Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File: e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier: Ln7BIfQn5cUIr00OF20TolAnEUqYFbvdPPA49iKC3jE=
Subject key identifier: 3F:3A:19:51:AC:8C:05:7A:F3:AF:37:CE:DC:D3:B0:5E:0A:E1:2B:19
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019CAC0F9F90CF38A5C7CDBC037ED42D33B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number: 1564
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: dX8eVgVuKkOoQ2T2VV45K5k+HC+t9kkHDxJTaDXjxls=)
2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9f:90:cf:38:a5:c7:cd:bc:03:7e:d4:2d:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=3f3a1951ac8c057af3af37cedcd3b05e0ae12b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:67:85:f7:d4:6c:a4:cc:23:71:c0:a2:fb:
91:19:6f:5a:6d:6b:4a:b3:12:26:d9:a0:7f:e2:27:
35:4d:a0:8a:27:40:cd:ca:7a:8b:3d:24:ce:e7:22:
91:68:da:85:68:46:ef:ef:c2:dc:bb:38:35:a4:61:
6c:07:10:e2:77:6f:0e:a4:4c:e2:5c:8e:37:09:23:
17:bc:40:59:c9:e8:e9:9f:dd:f4:17:48:ba:e6:ef:
b0:33:ed:3e:7c:9a:44:69:82:02:2c:05:97:5b:89:
87:a8:9a:66:8b:24:96:42:66:ea:23:de:3b:20:ef:
30:02:16:21:bb:85:fc:00:7c:a7:58:57:37:7e:9f:
b9:c4:97:01:b6:2a:c2:f3:55:2c:f7:44:5c:f6:d3:
50:0f:6c:7c:f2:e7:32:9d:95:48:9f:47:c5:c2:c8:
58:67:ce:cd:26:bb:ca:0e:fe:54:4c:cd:21:76:b1:
ee:5c:90:61:14:3c:c9:f1:ef:5e:72:66:2e:e5:22:
7f:14:f1:57:46:4c:00:73:0f:03:3a:0f:46:9e:7d:
2b:77:4d:03:71:db:c3:f9:f8:14:8e:69:59:9c:61:
60:f4:3b:c8:e2:5c:b0:f4:a0:88:4e:ae:d9:de:36:
3f:39:da:79:3f:8a:3d:8e:71:17:85:db:74:07:c9:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:19:51:AC:8C:05:7A:F3:AF:37:CE:DC:D3:B0:5E:0A:E1:2B:19
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:41:3e:bd:d7:ad:1d:ac:8d:dc:a8:a7:71:49:d2:c2:f4:6a:
5f:e4:8c:bd:05:5a:dc:61:1b:4f:2e:d9:1e:2d:27:62:ef:de:
44:c6:26:2d:b1:2c:81:ff:1a:56:29:c1:dd:63:b6:9f:c1:07:
6c:c2:0f:12:05:9d:ea:a2:1b:2f:5d:63:0c:cb:63:70:59:bd:
62:af:69:95:f0:63:81:6e:2f:67:52:c9:45:75:6f:87:e8:b6:
17:27:6e:ea:1f:b0:ff:07:cb:91:83:c5:be:59:93:e4:a3:ff:
eb:3f:6c:60:99:4a:fd:45:d2:ef:7f:61:fc:5e:a6:07:4c:06:
cc:c0:3c:84:43:71:b7:76:2f:8f:eb:49:52:46:ef:b8:04:cc:
63:f7:1d:ce:ab:22:12:14:5f:d7:e1:c1:15:e9:62:14:85:1f:
c5:c3:d0:92:4d:ef:5b:32:29:28:80:03:de:7d:a6:fa:59:1a:
36:a8:79:67:6e:e8:ba:b8:c5:c1:e5:c1:ea:7c:dc:bb:73:18:
97:92:c7:e8:4c:ea:61:54:ae:02:2a:74:41:df:52:36:6f:47:
84:30:b9:7e:95:fd:d1:66:84:49:94:62:6d:34:7d:d1:9a:49:
f9:8d:8c:09:1b:b0:40:c8:1f:a2:65:da:30:70:bc:1c:ea:fc:
5d:68:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:56 2026 by rpki-client