Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: RyP/rBDbwpS8q2yoDy6snRsoU1BZdg42/JKAWpgdEoQ=
Subject key identifier: 91:CC:C1:CD:30:E1:8B:EE:BE:C7:D3:ED:7A:75:0B:67:98:2B:70:B8
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019E1FED01AFAC29E33C5C1B6E043BF5A0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 1645
Signing time: Wed 13 May 2026 06:01:26 +0000
Manifest this update: Wed 13 May 2026 06:01:26 +0000
Manifest next update: Thu 14 May 2026 06:01:26 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: 8fkiXadNkKTBgduX9ZXvXW5O+LC3eIBf7j/klslRl5A=)
2: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (hash: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:01:af:ac:29:e3:3c:5c:1b:6e:04:3b:f5:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: May 13 06:01:26 2026 GMT
Not After : May 14 06:01:26 2026 GMT
Subject: CN=91ccc1cd30e18beebec7d3ed7a750b67982b70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:71:ba:6c:a0:91:d4:ef:d7:6d:1e:fc:fe:
36:02:69:c6:2f:fd:b1:e2:3f:48:50:57:af:16:69:
7b:a4:1b:b4:1f:3b:18:3a:61:b3:12:18:20:95:d8:
95:69:2b:e6:9b:a9:46:5c:3c:f0:14:f0:3d:cd:cf:
84:c4:b6:36:ef:d6:a4:0b:86:69:c0:07:64:34:c4:
15:c2:12:bd:17:be:3d:91:0d:ca:59:46:4d:58:29:
1d:c6:9f:08:70:d3:de:e5:ad:84:6d:33:b3:0a:28:
47:d4:9e:7b:32:88:21:05:e2:cb:15:da:91:6e:14:
29:a5:eb:2b:02:dd:3c:01:8a:03:27:55:7f:5e:11:
8a:e5:4e:45:24:89:2e:38:e8:cf:28:97:e7:4e:32:
6e:93:d4:1b:e0:99:67:64:86:bf:78:b0:fe:48:95:
e1:df:b1:6e:9f:35:e7:81:42:91:ac:19:ef:3b:d4:
b0:2d:36:82:72:45:27:43:45:e1:db:17:00:82:eb:
da:f7:0f:0d:5c:4f:42:0e:7a:3d:7b:af:9e:89:d1:
af:32:fc:be:bb:c2:f9:51:b5:9b:40:0c:a2:25:1a:
fc:46:75:c4:ac:ba:b1:99:fa:77:1d:c3:d7:e6:1d:
33:0f:ba:a6:13:b6:67:f8:b7:1d:63:16:3c:46:c9:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:C1:CD:30:E1:8B:EE:BE:C7:D3:ED:7A:75:0B:67:98:2B:70:B8
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:4b:b5:15:ed:33:9c:43:7d:e6:a1:c5:e0:62:4f:b5:65:
44:a6:e2:f6:87:d9:27:c4:1b:46:f4:7b:58:b0:c0:b1:41:27:
e3:a5:68:ae:8c:9d:3d:61:0a:db:e7:51:e0:d8:b1:44:61:ac:
d5:6a:9e:62:b8:51:e3:9d:a5:3e:65:15:c2:b9:bd:22:61:3b:
a4:e3:3c:c3:2a:d0:c4:d4:8b:8f:3c:26:25:a4:f3:76:e2:6e:
c7:4e:b9:07:07:5b:a1:50:37:57:c9:2b:57:16:ff:44:ae:8e:
33:e5:fe:cb:7d:f6:6b:5d:ef:dc:d3:d5:f6:7c:09:12:8f:96:
80:bd:15:0d:1b:1a:b5:f5:77:23:8a:a5:29:44:8e:de:90:8e:
c8:52:ab:c0:0f:25:8f:ea:65:fa:ae:9d:d6:c2:44:62:fa:a0:
78:45:ad:6a:68:9c:e6:ea:2f:d7:11:8e:75:98:97:01:14:ec:
15:0a:07:44:00:d3:c4:c5:29:4a:29:24:70:e9:b2:5c:d9:d1:
2e:13:a3:35:22:84:13:58:dd:7c:57:a7:9f:43:4d:ae:ae:9a:
5b:4f:36:e7:a0:6d:41:e1:5f:7a:b7:5f:cc:50:08:42:ab:e9:
e5:69:8e:36:62:aa:a0:23:81:b1:33:3b:06:28:7a:a6:e0:be:
b9:24:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:19:59 2026 by rpki-client