Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File: E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier: oEaLgvjjfHeKGYSrvnNxxBci7ospmBIdQNuUe2T2rJU=
Subject key identifier: 42:25:1D:4A:60:F1:45:D2:12:A8:BC:BE:3C:77:41:0C:49:5B:3E:1F
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 019D28BBBF137663D8E2F8BD66F259379A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:25 +0000
Manifest this update: Thu 26 Mar 2026 06:01:25 +0000
Manifest next update: Fri 27 Mar 2026 06:01:25 +0000
Files and hashes: 1: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (hash: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc=)
2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: fwsmvw5CSZjyegg8Agy38qQ4/KaKLzZ48Zv3nB0Xvqo=)
3: dYc4QHw_MlBGkai83ebw6UpAabw.roa (hash: PhHK3yJG/efNPRvamiA5Euk3gsAbVkNsvmnaGEDrJ+4=)
4: lV7YMWxQNgA7TeXSrVvxVEzp5zI.roa (hash: gNnh1Gc1ZxAnhLjUx2sE8mDgR6U7dHMmlaCZ5/JRTJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:bf:13:76:63:d8:e2:f8:bd:66:f2:59:37:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Mar 26 06:01:25 2026 GMT
Not After : Mar 27 06:01:25 2026 GMT
Subject: CN=42251d4a60f145d212a8bcbe3c77410c495b3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:3f:58:88:4c:a2:23:39:db:75:5a:0a:36:
c2:fe:d7:75:f4:d1:87:fe:05:fb:24:50:e8:5a:60:
e9:87:70:67:19:3f:7b:db:2d:4a:84:c1:ab:70:c0:
fa:62:69:4f:89:47:01:60:aa:fb:d6:41:9e:4b:28:
b0:65:64:5e:a2:89:46:1a:49:33:91:2e:41:fd:11:
5b:6e:04:5a:00:57:4f:fe:7d:7e:8c:ea:76:0b:cf:
ca:ad:a6:ee:86:fa:c4:72:a0:60:b0:13:fb:a3:34:
48:51:f5:02:72:43:78:df:ba:71:8b:b7:6f:7e:45:
85:06:48:54:b0:df:58:d2:3d:89:f8:8d:30:2c:a2:
37:60:02:4b:6c:c8:25:d8:69:86:f7:ab:b6:f3:9b:
a0:4d:7d:f2:56:c7:cf:9b:2d:7f:23:aa:35:ab:4d:
14:6e:8d:28:d9:02:09:c9:e3:c3:4c:99:be:39:17:
2e:3d:4f:2b:e0:c7:53:84:c2:a0:6b:cd:8c:ff:a3:
1a:ed:ef:b0:8b:ee:aa:72:08:b4:67:f0:03:e8:74:
38:ab:b3:25:07:89:4b:4a:ac:0d:82:ea:79:e5:99:
4f:cc:5e:9c:0b:13:3d:2a:a6:ba:4e:b7:6e:d2:17:
48:4f:db:7f:da:30:1a:42:06:8e:70:a2:d0:74:e9:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:1D:4A:60:F1:45:D2:12:A8:BC:BE:3C:77:41:0C:49:5B:3E:1F
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:d1:31:6c:48:f1:26:07:63:ce:cd:78:89:ef:64:ab:4a:
8c:db:05:65:e4:4b:14:ac:81:8f:eb:37:e3:16:77:e3:2b:83:
a3:cc:a1:6c:fd:fb:c8:18:a7:0f:d0:0a:d2:c9:31:4d:7f:78:
b0:77:7c:b7:de:07:41:81:c8:1f:3b:ea:3f:19:79:2a:a5:58:
4b:29:a2:a2:96:2e:57:e7:d4:f6:68:7d:a0:63:05:72:3f:f9:
f9:dd:3d:5f:d1:84:94:44:1d:68:81:de:28:8b:c8:a5:ee:67:
dd:a7:e0:10:a2:4c:60:5f:14:b8:76:d2:68:f8:4d:6c:36:93:
12:15:99:25:07:6d:5a:c7:60:98:25:1a:d7:95:11:02:9e:d8:
af:7c:3b:51:45:d2:65:44:7c:43:99:d4:f0:19:eb:5a:60:9f:
89:e4:d2:43:3a:10:1d:60:ca:de:c2:8e:12:bf:b2:3e:a6:34:
16:53:93:15:9b:d0:43:58:67:5d:c5:57:e0:aa:d0:43:03:eb:
e7:40:ff:dc:dc:35:85:4b:48:9c:9b:41:c8:fc:45:81:f4:5c:
1a:b1:55:10:17:2f:d1:33:f9:1f:00:0c:eb:7d:27:06:11:e3:
db:d7:2c:39:48:95:54:37:62:41:83:82:4d:42:cc:b9:b1:cf:
fd:a0:55:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou78TdmPY4vi9ZvJZN5oDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YzMzcyZGY1N2M4MTRhYmE4YjUxYTkwNzg2MWQ5MmI5
ZTRmNTUwHhcNMjYwMzI2MDYwMTI1WhcNMjYwMzI3MDYwMTI1WjAzMTEwLwYDVQQD
Eyg0MjI1MWQ0YTYwZjE0NWQyMTJhOGJjYmUzYzc3NDEwYzQ5NWIzZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYc/WIhMoiM523VaCjbC/td19NGH
/gX7JFDoWmDph3BnGT972y1KhMGrcMD6YmlPiUcBYKr71kGeSyiwZWReoolGGkkz
kS5B/RFbbgRaAFdP/n1+jOp2C8/KrabuhvrEcqBgsBP7ozRIUfUCckN437pxi7dv
fkWFBkhUsN9Y0j2J+I0wLKI3YAJLbMgl2GmG96u285ugTX3yVsfPmy1/I6o1q00U
bo0o2QIJyePDTJm+ORcuPU8r4MdThMKga82M/6Ma7e+wi+6qcgi0Z/AD6HQ4q7Ml
B4lLSqwNgup55ZlPzF6cCxM9Kqa6Trdu0hdIT9t/2jAaQgaOcKLQdOnpcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIlHUpg8UXSEqi8vjx3QQxJWz4fMB8GA1UdIwQY
MBaAFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMt
YTIyNGZlZmFjMjE4LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMtYTIyNGZlZmFjMjE4
LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOObRMWxI
8SYHY87NeInvZKtKjNsFZeRLFKyBj+s34xZ34yuDo8yhbP37yBinD9AK0skxTX94
sHd8t94HQYHIHzvqPxl5KqVYSymiopYuV+fU9mh9oGMFcj/5+d09X9GElEQdaIHe
KIvIpe5n3afgEKJMYF8UuHbSaPhNbDaTEhWZJQdtWsdgmCUa15URAp7Yr3w7UUXS
ZUR8Q5nU8BnrWmCfieTSQzoQHWDK3sKOEr+yPqY0FlOTFZvQQ1hnXcVX4KrQQwPr
50D/3Nw1hUtInJtByPxFgfRcGrFVEBcv0TP5HwAM630nBhHj29csOUiVVDdiQYOC
TULMubHP/aBVfg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:57 2026 by rpki-client