Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: P4IcExQvJV2jUR7ZoK+4H2SgsLaIP113E1LJw8nS8xc=
Subject key identifier: C1:99:51:E4:58:AE:BF:DA:3B:5F:E6:E8:60:24:0F:87:25:E0:0D:68
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019D2A3C3F6D7FB590F31AEF9CDF1933A2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0ECB
Signing time: Thu 26 Mar 2026 13:01:24 +0000
Manifest this update: Thu 26 Mar 2026 13:01:24 +0000
Manifest next update: Fri 27 Mar 2026 13:01:24 +0000
Files and hashes: 1: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: j+stRH8HDL6tOi+gIDOeLUnOEisJjKLdehIX1VKGaXk=)
2: EodnXNpOUyBjNjY3K3YWA2EuVcI.roa (hash: TKxk7LeBChJbYfrZKELWl7rVNYFHoj3ofoNl/a0KdQU=)
3: WOkIHZ_QXuDVffIDeDyURK804aE.roa (hash: XuXaE0/bL4SMN9Fmdr4I3pvWojHD0UjSff7wtZuLd18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:3f:6d:7f:b5:90:f3:1a:ef:9c:df:19:33:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Mar 26 13:01:24 2026 GMT
Not After : Mar 27 13:01:24 2026 GMT
Subject: CN=c19951e458aebfda3b5fe6e860240f8725e00d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:27:d2:da:9d:b9:85:b2:43:21:09:fb:e9:
de:85:d4:9e:7c:d8:e1:65:47:0c:c8:48:32:da:67:
0f:27:55:35:fc:f8:be:c1:79:df:45:14:ad:7f:21:
fa:c6:0c:67:da:63:d7:54:dc:fa:4d:d4:c9:86:aa:
c9:71:15:ca:7f:bb:61:4b:d4:6f:7e:ce:78:24:77:
38:58:aa:6f:6d:dc:ef:8e:7f:e0:7b:e4:ce:a1:46:
51:8b:b4:38:d4:ca:17:73:88:6c:93:33:cb:49:4c:
63:b6:52:84:4d:f2:a6:9c:7f:c0:9d:1a:f5:7d:77:
f3:71:40:83:eb:4b:25:27:7c:e8:9c:06:7c:84:93:
f5:55:81:7b:f8:14:95:60:70:8b:74:c1:84:59:d9:
5c:f8:d7:19:38:f5:7e:67:b5:a4:4f:7d:70:25:39:
cc:17:8f:3c:29:7a:6f:e3:36:2a:2d:60:53:ae:12:
64:9c:fa:90:97:b3:b0:83:b2:c0:b1:61:0f:cb:70:
be:ee:4c:27:70:88:bd:ef:97:24:3b:f7:f1:02:d6:
22:66:12:25:6f:9a:fb:a9:be:01:be:4e:13:37:52:
54:de:9b:ae:6d:bf:7a:35:7e:da:59:42:05:db:3e:
30:81:94:31:66:2f:0c:c5:ac:7a:b6:20:fe:c8:d6:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:51:E4:58:AE:BF:DA:3B:5F:E6:E8:60:24:0F:87:25:E0:0D:68
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:c6:87:4c:46:cb:18:e9:f6:fb:56:87:16:2d:30:0e:06:
60:a7:e5:35:a7:4c:bc:fb:20:bd:76:a8:9b:60:03:ef:cf:8f:
b6:0d:6b:3d:ed:0d:66:c5:86:69:57:e2:ed:66:17:48:69:ec:
d4:f5:4b:da:0a:26:f3:59:b7:a1:34:80:93:38:7f:50:58:2d:
03:a0:6a:a4:c7:bd:e3:bc:b6:b7:40:14:ac:e9:5b:24:c4:bd:
d7:6d:52:73:fc:5a:84:51:aa:48:c3:fe:b5:b9:01:82:3e:a6:
a5:ea:63:96:82:b8:dd:3a:66:98:34:b9:47:31:9b:f9:33:44:
eb:e2:de:60:5c:7f:71:15:7b:2f:d2:f6:02:ed:17:15:54:fc:
40:df:f2:d8:08:c0:b7:a5:78:52:68:1e:dc:eb:7d:93:ed:ce:
4a:bd:dd:8a:62:0f:24:db:25:2d:3d:1c:63:17:0a:e0:92:c6:
a2:98:3f:3a:a4:94:f0:d2:35:a9:c5:dc:87:d0:92:1a:9d:28:
f3:c9:fa:cf:74:ad:54:1a:ef:b0:2e:7f:61:cc:ee:9d:e8:a1:
7b:e0:82:1b:2d:70:0c:0a:fc:a8:47:d2:af:94:3f:5d:17:16:
a9:3e:0f:65:70:18:77:42:0b:13:1f:b4:54:b3:dd:68:f1:f9:
d4:1e:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:49 2026 by rpki-client