Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: 0qa24L9PKGxnVnmOJhunQTVD5kqiP61nsK5BjGGfQLM=
Subject key identifier: A3:6E:51:5C:37:D1:15:85:EB:E0:C7:AF:8F:2A:54:C5:B4:45:DC:7D
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 019D28BBCA4919574204E62C4DD29AFDDDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: BsnZkERsv20CWZbTDlUM4mfSp37wlohr566wu3HG1kI=)
2: R8Gs30w7EN8-cgR-5U0CuiIru9c.roa (hash: /qQhhsnrEF9R0fNTeVrjFQh/rw+MYhaoTaP0tgVxg4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ca:49:19:57:42:04:e6:2c:4d:d2:9a:fd:dd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=a36e515c37d11585ebe0c7af8f2a54c5b445dc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:09:1b:2b:47:7c:f1:a4:e6:e1:61:d8:6b:
83:24:51:bd:70:bc:80:b1:e0:7d:6c:5d:ca:1d:af:
b4:82:3f:f3:f9:78:37:ef:8f:6c:18:f9:11:fa:ce:
c0:53:e9:9f:58:e1:33:27:15:dc:12:60:13:b5:f8:
62:f6:36:60:e3:41:b3:dc:d9:b1:a6:e5:19:28:3f:
81:cd:93:8a:72:0e:e2:0e:50:5a:62:ed:c4:a1:b2:
9a:1e:84:f1:c9:1a:99:d1:1b:f1:15:ba:ec:15:23:
b8:d6:96:4d:10:4d:c7:50:a7:10:f4:a7:ae:aa:02:
97:30:95:a3:29:11:64:14:47:b9:dd:e8:e1:56:bb:
17:93:fa:33:05:1f:d9:7c:a3:d9:b7:f0:7f:0e:6e:
da:c4:09:bc:5a:57:5c:e1:93:0b:5d:7b:c4:16:c3:
fa:b8:52:73:4f:b4:be:c6:89:5a:7d:91:e4:7a:7d:
59:b7:d3:11:a4:26:50:2d:85:35:7e:07:fc:c2:c3:
35:c5:b7:b2:e6:75:46:e2:e4:27:ad:72:7c:9d:86:
47:52:c9:f5:91:4a:06:3d:a2:56:c4:bf:2f:f7:69:
2a:2e:d8:a6:9e:12:e9:d3:15:97:71:3c:fd:0f:ed:
39:57:ba:17:c4:39:43:45:26:92:07:a3:47:73:47:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:51:5C:37:D1:15:85:EB:E0:C7:AF:8F:2A:54:C5:B4:45:DC:7D
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:6f:ee:d9:7b:a2:f7:51:2d:bb:d5:53:36:77:4a:13:b7:
f9:04:56:b9:1a:49:fd:bd:b5:4d:bb:4e:47:43:76:65:38:f0:
3e:e2:75:c7:0e:3f:ec:6e:6a:58:ea:d8:8c:81:7d:4d:0d:ad:
35:39:20:94:1e:47:fa:b1:ec:35:9b:74:a6:2c:c1:a4:16:c2:
0e:dc:e9:ef:e1:cc:9c:6f:2a:b7:dd:d3:bf:2b:d7:9b:ce:9a:
64:f2:f7:5b:c3:e6:48:c0:6b:ea:cc:dd:e5:ac:79:05:64:70:
2d:72:35:82:cc:0f:28:ae:7f:ad:b2:c6:25:f5:e2:19:13:bf:
90:7a:2f:09:97:51:ee:1d:11:fd:e1:a2:0f:dc:a8:83:83:45:
e3:9d:79:ee:ae:17:4a:68:6c:45:f0:a2:ab:dc:6c:a3:63:5e:
03:16:08:d9:9d:30:22:1b:48:a0:fe:ba:ec:e4:8d:88:6d:ca:
d5:68:ff:16:53:5b:f9:c8:b7:cc:2a:21:28:ef:a1:0b:42:b3:
7e:68:8e:c6:eb:08:01:2a:01:1d:5f:fb:67:60:3e:1c:4f:b2:
6b:25:d1:90:2e:d5:ba:82:d3:2a:e8:96:20:ea:21:e3:26:64:
17:77:2a:a4:b8:78:a6:df:21:94:d0:57:3e:92:16:b5:1b:4b:
c8:6a:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:23 2026 by rpki-client