Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: quBflT6e/TcmFzlFWTW5UKyX4NlIXVR8IQ3wFrgGU24=
Subject key identifier: 85:28:A2:BF:4A:45:DA:7E:9B:5B:5A:00:93:14:BE:38:43:1C:77:81
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019E1EDA5898F768E4A3562A9F04132FB1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 103F
Signing time: Wed 13 May 2026 01:01:26 +0000
Manifest this update: Wed 13 May 2026 01:01:26 +0000
Manifest next update: Thu 14 May 2026 01:01:26 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: lqHwJNE3Iioe9d9F8iKkjg6QaXtY31an/rEgdEkbxpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:58:98:f7:68:e4:a3:56:2a:9f:04:13:2f:b1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: May 13 01:01:26 2026 GMT
Not After : May 14 01:01:26 2026 GMT
Subject: CN=8528a2bf4a45da7e9b5b5a009314be38431c7781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:b6:ca:83:d5:b6:ae:6b:3b:c3:99:09:ca:
8f:3f:1c:b2:0a:3c:b3:1b:1f:1a:90:a9:86:a6:aa:
eb:c1:69:d6:47:d8:aa:ab:03:ec:7d:46:2b:1f:47:
6b:e7:7a:cd:be:10:ff:fd:d6:42:b7:44:80:e4:9d:
58:9d:11:c9:11:a3:14:45:5a:cc:b5:36:03:4a:1b:
c5:aa:12:72:a9:1e:81:66:c1:b2:a8:bb:55:8f:21:
ed:cd:aa:43:17:3a:0b:6f:3b:52:f5:c0:6f:31:b1:
3b:cb:87:2e:21:bf:35:6a:ff:db:bc:88:4c:a9:51:
71:4e:39:2b:2a:bc:85:66:c7:6f:24:b9:f3:f7:3f:
a8:21:56:9c:5c:8f:b6:bf:8f:43:2e:d8:15:d9:aa:
7b:7c:0f:fb:25:84:56:2e:ee:1e:f3:86:93:e3:01:
4b:0f:05:6b:55:98:92:33:e0:20:0d:e3:a1:d1:08:
4f:2f:29:83:db:c7:50:02:32:01:10:18:e3:da:fb:
85:ee:39:6e:7a:0f:17:96:da:68:11:49:2a:8e:17:
30:f2:58:29:45:6d:21:bf:76:9f:5a:15:3e:96:93:
7d:24:0d:28:a8:6b:b6:d2:68:44:05:63:ed:f3:2f:
65:2a:07:ee:dd:2d:96:cb:d2:b5:4e:5c:af:79:4a:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:A2:BF:4A:45:DA:7E:9B:5B:5A:00:93:14:BE:38:43:1C:77:81
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d1:20:4e:12:2c:3f:c7:5b:40:78:da:07:53:a2:e3:a8:15:
63:8e:04:70:8d:d1:5d:35:5a:56:a9:c2:b0:bf:97:9d:5a:42:
fc:05:b1:40:90:f5:95:3a:b1:44:cd:ae:29:fa:c0:22:02:d6:
64:c7:dd:22:da:99:8b:b1:ef:fe:ff:0e:e3:78:0b:46:a7:43:
ed:df:d0:c5:a4:fc:7a:18:af:9f:22:8f:af:62:91:a9:cb:a7:
76:2d:05:72:05:e3:79:bd:a9:9f:32:71:d6:6d:87:2c:e0:63:
54:4f:63:d3:2b:9f:8f:15:8b:9a:aa:a7:03:e2:b9:e6:e0:07:
3f:4e:52:11:30:d7:43:33:54:da:7c:7c:43:fc:7a:54:d1:89:
2c:2a:c8:63:b8:0d:24:50:15:d4:f8:0b:86:f5:d6:f5:b0:fb:
8a:e5:3f:47:f0:17:d5:6c:28:eb:53:89:da:39:52:95:ad:03:
22:cd:4d:eb:86:5d:23:fd:0d:e2:d3:f6:4e:41:92:48:5d:46:
5b:2d:7a:05:6b:45:34:bb:d7:20:1c:fd:d5:70:d4:5c:8c:0c:
77:14:82:c1:74:1d:44:cc:26:cd:c3:07:a6:f0:76:dc:09:91:
4c:36:0a:d4:5f:c9:b6:04:53:c3:4d:b4:92:e9:e7:bf:a9:4f:
48:fd:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:20 2026 by rpki-client