Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: SJDnEo7kwuDTBgmnQEy/0aUn4YqimuQdNnpu9vvc1jI=
Subject key identifier: EE:A6:8B:48:C4:9A:90:5D:34:DB:E2:63:55:C5:30:81:26:47:9B:8B
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019D2772D88DB2B3233B3833AC92EB7F97FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: sYraYshqI5mtEzMdxJkrgikH73X52D+fbOceRWQt4Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d8:8d:b2:b3:23:3b:38:33:ac:92:eb:7f:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=eea68b48c49a905d34dbe26355c5308126479b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:58:34:c0:b1:f0:da:6c:df:8d:7b:85:5b:
e9:9c:71:94:c0:18:b4:8e:2f:9a:11:73:bc:17:ac:
59:ad:96:3c:dd:11:4f:bf:5a:7a:28:4a:90:7e:02:
11:aa:e2:61:10:b0:3d:d0:9a:13:57:38:3d:10:8c:
7f:d5:d4:6a:49:4a:be:a1:63:b1:06:66:7d:aa:8d:
3c:85:d6:f2:8c:58:2f:45:9c:3f:24:bc:0f:fb:f6:
a6:0f:1d:28:06:41:fd:ff:a0:23:56:4d:ac:cc:23:
ff:12:0a:fd:bf:01:1f:e7:f4:ab:f1:cc:ca:79:f5:
52:8e:9c:db:d7:43:c2:c1:f6:c7:34:d7:f5:5d:43:
1f:28:1e:90:00:ce:80:1b:4f:d1:82:ba:38:10:5e:
1a:3d:94:ec:56:30:f9:7f:96:1c:17:54:56:18:24:
65:7a:7f:c2:73:15:1c:b5:0d:7e:45:6d:57:62:16:
a6:9e:f5:82:59:e2:c4:d2:18:b9:6f:ab:a6:0a:d2:
46:2a:fe:83:a0:d0:21:5d:03:95:db:b1:51:e1:42:
08:5e:4b:32:93:cd:76:84:ec:5c:7d:f4:ac:d7:c9:
9b:7a:9c:93:44:bd:b0:e3:4e:35:75:18:77:9c:5d:
5c:95:72:6d:6f:2e:d7:9b:ed:b5:dd:7f:65:2f:f7:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:8B:48:C4:9A:90:5D:34:DB:E2:63:55:C5:30:81:26:47:9B:8B
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:29:75:4b:d7:38:b6:3f:89:87:60:09:1c:11:99:47:75:
aa:e8:b4:c2:9e:ae:2d:64:68:9d:2c:e4:08:fb:f9:f9:9c:41:
b5:43:32:b7:08:38:21:6e:15:65:77:28:35:7d:f2:08:da:ec:
03:9d:59:06:00:44:c5:7a:ce:00:ea:2d:68:92:59:fc:86:47:
4a:07:53:99:80:2e:08:71:a6:5d:e0:08:f5:65:dc:63:23:31:
ba:3c:fd:20:f4:a7:d1:2f:f8:9f:df:ea:8e:8a:25:e6:c0:83:
34:7c:60:d6:e3:17:7b:f9:0b:ed:3e:5f:6b:ef:5f:dc:76:97:
18:45:cf:b9:cf:4d:74:a2:c9:be:42:0d:85:08:22:d6:42:ac:
4e:b3:3a:49:87:72:fc:f6:40:c2:ba:31:3f:17:f7:0e:7e:98:
e2:72:44:ab:1d:0f:cd:d6:b0:27:bc:78:b1:49:d7:7c:4f:89:
58:39:8c:74:a8:bd:6e:b1:46:ac:1d:dd:1e:c0:0e:c2:22:45:
ee:34:7c:d9:5c:38:ee:29:6e:55:20:ca:fb:4a:3d:b4:cf:13:
9a:c8:73:e4:22:76:42:77:16:52:63:61:ba:3a:c2:8a:04:85:
4d:dc:f6:9e:c8:7a:c5:44:3d:86:91:29:54:61:c3:1e:40:73:
fd:34:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:56 2026 by rpki-client