Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: 7uVbLlCj7zAs8IU5u4CS8IlZCd5Pw7JI2MoA1fe37NY=
Subject key identifier: DB:AC:F7:1F:B1:D9:51:44:24:A4:84:18:57:97:BD:5F:D2:18:03:98
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 019D26CCB0CF365ABCDA2D960DFDCD3D8A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0EED
Signing time: Wed 25 Mar 2026 21:00:41 +0000
Manifest this update: Wed 25 Mar 2026 21:00:41 +0000
Manifest next update: Thu 26 Mar 2026 21:00:41 +0000
Files and hashes: 1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: NlfRRI7VV4UDOrnhNhyc7EyfNH1qEH9Vc1ptUDWNye4=)
2: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (hash: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=)
3: OPOHu4baKrOuoP3MheEFtHAeXko.roa (hash: A1lA/lI/7Nnxtr0SxEKDti+LjBheE5trX2b66xGDddo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b0:cf:36:5a:bc:da:2d:96:0d:fd:cd:3d:8a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Mar 25 21:00:41 2026 GMT
Not After : Mar 26 21:00:41 2026 GMT
Subject: CN=dbacf71fb1d9514424a484185797bd5fd2180398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:2f:b0:9a:63:7f:a6:ef:28:5d:3c:9a:89:
82:ee:67:28:f1:f8:59:48:6b:4a:2a:71:70:8c:c6:
91:9c:e8:cd:5e:87:be:3d:32:4b:2c:f6:f3:d5:f0:
d9:f3:ab:dc:0e:7b:bc:e0:7f:bf:40:20:61:10:99:
fa:a5:29:3f:d4:20:93:46:09:a5:4e:f2:57:bc:be:
53:5d:a8:93:f1:69:1d:31:57:5e:69:78:a8:39:89:
8c:08:9c:d2:d6:ab:9d:f1:a0:16:c2:d0:d2:ca:95:
bc:f0:5c:9e:f6:8c:2e:c6:eb:55:ca:b2:89:37:21:
d5:04:28:bc:12:97:38:6b:31:bb:2a:f4:2e:f2:bc:
07:f4:fd:f1:3d:16:d8:25:bb:f3:9a:ab:07:18:08:
52:cf:2c:2a:00:8c:6a:8d:12:df:6d:10:8f:91:25:
fd:57:8b:30:f9:01:af:10:c5:00:2b:13:56:31:0a:
00:57:64:9d:41:bd:a4:91:94:ef:dd:0f:19:58:53:
4f:08:21:76:6e:b8:d7:b9:8c:5d:9a:a8:78:67:d4:
7a:e8:44:4f:b6:9b:fd:e9:14:22:57:c4:7f:10:16:
26:1b:d9:8b:22:3b:f7:c3:53:62:01:0e:ea:48:22:
d1:74:90:bc:0c:b3:6a:18:23:99:b5:a3:1c:c7:c2:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:F7:1F:B1:D9:51:44:24:A4:84:18:57:97:BD:5F:D2:18:03:98
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a2:ed:eb:9a:ab:47:41:bc:92:47:3a:c7:89:bb:85:69:00:
c6:ea:10:f3:f5:b5:c1:e3:46:37:76:01:02:14:13:76:bc:9a:
d9:30:ca:e1:5b:90:42:e5:64:5b:97:1b:1d:f9:b3:42:d0:4a:
19:ea:9d:00:e5:91:3b:c8:48:e4:c7:f8:c0:14:11:7e:71:b9:
48:49:89:4b:46:8b:c9:31:16:df:50:3b:47:c9:2b:65:7e:ae:
d2:26:48:63:a9:2e:a4:d8:ce:7a:57:57:05:b7:c2:3c:be:bd:
a2:99:76:c7:ac:7f:29:d7:2a:7f:dc:a1:57:92:bb:e6:67:d0:
b0:1f:ac:83:e6:60:1e:22:af:4e:5d:86:40:1f:16:ce:0c:17:
3a:a6:09:46:8a:20:2c:28:f0:b5:7a:ef:fb:ba:d0:15:0a:5a:
b9:02:a6:ec:7f:26:a5:1e:68:41:33:3b:94:84:a9:fb:9b:59:
1c:d8:cd:ff:c0:01:ae:78:7d:4d:26:71:0a:66:33:c2:c3:70:
5c:01:69:7e:c1:ec:c0:45:f7:25:f9:5c:00:9e:d3:e8:02:87:
a8:89:20:db:c8:d7:eb:01:f9:c1:f5:7c:39:29:a0:fa:48:e8:
20:0f:01:57:89:35:af:0a:60:c5:a3:7f:8a:60:7e:a9:09:35:
f7:95:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:29 2026 by rpki-client