Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: fQPoxPvEcPVZ6Le+U2VudTd9SCsijsnjY83niekW0yM=
Subject key identifier: 69:49:4E:A2:8C:20:40:3B:1D:B4:A7:FC:D4:4D:1D:CE:14:CD:24:C9
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 019CA97CA9E442AC6BA24E917393E0F585B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0F15
Signing time: Sun 01 Mar 2026 13:00:45 +0000
Manifest this update: Sun 01 Mar 2026 13:00:45 +0000
Manifest next update: Mon 02 Mar 2026 13:00:45 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: cjLnMl3eIwiqMzCVTfoO9AskB4rNVl9yjdng72Gfp4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:a9:e4:42:ac:6b:a2:4e:91:73:93:e0:f5:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Mar 1 13:00:45 2026 GMT
Not After : Mar 2 13:00:45 2026 GMT
Subject: CN=69494ea28c20403b1db4a7fcd44d1dce14cd24c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:88:3b:6c:78:86:9c:68:7b:8c:10:bf:2e:
0c:2b:97:4f:9e:b8:ec:e6:89:e5:b9:69:4f:95:7c:
59:e3:1b:af:0a:03:12:24:dd:a4:7a:e2:bf:f4:4a:
78:35:05:d3:34:a1:fd:8a:75:13:f5:67:07:54:f4:
da:75:00:0e:d0:92:aa:33:2d:85:4e:d5:67:c9:01:
76:a2:05:4b:93:ec:d9:64:13:3a:ad:48:73:e6:d9:
2e:8d:10:01:2f:29:d5:0d:15:2d:b4:ed:e4:d2:e7:
c0:ac:ef:33:e8:b5:ae:81:55:47:ca:34:fb:03:07:
4f:d6:c8:84:07:ca:0d:1d:29:31:b6:e3:a2:09:17:
07:02:b2:75:b3:d9:7e:8b:73:2d:98:e7:1e:55:02:
75:41:bd:5d:0e:97:fc:e9:5b:f6:da:cc:32:20:e3:
6b:ad:26:4d:c3:2e:64:45:3f:bf:0e:f3:d4:6c:dc:
4d:53:73:66:44:ca:fc:02:ee:2d:61:f8:19:2e:ee:
ba:bf:d8:f0:90:5c:54:9f:29:67:64:9a:53:98:d1:
31:27:94:80:17:f4:2c:9f:a8:8d:19:c5:33:cf:ed:
bc:0e:6f:6e:00:37:60:27:75:c3:7f:ec:da:07:8c:
2b:e8:b0:b4:ba:aa:0d:b4:bf:cc:da:be:cc:ad:3c:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:4E:A2:8C:20:40:3B:1D:B4:A7:FC:D4:4D:1D:CE:14:CD:24:C9
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:ef:5e:91:bb:02:5a:89:c6:44:66:a0:99:a5:d7:1a:72:
d8:a1:70:88:64:dd:ed:b5:93:e3:48:24:0d:da:9a:2a:0b:4f:
a4:34:8a:ff:7c:ff:51:97:ee:ac:0b:28:7b:04:5a:4d:9e:a9:
aa:be:45:72:74:0d:2e:7d:10:f9:83:53:52:80:a9:c0:ea:90:
77:5d:0f:cc:b1:7e:b6:f3:84:4f:e3:3f:41:03:44:b5:9d:46:
9d:5a:24:c2:d7:e4:72:38:da:e1:48:0c:88:40:07:06:8b:99:
82:93:ac:73:5f:1b:a0:27:0d:05:68:c8:6f:51:fe:3a:3c:95:
67:f3:72:52:a9:79:66:6b:ae:b0:22:70:4c:78:05:2b:3d:d5:
a6:fc:bf:23:2c:50:76:b4:8c:ad:45:13:93:04:8c:46:ae:7f:
94:54:38:b5:7d:2c:69:59:4b:ed:96:4a:a5:76:7a:95:ea:ad:
39:92:91:1a:78:93:37:43:4e:ab:6a:32:c0:3d:ef:48:f6:e4:
cd:f0:a0:e7:88:97:70:27:45:d7:c2:08:36:b1:d3:dc:0c:a2:
3c:92:a4:e4:89:09:f5:78:a5:b5:e3:ac:77:31:39:36:7a:e4:
d8:a3:ee:65:65:7b:56:03:9a:98:36:a8:f7:42:f2:08:ce:1d:
df:8f:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:30 2026 by rpki-client