Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: U51+4adJ8tRv91MaimLikWm1zmOZ+PUdZlw/Eg8Bv7o=
Subject key identifier: 0A:C6:46:80:E2:6C:C9:20:61:F4:B8:E6:00:FC:E7:78:DC:9B:70:C4
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019A041110C6670B1BCD32DBD80846332B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 16E3
Signing time: Tue 21 Oct 2025 00:00:18 +0000
Manifest this update: Tue 21 Oct 2025 00:00:18 +0000
Manifest next update: Wed 22 Oct 2025 00:00:18 +0000
Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: KG2Nbe8CS5ex6AMVOuXFugnKmFyzAwwYCk5d5eFYzvg=)
2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:10:c6:67:0b:1b:cd:32:db:d8:08:46:33:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Oct 21 00:00:18 2025 GMT
Not After : Oct 22 00:00:18 2025 GMT
Subject: CN=0ac64680e26cc92061f4b8e600fce778dc9b70c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:f4:c8:e5:b4:da:55:98:01:07:7d:9c:f4:
a1:f1:82:cc:33:95:de:c7:1b:63:f4:33:41:63:59:
20:e2:d1:6d:02:4c:b3:ce:6d:b3:58:0c:4a:56:71:
90:93:80:66:37:80:91:b0:d3:58:db:e9:ed:b7:3a:
04:36:47:7f:51:73:67:16:d7:30:3a:7d:87:cc:fe:
a0:bd:8b:74:76:3c:5e:0e:f2:67:d9:e4:4f:96:be:
4f:5a:36:90:d5:e2:bb:d6:01:1f:c4:55:df:5a:15:
50:2c:c1:e8:97:71:3a:41:b0:8e:af:f3:8e:cf:1b:
c9:ca:79:d2:5e:02:68:96:ad:9f:52:4e:01:a5:67:
d4:73:c4:32:dd:f3:91:59:d6:67:be:1a:d5:fd:df:
f9:ba:b4:6d:9d:2a:b7:10:27:e6:25:d4:a4:a1:71:
55:52:d9:ff:c1:23:71:29:53:f5:d3:ac:5b:cc:d0:
85:52:0b:d6:13:57:da:97:26:82:60:7f:ed:ce:ec:
a5:f4:0a:52:91:b3:22:73:f6:4e:2a:29:6d:44:7e:
eb:b4:2e:2a:1c:bc:12:97:a7:20:30:e1:00:97:a6:
e6:63:ad:31:f2:b5:33:c5:6f:7c:37:04:fb:46:e2:
aa:75:57:e7:27:83:e0:0a:7e:e0:cf:ae:9b:ac:10:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:46:80:E2:6C:C9:20:61:F4:B8:E6:00:FC:E7:78:DC:9B:70:C4
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:ba:14:58:7c:78:ff:a9:09:45:36:a3:69:29:4c:81:47:
dd:de:af:a5:16:b9:aa:ea:f5:59:ec:d6:dc:a1:ad:7b:29:e9:
bf:35:dc:29:f8:6a:f5:f5:7f:3c:52:ee:7b:ed:e0:ab:25:ec:
53:be:16:a9:ae:a0:96:a4:81:91:e1:10:4e:09:3e:4f:b9:6c:
d6:73:51:31:39:09:0e:32:e2:5d:e2:53:b3:e6:b9:09:f3:d0:
36:4e:78:15:a7:9c:04:d3:0e:ec:78:4c:14:49:50:5c:0f:d4:
b6:7e:46:fc:c1:9f:a0:e1:a5:49:d3:af:d3:a8:54:1e:3f:63:
61:94:8b:2e:2d:bd:7e:d9:32:ec:40:71:90:48:16:d8:79:68:
8f:c1:04:43:84:f9:d4:7e:6e:da:32:77:28:39:c6:ae:17:a8:
0b:c7:ba:62:75:22:a0:81:28:95:86:13:07:f8:86:d9:d2:34:
39:a2:36:88:6e:e8:60:8f:67:c8:af:93:cc:51:70:4b:96:35:
1c:cf:15:22:54:e2:de:63:21:a1:a1:ff:77:8f:a9:03:22:be:
99:36:15:c7:30:f1:63:90:27:5b:0d:64:d0:77:d2:af:79:63:
9e:82:31:e4:d7:08:27:63:9b:a8:28:5c:54:a9:fd:fe:56:f6:
03:31:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:57 2025 by rpki-client