Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: ++fupXiRdA6ZqnyrvTgVHApUhIYrrbfp1qpq2XiiGdE=
Subject key identifier: C4:01:7E:67:7F:1F:9A:01:12:CE:60:53:AC:CB:F1:98:F0:51:4D:DA
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019D2AA959CA5E5EEFFEE9576C0F7E9FB217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 15:00:34 +0000
Manifest this update: Thu 26 Mar 2026 15:00:34 +0000
Manifest next update: Fri 27 Mar 2026 15:00:34 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: CqV1h1H12gkQYcncZqzg1JWOtd937W5jlV/S7FwNe5o=)
2: Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (hash: riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:59:ca:5e:5e:ef:fe:e9:57:6c:0f:7e:9f:b2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Mar 26 15:00:34 2026 GMT
Not After : Mar 27 15:00:34 2026 GMT
Subject: CN=c4017e677f1f9a0112ce6053accbf198f0514dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:92:c4:f1:c5:7e:f4:73:83:85:d4:2b:f9:
f8:90:0a:71:ab:5a:c7:64:80:b6:f8:78:ac:88:2f:
d5:e6:2b:5d:f4:a3:a4:24:f9:5d:8c:bd:30:bf:e0:
63:53:ec:f3:75:e3:15:ac:9e:2a:36:9c:8c:ca:5c:
31:65:72:cf:05:b5:43:6c:13:a7:66:a9:a9:1a:a5:
17:6d:5d:ef:57:50:e8:8b:c5:41:dc:18:f3:d7:8a:
af:df:cf:00:6f:d6:fd:af:eb:f9:79:da:a3:e7:68:
4d:32:18:b0:62:87:a1:11:3b:af:97:e3:fd:2d:71:
43:9c:d3:5a:34:bf:d2:dc:6a:bc:c0:09:6d:9e:89:
4c:e0:b4:89:2a:a1:77:9b:c7:f2:36:ca:2a:f1:2b:
1e:a6:b6:3e:1f:cd:2c:52:33:ee:0d:8c:78:f2:7a:
6d:20:8f:36:72:c1:76:87:14:7b:7f:8a:d9:82:d4:
66:18:81:00:d4:95:f2:69:e6:73:ed:92:49:ea:fe:
8d:fc:23:5f:a6:98:14:39:34:4a:3c:3c:d0:1b:db:
08:93:61:dc:bb:a8:81:f8:96:1f:5d:05:3d:82:74:
74:ed:f0:6c:cb:72:0c:11:87:55:29:a2:6f:7e:19:
10:3c:db:a9:55:93:ed:73:60:68:38:bd:fe:b4:55:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:7E:67:7F:1F:9A:01:12:CE:60:53:AC:CB:F1:98:F0:51:4D:DA
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:2a:4c:04:91:77:4d:37:ed:89:c4:6a:ce:0b:e2:9f:61:
5f:aa:ec:20:55:83:72:43:55:9c:1b:29:ad:dc:4b:20:dc:dd:
e0:1a:62:6d:a0:d8:61:85:47:75:e4:76:ea:71:e6:c6:13:99:
7d:78:85:a0:0a:da:e2:99:e4:4d:fb:de:d0:a9:cb:98:48:2a:
0b:6d:cf:c2:6a:24:2d:e8:dc:08:73:96:bb:11:4d:12:b9:b4:
d4:b7:7b:c6:f5:ae:e7:c7:db:d0:1b:d4:9e:a0:56:ba:77:1f:
d0:55:a0:ae:c1:4c:be:ea:47:95:35:8d:b8:0d:b6:f5:a8:99:
b8:21:ca:c5:77:77:6b:81:1e:15:8a:bd:32:7b:37:99:6b:56:
43:63:01:2b:db:93:89:3a:b1:4a:30:93:68:83:1e:a6:88:d6:
1c:fd:04:ba:6f:ac:ca:7b:07:d1:74:e4:7e:2f:44:1e:18:7c:
9d:82:05:3c:76:68:2b:83:7b:26:ee:f3:4a:13:cc:c3:c5:5e:
5f:75:6c:07:a4:66:f6:57:8e:8f:80:68:52:af:c9:f4:2f:88:
1d:7d:4b:31:e0:92:2e:23:3c:f4:80:15:0e:db:3c:26:bd:2c:
a5:b7:b8:8e:bd:a6:5d:79:75:f9:be:34:6f:2e:84:72:24:47:
ce:46:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:07 2026 by rpki-client