Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: OUCGmPneszCR8lRlypGv23OgA92zTcFU1C8U2jtiGwI=
Subject key identifier: 79:3F:FF:41:5A:DC:86:AF:36:50:5B:27:77:BB:46:F5:C9:65:D7:4D
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019D2704ABC1E300C987CE41083658369AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: jA2KV18gWktKo6emH3XNlB591/bOQirQEUsFQeWd0pM=)
3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ab:c1:e3:00:c9:87:ce:41:08:36:58:36:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=793fff415adc86af36505b2777bb46f5c965d74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:84:d7:14:00:b6:2a:3b:ac:ff:54:fc:cd:
2d:59:cc:4f:e4:a7:2b:cd:f6:4b:41:e1:5d:82:b1:
4a:24:18:97:b9:a6:1c:1c:53:e6:83:d9:94:9a:c6:
ba:da:87:10:4c:e0:a2:c5:4e:55:cf:c6:bb:18:c8:
10:10:2f:69:38:e7:88:3c:58:2f:3f:a9:5f:a6:73:
30:60:0e:e4:19:c6:11:d5:f7:42:7d:a2:68:4d:6c:
29:96:15:fb:36:e2:95:be:32:3b:58:95:f7:3f:ec:
5f:29:88:37:a7:70:72:74:13:71:20:f1:7d:c0:0a:
e7:dc:4d:27:27:d5:bf:ec:03:52:73:f7:02:6f:ad:
ed:46:7a:9e:c3:b2:43:d6:a2:ff:42:4a:13:78:37:
d2:1f:35:99:d3:39:48:ae:d0:a0:46:9c:d3:ba:52:
f4:77:79:9d:dc:0e:ac:90:23:37:ec:e8:71:e6:27:
ec:54:9d:bf:fd:41:b0:73:61:26:17:0c:75:8e:7a:
a4:08:07:05:5e:9f:40:90:30:f5:c6:46:ef:0f:a6:
ee:b8:ad:ba:8d:90:d7:c9:4e:c8:1a:4a:4b:9d:ac:
d3:a8:ce:47:27:54:4e:1c:f5:c5:9d:55:d7:b1:67:
48:37:4d:6c:86:78:e7:b6:37:e5:ef:a8:cf:5b:58:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:FF:41:5A:DC:86:AF:36:50:5B:27:77:BB:46:F5:C9:65:D7:4D
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:c6:2e:d1:ba:b7:10:19:e9:03:74:f6:ae:f4:1c:2f:ba:
2a:80:76:58:a9:79:f7:97:32:4f:03:31:6f:e9:6d:ce:55:ea:
8d:03:91:17:25:43:8d:14:8f:7b:8c:f1:26:b2:5a:29:ae:53:
e6:2a:48:ce:fd:c5:db:86:02:8e:b7:b7:cc:de:53:65:26:57:
11:73:d9:4d:1d:64:bf:1e:6e:fe:cf:b8:83:30:dd:56:73:3d:
52:be:86:58:f2:13:19:0f:fc:d5:ad:e8:54:98:80:31:10:ae:
01:cc:f1:20:f0:ec:69:7d:43:61:fd:81:0c:4e:0c:39:c7:46:
18:3c:ca:3d:1b:0e:d8:ac:d1:4d:f9:5a:33:1b:20:d3:d7:e5:
ba:0b:19:7b:37:8d:83:ad:d8:d2:7a:f8:d3:34:52:6c:c1:39:
be:2b:37:e5:c5:78:b7:6e:63:ca:23:78:ba:ec:2c:dd:49:0e:
80:8f:4e:4e:ea:93:7c:10:39:c8:1a:10:f7:a5:92:d5:5c:b4:
18:1c:5d:f8:ad:ff:60:5f:f7:85:89:58:ee:59:64:af:8f:26:
2e:8d:74:c5:45:2d:88:75:ef:cd:20:22:53:eb:2e:de:20:97:
1e:74:75:f0:27:52:8e:c6:e6:e7:e8:26:7e:ac:72:f4:3c:d5:
cb:4a:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:59 2026 by rpki-client