Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: gfc5qjJm0ZMD0muuMn+BO4+LWQqGhfFTKOajMLmkzOk=
Subject key identifier: 24:C5:E4:75:FF:8A:DB:FB:AA:05:54:68:FF:DF:1D:C2:88:87:F8:B1
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 019D265F98AF3AF65E005B51013BB2D59BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 18A9
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: M/IhBLP/yz8TVrs4RxcSEQpfcCgYjg5QYG2nazv0giw=)
2: S9k_0IlINL-KeGXzKJG1-aE0tUw.roa (hash: O/mE/4dpTNBbXj9EMpbseAy+oyk2TkWYstcB6Otmbbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:98:af:3a:f6:5e:00:5b:51:01:3b:b2:d5:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=24c5e475ff8adbfbaa055468ffdf1dc28887f8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:6f:a8:c6:11:08:76:67:13:08:95:27:6d:
8f:9c:4a:66:68:52:fa:4b:6c:96:d9:31:aa:83:f5:
27:66:18:b5:60:2e:e1:93:b3:19:99:10:ce:5e:56:
e7:53:f4:9d:69:f4:6c:ec:e6:f0:3c:bb:d7:2b:36:
94:36:7e:b9:a0:61:18:71:a9:02:c1:60:d9:aa:66:
d1:68:1f:29:64:36:e7:70:14:59:a6:5a:56:b0:05:
24:87:b9:a9:19:42:78:66:06:4c:3a:0b:fc:e3:75:
47:cb:4e:fb:8e:fa:77:cf:9f:d8:b9:4a:d6:7f:87:
97:f1:3e:18:2f:f4:1e:02:6f:1f:dd:9b:89:7d:e7:
22:f8:a8:e5:e7:e0:45:bf:99:17:e5:4d:7c:2f:ed:
35:40:0f:7c:b0:1e:4b:4d:1b:9d:51:8c:a4:3b:58:
6b:b6:49:b9:70:49:d0:32:23:f4:d6:a2:cd:79:c2:
52:12:73:2b:4e:42:fd:d2:64:17:4e:a5:68:a3:22:
16:16:c8:b7:49:da:b2:44:cb:21:9a:e1:b5:46:94:
da:c4:aa:6a:f2:ac:48:b3:86:d5:0e:2c:eb:71:30:
2d:19:4b:92:72:62:08:41:be:90:36:b1:fd:b4:17:
cd:74:fc:20:d4:f1:97:47:08:bb:4c:20:c4:60:54:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:E4:75:FF:8A:DB:FB:AA:05:54:68:FF:DF:1D:C2:88:87:F8:B1
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:08:66:39:fb:28:33:4e:db:2e:63:f0:6d:21:30:9a:16:ef:
d8:a0:5c:af:e9:21:79:20:44:aa:4e:33:da:f5:a9:e4:08:52:
2f:2c:92:b5:94:77:04:1c:04:af:de:0d:bc:50:b0:ef:45:71:
0a:9c:4c:bd:e6:7e:e5:24:ab:ca:ae:c7:1e:ba:ae:19:0c:67:
8b:98:25:28:b9:20:d3:de:7d:4a:b4:c4:30:0e:fa:63:de:c9:
69:fb:7d:ca:1e:3a:0a:c3:02:37:14:f6:85:62:5f:e0:16:2b:
85:db:b0:12:dd:c2:f9:83:a7:00:6a:a1:f2:74:44:64:9a:88:
45:b5:d6:6d:fc:bd:ed:c0:7d:7f:b8:ef:26:44:85:57:b5:d7:
b1:a0:54:31:e9:f3:e7:02:57:95:b9:30:8b:f9:60:fd:2c:13:
32:b4:1c:72:ad:8a:74:1c:7d:89:08:b9:00:90:27:eb:de:f7:
84:09:40:2e:65:63:d8:61:b4:9a:71:15:ff:4a:e8:7a:60:a4:
34:cd:3f:01:01:df:cb:b5:41:e2:4a:3f:df:10:a9:47:00:1d:
10:cc:d8:c5:db:83:30:69:3e:6c:30:e2:c7:06:94:0a:36:a4:
75:7d:30:9a:2a:50:37:5a:3e:2d:58:d4:26:33:a9:d8:5a:42:
66:47:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:41 2026 by rpki-client