Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: 2ukzMhti++1H/JjKkwkX4k0xbLh7/mCGC1jIRnXu21w=
Subject key identifier: A1:33:8C:5E:D6:95:A3:91:68:51:2D:09:4E:39:D3:0C:25:49:9C:88
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019D2628973CF9F6D564AE8DC4A23ADF3A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 1399
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: FSBf1qMEGDNSzyogndA5WD4fbZGAB/gZiF6lYsIHWcQ=)
2: e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa (hash: s4RfX2gBANtJwnzla52YXp/+/wPoOUDbAQSSVBhIKuE=)
3: j_am5tvWSODEl-1F1N6GpUgDtG0.asa (hash: BHkFq4X9N/KlEfD7Uqlg8e5+ZIt+cDIE3YR+BDu/kOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:97:3c:f9:f6:d5:64:ae:8d:c4:a2:3a:df:3a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=a1338c5ed695a39168512d094e39d30c25499c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:df:c7:d2:26:7d:d6:37:e2:4d:ad:8a:6f:
62:a8:e5:6f:1e:73:b4:84:e1:53:71:b7:d0:36:f0:
b4:a4:ce:04:61:4b:14:06:77:6f:6a:7f:bf:9e:98:
d4:be:f1:1e:2e:15:74:18:21:04:e3:e1:ae:40:4e:
0f:05:a8:d0:40:88:c0:82:77:69:84:d8:dc:d3:7b:
db:06:b2:00:56:7a:03:8c:40:28:f8:23:5d:58:e7:
47:26:73:ae:d2:38:33:18:16:fb:9c:e0:92:9a:72:
98:ad:9c:82:3c:b1:8b:49:43:45:54:c3:13:79:57:
67:ec:ce:14:01:c9:22:55:10:fc:29:7b:a7:46:52:
b8:e6:f8:39:0d:cf:62:66:b6:bc:0e:4c:8a:eb:79:
84:7e:83:36:a0:af:86:d1:7d:7f:a7:33:e3:ad:d1:
f1:c4:21:37:fe:a1:11:c1:43:de:c5:6e:e5:cf:46:
7c:8b:ba:05:96:e2:09:ea:2f:bf:be:36:f8:51:de:
ca:d4:0c:b0:cb:87:b2:5c:38:4c:b8:74:56:a9:65:
65:ab:61:e2:98:67:7f:23:08:6e:81:46:8a:8c:1b:
78:af:5d:a1:75:7f:d1:e6:4f:c1:ef:44:24:36:2f:
fa:9f:a5:18:d6:17:af:4a:89:2b:5b:28:bb:86:ac:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:8C:5E:D6:95:A3:91:68:51:2D:09:4E:39:D3:0C:25:49:9C:88
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d0:15:4e:2f:54:da:f1:db:03:45:f9:c3:8e:79:fe:6b:15:
05:60:5e:38:de:9c:9f:f7:2a:00:30:cc:61:b9:8b:f0:1c:ce:
a4:19:02:32:b6:d4:c8:35:e4:34:2d:6c:7c:b7:1d:8f:4f:6a:
f3:8a:b8:23:29:eb:c9:b7:d7:6d:ba:10:99:96:5d:fd:c4:49:
41:ef:30:5f:76:43:5a:0a:e3:ab:9a:c6:05:81:03:93:d8:0e:
82:2a:1a:cc:b2:5f:00:ea:3f:a6:c8:24:4a:69:d9:97:bc:98:
a8:73:d7:82:92:f3:01:96:9e:69:b6:00:38:82:65:2f:f1:42:
dd:ee:f1:26:91:61:5b:d3:f3:4e:e8:ae:17:3f:56:68:2d:67:
62:6e:c7:97:a5:13:1e:84:03:0e:23:ac:7e:60:f6:c7:94:6d:
4e:ee:f9:49:19:64:cc:73:3f:50:fc:6f:5e:8a:8f:51:45:10:
37:30:d9:58:a4:28:46:51:50:0c:79:b5:0d:95:ae:ce:7b:90:
ed:07:70:b6:ed:18:34:63:06:33:2e:12:d8:81:e4:06:e5:e4:
22:c0:c0:e7:9f:4d:73:cd:d5:5d:09:6b:e5:12:08:e9:81:f1:
16:f2:ba:1e:f9:be:1f:35:32:e1:9d:0b:53:09:21:e8:57:c1:
ff:8c:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:36 2026 by rpki-client