Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: q151tQZ5L66Lg/ZLPCJd2oFvpECUZ/0i+f9WDisDR0M=
Subject key identifier: A6:E6:4F:72:72:AA:AA:C9:EA:71:DC:86:97:19:68:A9:EA:C9:79:13
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019CAB6B4FA271B70C231F9FBBEC4F0153A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 1576
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: O9bEHmdyZUDP1ujS5ntCT4K35MrHtimluw+T43t8uVQ=)
2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4f:a2:71:b7:0c:23:1f:9f:bb:ec:4f:01:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=a6e64f7272aaaac9ea71dc86971968a9eac97913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:81:df:22:2c:53:27:6c:1e:85:ca:e8:40:
48:d0:92:5d:04:09:ee:d1:1a:73:02:56:0c:9b:29:
8e:92:30:ba:f7:1f:20:3b:a5:3d:c7:5a:b8:9c:01:
37:76:52:fe:bf:39:38:66:de:c8:76:98:c9:a3:ae:
3f:33:23:dd:a8:ab:cd:89:a9:8f:fc:c4:9d:77:9f:
24:0b:de:9c:ef:af:f0:4b:ff:44:e5:af:98:91:85:
e4:b2:70:64:ff:21:c8:1e:f5:ac:de:89:72:7e:ce:
bf:f0:c3:f5:02:f4:01:9b:c3:fa:1d:fb:8c:f6:0f:
0e:4e:fb:ea:56:44:ce:0f:15:63:d9:bc:92:3f:0f:
71:8e:ab:4c:80:0e:34:35:61:42:36:9a:49:93:a6:
d5:7f:35:95:76:5d:08:81:ad:b5:fb:58:f2:ab:80:
37:66:06:01:1a:90:9a:b2:ff:9c:16:57:48:87:c0:
cd:3c:9c:42:34:59:49:05:83:d0:91:dc:3c:cd:ea:
00:de:0f:28:9e:cc:87:f9:01:f9:b2:75:09:cd:b7:
4b:9b:2a:02:54:7c:db:3c:6b:a4:78:06:65:c4:4f:
22:14:9f:22:0c:33:42:36:6f:3b:3e:c9:2b:f4:72:
07:3f:93:30:03:ce:b3:95:51:ab:64:4c:f7:7c:92:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:4F:72:72:AA:AA:C9:EA:71:DC:86:97:19:68:A9:EA:C9:79:13
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:1a:a1:dd:17:0c:48:70:39:e9:8d:98:dc:90:a4:f8:00:
fb:02:3c:e0:13:24:e8:53:89:8f:9f:87:67:ce:1c:6a:2f:c4:
47:93:82:97:bf:8c:f5:02:ef:95:80:78:4d:c1:34:59:bf:74:
e1:be:74:26:00:5b:ed:b9:a5:64:79:cf:11:ef:e3:d6:58:8d:
a8:5b:05:4c:85:f3:fb:0e:fe:e2:46:1f:ef:93:3c:43:0f:fd:
60:f2:ad:a3:de:7f:32:07:6e:ba:6a:be:d5:e3:70:82:3f:5b:
d1:cb:49:12:10:b1:b7:0e:8e:da:dc:c9:34:c9:7f:a9:02:88:
ca:7d:5c:87:47:31:96:04:f0:96:74:49:30:bc:4d:1e:58:b0:
04:57:ae:20:ec:3f:0d:81:af:06:cc:a1:6e:13:fe:2c:16:56:
20:9c:10:11:88:b1:ec:8d:a1:6f:48:03:c8:2e:09:75:c5:bf:
23:8c:e7:b0:2f:e2:a2:3b:ff:ee:ea:0f:86:fb:6b:9a:65:1b:
da:e5:a8:6f:46:c6:60:3b:83:c5:dd:01:db:a7:7c:bc:00:54:
7d:e0:ff:84:ff:11:7b:79:59:21:6e:7b:2a:1b:44:87:d2:78:
29:81:40:f0:9a:1f:bc:09:6a:24:73:21:9e:72:0d:bb:8c:4c:
f1:9d:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:02 2026 by rpki-client