Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: LnCmRwHU0dLAcExMtUcHV0IIMd9+T6rUAKqVH4oD2UE=
Subject key identifier: CE:04:19:8E:88:79:2E:3B:15:25:9E:CB:C1:BC:29:50:8B:09:60:DF
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 019CAC7E1B4A6136CF2ABFC4111ECE180ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 17A0
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: jd+Kg6pHR359cI4m7BJrXTa0YJtwaxiAa9+fH39DThc=)
2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1b:4a:61:36:cf:2a:bf:c4:11:1e:ce:18:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=ce04198e88792e3b15259ecbc1bc29508b0960df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:62:d9:99:fc:57:e2:15:ff:ec:25:53:34:
74:a1:99:9c:38:6a:f8:b2:73:a6:17:fc:c3:d6:b8:
ea:a0:a6:e5:e8:46:d4:a6:4d:7f:ab:ad:e5:29:06:
55:93:81:f3:ac:55:5a:ce:89:8c:ba:1a:38:5b:38:
47:fe:d6:88:a0:2c:73:6a:84:f1:0a:5d:78:7e:3f:
3c:bc:30:78:b5:19:54:6d:75:ee:ce:a6:26:70:41:
fa:81:9a:59:63:e6:f3:02:89:d4:f4:8f:ab:4c:27:
44:b8:62:5d:5f:86:3a:40:ea:5b:c6:68:12:a7:77:
ba:77:89:71:92:b7:a0:34:2f:5b:fe:30:01:11:98:
71:c6:d4:36:28:7e:b6:80:aa:6d:63:74:0d:80:5e:
6e:ed:2c:15:c4:6a:c4:d1:81:87:42:03:0b:d6:46:
c3:c5:82:f6:26:9e:79:7a:a1:3f:db:9d:af:50:6b:
77:1a:c4:b9:52:60:7c:df:70:b9:1e:41:8f:52:10:
86:5b:00:e3:21:ff:05:53:b9:12:83:ba:7d:34:2b:
10:49:28:54:c0:75:2c:45:91:d6:b1:99:2a:58:da:
8e:b6:25:9e:84:f3:01:f1:94:5a:c1:cd:ad:f5:85:
42:35:d1:a3:de:9b:9c:5f:46:b8:9d:74:48:68:c1:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:19:8E:88:79:2E:3B:15:25:9E:CB:C1:BC:29:50:8B:09:60:DF
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:d7:ab:24:a6:b3:74:72:31:c4:94:cb:13:cd:33:5b:f3:
35:2e:32:d1:fe:17:41:f0:03:3e:4c:c5:75:db:1a:6d:67:8f:
40:ef:3a:b0:80:2c:1d:60:70:21:f7:fd:a4:b5:f7:50:c4:3b:
44:6a:22:01:c5:5f:6a:68:85:4e:b2:20:d9:60:d4:8a:1b:40:
47:2b:b4:71:75:64:0a:cb:87:6f:6c:8f:21:bd:ad:10:39:18:
c4:45:ef:d5:d5:de:99:68:bb:34:c5:40:f4:28:f9:b2:50:71:
e6:9c:b5:41:f2:66:fd:38:0a:3d:78:eb:80:b7:a0:49:b5:b3:
e6:3e:0a:2d:a0:51:3b:54:29:fb:62:c5:56:a7:fc:af:45:db:
bc:37:2d:98:fd:ba:dd:d7:ab:bf:67:34:96:c5:3b:8b:14:db:
0d:d5:62:41:ac:d2:b7:23:71:18:f8:46:d4:b1:bc:62:e2:fa:
89:10:88:fd:a6:42:46:e4:7d:9c:3f:11:ba:d8:d3:cc:79:9b:
c2:5b:cb:b0:1b:9b:51:86:6f:13:c7:74:ec:b1:56:f1:9d:38:
6a:f2:28:1c:ed:19:6f:5b:5d:6e:3f:82:68:5f:70:5f:4d:b2:
3c:68:a4:bf:60:79:a2:0a:6f:b8:9f:f6:fd:c0:0a:3e:76:2e:
df:ba:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:13 2026 by rpki-client