e:47:f6:3f:e2:31:b0:ec:83:a0:08:16:9f:77:cb:42:70:
41:72:ce:ea:bc:14:e3:b5:af:af:22:34:8e:2e:e1:61:e8:f5:
b8:1d:cd:31:44:c7:85:1a:3f:e4:74:d6:9a:1e:b8:17:5f:c5:
2f:a7:83:11:e0:a8:83:a3:0e:a3:5e:0c:74:cf:73:41:e3:e7:
a5:a7:1c:7c:43:80:64:07:a1:c3:95:b4:87:89:44:1e:f5:b8:
ba:32:ff:ef:0b:f5:30:ec:15:3d:6f:fb:20:0f:ea:89:17:8a:
84:c8:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:38 2026 by rpki-client