Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File: E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier: 48+e23zYztwJURzcBpCeZro/cLDTZozCPXJGvRXK00w=
Subject key identifier: 72:B8:73:D3:DE:06:62:E6:B2:FA:54:DE:CF:04:E1:E3:27:B1:05:55
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 019CAA900DD78E16AB806AC47F8CEC07C83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number: 1424
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: 6uylP13BjyxFcLc744MJm8y5W0U.roa (hash: MZGBxQNHUnKkJtWwdESchmnXllj9tvS5hzujCo2mmtE=)
2: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: Ln7uD425RCWcO0zCsQ5MyYhxk5rbJI3I/+EKHEeGS1c=)
3: LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa (hash: +FNhZHEAVTu13uveNE5cM1cVHyXcnYJhiraSKz/AoYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0d:d7:8e:16:ab:80:6a:c4:7f:8c:ec:07:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=72b873d3de0662e6b2fa54decf04e1e327b10555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:ed:0e:f9:15:d5:30:b1:51:fd:27:90:16:
84:30:d7:5d:3d:df:a9:7d:5e:13:37:37:7b:4c:d0:
e1:d7:32:da:18:65:56:4e:cc:6f:fb:39:d9:d4:bb:
cf:68:82:54:a4:1a:9a:19:96:d9:7a:6e:12:d8:f2:
24:00:8f:e8:6c:01:de:20:83:f0:f8:1e:98:57:d4:
5e:74:74:7c:00:16:c0:f6:42:f6:d4:d5:00:78:36:
cb:f6:51:80:73:e8:80:4b:62:49:5d:0a:6b:f1:cd:
7c:69:5b:43:a3:46:5a:f2:a7:62:65:cf:8b:fd:b3:
93:0b:65:0e:fd:c7:96:55:2a:11:3f:9f:50:ef:ed:
37:05:52:b6:ab:c5:a5:ec:a1:fd:33:39:30:91:37:
a1:05:96:f2:3a:5d:c6:a9:09:91:4a:1f:9e:39:fe:
53:d4:b0:99:fc:d3:c2:1f:06:e7:66:b9:89:62:ab:
68:0f:45:35:e4:3c:a9:6e:47:4b:4b:d4:d3:4b:b1:
11:22:bf:1d:93:75:59:b2:e0:6d:a6:18:98:93:c5:
bc:a3:f9:5d:b6:f5:ce:93:0b:44:5b:6b:39:37:8c:
18:98:60:d0:59:db:08:50:17:6e:b6:e3:c8:47:e5:
99:d6:05:da:d7:65:1c:71:35:b2:1d:68:e3:99:37:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B8:73:D3:DE:06:62:E6:B2:FA:54:DE:CF:04:E1:E3:27:B1:05:55
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:fd:85:9f:53:6e:cf:18:05:54:d5:48:c8:84:d4:70:e1:
28:60:18:8d:bf:b9:77:a7:81:0b:21:1c:d2:ed:2e:e9:55:96:
b8:24:37:9c:b5:34:df:3f:30:7d:a2:f6:f5:c1:f6:b5:82:cb:
ed:35:1a:fa:f2:5f:34:40:fc:b2:b8:da:11:8a:7a:22:83:c2:
54:42:11:7d:0b:4b:58:ce:07:21:43:5c:56:e2:98:56:a1:cd:
5a:1d:d9:2e:bb:0d:3f:1d:1c:a4:13:ec:06:03:a9:4e:cc:f4:
09:a4:7f:a3:15:96:e2:51:ee:b3:89:a0:cd:3c:21:13:7b:35:
d6:89:9f:b6:cf:90:58:92:58:bf:1b:07:1d:d9:ac:dc:54:c9:
8a:29:60:aa:61:a7:38:b4:1c:75:3f:96:65:f8:19:41:2b:11:
48:6a:1a:34:66:36:9d:06:83:87:86:5e:c4:a8:f0:7c:a8:84:
b2:2c:09:db:ea:b8:17:5b:d7:66:a4:de:c8:ed:47:7b:b2:70:
1a:3a:d1:e5:d4:1f:58:f3:a5:29:ca:1c:a3:ef:b0:41:4b:57:
5d:1c:4a:94:39:65:80:e3:b8:c4:47:fd:d9:35:fb:09:e8:e9:
05:78:02:67:b9:d2:a6:94:72:a1:3e:3e:49:6e:37:60:d3:cd:
8f:8a:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:30 2026 by rpki-client