Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: IHd5FPzaQGhrchrYNGfx0qlDsHm+fE3X3SMBQCv8/w0=
Subject key identifier: 2C:46:DA:1A:8E:CB:7F:24:E0:C4:BA:08:83:1A:B8:59:1C:72:7F:EB
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 01A0DD2A53D1DC5EB33E9F0F7274C30380A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 10:02:13 +0000
Manifest this update: Sat 26 Sep 2026 10:02:13 +0000
Manifest next update: Sun 27 Sep 2026 10:02:13 +0000
Files and hashes: 1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: cTViGO59k/dBeubGEJZmr4chD6hHtKErxI65yEtB2KE=)
3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:53:d1:dc:5e:b3:3e:9f:0f:72:74:c3:03:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Sep 26 10:02:13 2026 GMT
Not After : Sep 27 10:02:13 2026 GMT
Subject: CN=2c46da1a8ecb7f24e0c4ba08831ab8591c727feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:31:55:f4:1f:c1:4f:67:df:4b:b8:0d:e6:
83:fe:bc:44:5f:f1:54:4f:d3:3a:62:e0:d2:1b:26:
60:7c:4b:ed:2e:f7:cf:de:a8:7b:87:fc:3c:3b:39:
f2:d3:86:13:e2:ab:b8:f5:6a:40:bc:02:0b:05:da:
a1:66:7d:fa:f3:47:06:a8:5c:28:1e:80:6f:d3:bf:
93:eb:e8:a0:98:ba:93:af:89:0d:7a:34:14:9b:ca:
e9:39:9e:2c:49:4f:30:06:3e:f2:77:46:00:53:e4:
79:82:2e:6d:d4:16:c4:a5:99:22:07:7a:bb:c8:b6:
a4:fa:67:8e:3c:fe:ea:f4:b3:fc:b9:8e:d5:33:a7:
60:70:3b:f7:bf:b8:c5:6d:e3:d5:90:a1:4d:f2:f5:
41:1c:02:36:6a:40:9e:c3:03:4c:2d:52:49:88:9e:
ef:36:87:b5:7c:39:fd:8c:ff:6b:48:73:ff:b5:55:
7d:b0:5f:1c:8f:72:63:12:c6:49:3b:c0:c1:66:e7:
e9:bd:ad:b2:5f:23:0c:0c:68:8d:3e:b1:9d:39:f8:
c1:54:80:92:c0:cb:26:28:f0:8d:ba:b2:a5:eb:b6:
e1:5e:8e:40:1f:33:8d:a5:3b:5f:22:40:bb:0a:67:
7a:6b:c5:ae:4e:69:30:3f:91:b5:fa:72:3b:ae:48:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:DA:1A:8E:CB:7F:24:E0:C4:BA:08:83:1A:B8:59:1C:72:7F:EB
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:07:97:15:8a:69:37:cf:50:eb:2a:82:17:3c:fb:55:71:83:
cc:72:b4:89:02:84:c4:6f:46:96:3b:b7:16:2d:79:a2:48:1e:
89:c8:8c:c2:d8:58:e3:46:69:dc:9a:1a:08:74:df:bc:89:98:
57:c0:1f:5f:b5:a5:8f:c8:bc:cc:df:0b:a2:16:c4:a3:02:b9:
b8:34:42:d4:64:58:4b:60:b3:ae:98:c7:13:b1:62:4a:15:42:
ab:5b:45:a8:45:1a:d7:1c:06:c9:59:4f:3e:03:5b:b7:da:22:
49:a0:a5:a3:15:67:35:ec:87:a1:95:22:d6:45:22:d1:5d:32:
e0:b7:d4:b0:59:cb:b1:93:5f:58:bb:27:7f:cb:8b:9d:16:8f:
0c:8c:14:4c:42:f9:d1:7e:5a:a1:c5:b6:82:c7:f4:44:0e:a3:
81:a5:f4:dc:1e:aa:ca:8d:f4:39:af:bb:d8:39:70:98:5e:57:
76:6c:52:10:b0:e2:41:85:18:99:fe:9a:29:45:ae:c7:85:be:
5c:22:d4:cf:d9:e1:3a:90:46:0c:2a:2e:6d:9a:bb:11:fb:3d:
dc:1d:43:32:1a:4d:50:94:ef:84:53:b5:2d:c3:6b:f9:91:88:
53:a3:08:b7:a5:ee:6f:33:47:a6:5a:e9:6f:79:17:2b:12:b3:
aa:3e:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:17:25 2026 by rpki-client