Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: II1aNBz4VUSOP2d982D52gMM7Q9w1p2rUZ4r7I0k/SU=
Subject key identifier: B1:1A:63:AB:E5:DF:F4:66:65:8C:B3:83:B8:D6:98:96:5F:F9:84:D2
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 019D2B4E519E5B728B7C93F376E15E9EB0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 18:00:46 +0000
Manifest this update: Thu 26 Mar 2026 18:00:46 +0000
Manifest next update: Fri 27 Mar 2026 18:00:46 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: TZ6+XwfeXv/hhAO0MTx+Y8E65pYUs+bj16eaNQL953s=)
2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:51:9e:5b:72:8b:7c:93:f3:76:e1:5e:9e:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Mar 26 18:00:46 2026 GMT
Not After : Mar 27 18:00:46 2026 GMT
Subject: CN=b11a63abe5dff466658cb383b8d698965ff984d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:38:04:5f:bb:7b:7b:ca:e9:47:22:30:fc:
1c:08:34:33:7a:bf:51:1e:9e:99:03:29:78:e8:c0:
ff:bb:5a:4d:ec:a4:7a:29:6c:51:5e:08:24:a4:0b:
1e:63:58:4f:16:14:af:4e:8a:7f:71:ff:66:09:8f:
bf:97:5d:24:18:44:fb:f1:79:44:12:8b:73:77:22:
90:41:07:c5:98:70:24:2a:af:09:e9:67:35:48:80:
b5:ef:d7:6e:87:72:e2:44:1a:fa:07:41:d3:68:d8:
f4:5a:78:99:c4:67:ec:17:0f:7e:3a:4e:2d:60:cf:
cc:06:64:b9:fe:11:71:e4:0e:11:fc:1e:9c:de:6c:
f0:1e:05:c8:0e:12:7c:8c:0f:52:64:ff:d4:75:fe:
3d:c4:a9:21:a2:6f:25:fc:68:ef:7f:aa:73:2e:de:
e9:a5:f0:43:8a:78:f9:62:cc:76:3f:18:0d:0d:b8:
a5:9f:f7:75:30:22:ab:07:16:e4:ba:28:d0:36:5c:
42:90:3c:bf:ae:40:9b:16:6c:c4:1a:50:ad:bc:63:
02:b9:50:0a:37:19:ca:60:67:b1:40:fe:5f:75:de:
a0:80:86:9f:85:34:0a:05:32:39:5d:8c:2d:a7:89:
8e:e7:6e:3a:89:10:ab:07:73:6b:21:3d:88:3f:d7:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:63:AB:E5:DF:F4:66:65:8C:B3:83:B8:D6:98:96:5F:F9:84:D2
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:b5:54:f9:4c:22:00:f9:d6:a2:4f:51:6f:7c:b4:47:0e:
c1:96:f0:ef:e7:66:e4:b1:26:af:68:ee:da:64:e1:a9:27:b9:
03:3e:69:65:47:bf:14:fb:24:8a:17:96:14:08:05:60:f6:85:
1e:bc:be:f4:e3:cf:40:11:b6:cd:b0:f1:bf:82:22:70:0d:29:
2b:bc:7c:03:98:61:99:cf:03:2c:7c:ca:b0:bc:ff:30:16:fa:
3e:ab:e4:c1:e6:8b:63:31:d6:6a:93:7d:a1:5e:d6:5f:61:f5:
13:66:ce:92:86:85:3b:5f:a0:c7:66:53:57:d8:dd:bb:ff:ee:
b1:43:e4:36:6a:5c:23:ec:c0:b4:ce:70:01:a2:39:d7:70:a6:
ac:0d:61:d6:75:54:ff:f0:21:42:35:a1:87:2d:7f:0f:2b:68:
34:20:77:50:b1:0f:4d:45:c4:05:c9:bb:0d:00:5e:01:21:d3:
1d:61:af:95:e8:a5:8e:39:40:76:a0:35:11:b5:d1:88:8c:59:
10:94:77:ea:b3:ae:0e:b1:c6:24:0c:a4:27:d8:05:ac:4d:cc:
79:b5:87:f3:e7:56:e1:36:f9:38:a0:2e:d0:e5:bc:ae:92:6a:
07:0a:41:fb:b1:c7:2c:e0:b5:f8:40:17:92:f4:39:d7:80:d3:
3c:32:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:17 2026 by rpki-client