Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: YS/IIQ3fH/Ukw4RrghaOw9YuoEage+e8345XGBhmEBk=
Subject key identifier: 04:AE:CB:88:FC:B0:24:98:4A:3F:D9:2C:BB:F9:E9:B6:9A:DC:50:DE
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 019D99D0CB7920628393A0D3CF1C1932F870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 1442
Signing time: Fri 17 Apr 2026 05:01:30 +0000
Manifest this update: Fri 17 Apr 2026 05:01:30 +0000
Manifest next update: Sat 18 Apr 2026 05:01:30 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: IZLzCjzvqBc8kzsrGxBZ5FxdM+xCIPOnxKFD23T0zFg=)
2: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (hash: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ=)
3: if86lxu5nlPzs7hkWMJDZ9tMh_c.roa (hash: ORNVkMFl7t2RmENsppqBUHYflyrOzGV65xG9bRC2Ckw=)
4: pbc4SdtODYEUzlwKQZU-lgRu770.roa (hash: Aa4AR2Tswo+VpEELO6t1/gEy+JGa3NESKeediOsubQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:cb:79:20:62:83:93:a0:d3:cf:1c:19:32:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Apr 17 05:01:30 2026 GMT
Not After : Apr 18 05:01:30 2026 GMT
Subject: CN=04aecb88fcb024984a3fd92cbbf9e9b69adc50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:ea:f9:7f:8a:f5:68:8d:5b:81:ed:cf:26:
b0:a3:1a:26:d5:36:ec:54:da:7c:9a:87:c8:34:91:
04:a3:61:89:d2:08:69:0b:03:90:35:81:95:8b:43:
5a:cc:20:ae:eb:c1:ee:d0:04:f8:53:b2:e4:fa:be:
28:4a:f9:66:27:06:2f:47:6f:61:75:eb:b3:95:a0:
3b:05:86:7e:9c:e5:0f:78:1a:81:7e:16:87:ea:ce:
f9:e8:17:da:dc:36:98:4d:19:98:0a:c9:88:53:3e:
9d:d1:ca:ea:cf:32:86:e6:67:9a:21:cc:9c:d6:c0:
af:b3:3f:fc:3d:01:2b:94:34:d4:e9:8f:d7:ea:2f:
67:f6:f1:76:6d:33:74:8f:4e:de:61:ca:97:31:d4:
1a:30:84:86:7c:f1:ff:64:5d:69:ac:9d:3c:ea:a7:
e6:a2:84:86:7e:40:9d:b2:10:09:cc:59:31:c8:18:
5e:be:08:3d:f5:e4:42:db:02:73:bc:34:31:98:7e:
54:d2:9d:05:c0:f6:f9:a6:0c:9d:2f:31:c3:d2:d6:
e2:c3:89:98:2c:44:47:cc:4d:c7:9e:3e:04:75:67:
b8:2f:15:86:25:45:1f:c9:b3:80:67:fe:c5:6d:dc:
f0:44:f5:61:c2:f6:0a:56:22:2a:13:18:60:97:2b:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:CB:88:FC:B0:24:98:4A:3F:D9:2C:BB:F9:E9:B6:9A:DC:50:DE
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6b:17:c7:55:34:5b:f5:00:cb:e2:d0:4b:66:be:4f:c6:26:
0f:a5:1d:4f:00:9e:b5:29:ca:fe:81:b0:39:b1:2a:69:68:17:
f9:00:cd:f1:fe:67:fa:73:67:4f:ac:ac:b4:d4:82:22:b9:0e:
da:e0:01:e3:47:54:da:61:04:99:df:55:79:2d:c4:d3:00:bf:
1a:8f:9e:ae:f3:54:e6:60:22:d7:4c:10:a1:9b:7a:37:b5:72:
5b:b7:6a:4a:0a:47:97:0c:5d:aa:59:6e:49:3e:b2:1a:5d:34:
39:8c:b3:f8:c1:89:7f:d2:02:f2:e7:46:d1:88:5a:2c:8e:cc:
a1:e3:a4:45:c3:cc:89:37:aa:7a:d6:c3:18:1d:02:ff:0e:32:
3d:88:71:ce:14:54:43:3e:7f:61:b5:e5:5f:35:4c:81:27:25:
4f:c9:68:77:cc:d4:af:c2:8b:bd:8f:71:c9:ee:e1:9b:fd:1d:
11:f6:13:d8:87:f2:b6:f1:ea:7c:db:1e:8a:37:fb:59:d1:b1:
24:fb:22:5f:71:4d:ad:ea:29:4c:05:f8:37:de:30:a3:e6:f0:
f3:66:42:56:f6:1f:66:58:43:f4:15:a9:ed:ab:be:02:9f:47:
29:96:42:b4:0d:35:30:11:17:a8:24:01:14:19:2d:f4:5f:9a:
ec:87:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:14 2026 by rpki-client