Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: W7Gjg6F5P67Ekr/aDhAVPlFZy399bDU0IdSEFOGoYJs=
Subject key identifier: 05:C2:21:9E:C6:9D:E0:B9:3E:49:6E:18:70:CC:E6:78:8A:DF:C5:8E
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 019D333ECC3585EEB4A39F41B7C1E5D248AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 140D
Signing time: Sat 28 Mar 2026 07:00:46 +0000
Manifest this update: Sat 28 Mar 2026 07:00:46 +0000
Manifest next update: Sun 29 Mar 2026 07:00:46 +0000
Files and hashes: 1: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: PJCHiduHvCW2lQiTQQqnEexq3ctquuluz4AfeEI1YxQ=)
2: KWE3M70sDcdzbGUDzkIHTbsCxOk.roa (hash: coZwB6MM6YyaakbxM3r6Pr+BZjVFbJhu/1xom1a40N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:cc:35:85:ee:b4:a3:9f:41:b7:c1:e5:d2:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Mar 28 07:00:46 2026 GMT
Not After : Mar 29 07:00:46 2026 GMT
Subject: CN=05c2219ec69de0b93e496e1870cce6788adfc58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:41:c3:46:38:b1:8e:09:a1:f9:05:ff:47:
89:8c:5b:9f:f3:be:d7:8d:50:93:13:79:b3:26:11:
d0:0d:fa:27:49:0c:5c:4b:49:89:5f:74:5b:8f:35:
10:9e:dc:e3:5a:74:10:c4:5f:44:d6:a3:53:6f:e2:
b6:28:dd:07:1c:1e:81:5f:cc:3f:cb:8f:a2:10:d6:
5b:06:d6:7a:e0:a1:47:f1:df:bb:be:d2:5c:c4:b9:
a2:15:dd:b6:60:07:d4:2b:6a:ec:36:0a:9b:45:a5:
64:c8:60:4b:a3:49:5b:d1:b4:af:01:04:b8:cc:a4:
63:da:7d:88:53:70:0a:df:fd:e1:05:ab:a4:0a:5f:
4f:75:74:8c:06:d1:33:03:cd:ea:83:31:9b:58:0f:
14:66:44:91:2e:df:64:de:19:4b:8e:1b:d4:38:14:
29:18:3b:0e:cc:c2:35:41:34:7d:67:c1:4f:f7:ae:
10:0e:05:d1:0b:27:77:72:80:52:e4:b3:c5:4a:4f:
0d:fa:12:94:b4:30:3d:95:62:eb:d1:c7:c1:27:bb:
ea:32:cb:6e:28:68:99:4e:a9:22:bb:ab:ed:f6:24:
20:e3:2b:8c:28:cc:a8:37:92:43:3e:2a:ba:53:47:
20:20:12:03:03:2c:c0:ad:af:dd:d6:48:f7:cf:68:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:21:9E:C6:9D:E0:B9:3E:49:6E:18:70:CC:E6:78:8A:DF:C5:8E
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:03:02:9a:e3:19:5f:cf:c1:ae:74:9d:a9:44:30:70:c0:
74:1a:da:ab:80:bb:b2:72:f4:1a:a9:f1:08:78:38:d1:ef:0d:
b1:98:3b:0d:df:8c:bd:fe:58:5c:82:fc:aa:05:d4:07:2d:e2:
4e:7b:f4:72:74:03:1f:b1:c4:b2:b7:f7:33:98:5d:52:cf:ff:
b8:90:11:97:57:52:f1:1d:ac:4c:16:fc:5b:91:e0:1e:b5:55:
17:e0:b2:71:01:b6:30:f7:85:54:17:f8:5b:70:30:cf:c0:f4:
40:22:8d:58:c3:5f:31:2e:b2:71:ef:25:40:b1:ba:5e:87:40:
42:c8:8e:c8:ad:f1:96:07:70:e4:87:fc:9a:ec:5d:90:a0:74:
66:45:a4:a9:f3:4a:90:2d:49:3f:22:a3:f2:43:cd:8c:1a:b9:
05:4d:77:6d:fc:3c:72:77:85:98:ba:6a:7c:f9:03:a9:21:ed:
11:41:fd:a6:82:f4:66:bf:f4:71:b4:46:4c:0e:2e:67:c4:e5:
09:fd:9a:8b:93:c0:54:c6:c8:3c:a1:f3:80:6d:84:42:e7:91:
6c:a7:f7:89:4a:68:ab:95:f7:f7:2b:64:84:2c:37:ca:76:ca:
42:5f:85:44:66:e4:42:3b:8a:1b:6e:27:ff:a6:11:62:3f:f0:
43:58:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:57 2026 by rpki-client