Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: o3fZRbVqMEF+mzudR3JGnCLncUIZ3v+A3bDyj13CbLk=
Subject key identifier: B8:6A:18:9B:F5:D3:AB:0B:53:9D:98:11:23:8F:EF:6E:F7:4C:20:26
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 019EBDA35E7CADC9BF884176F8A7A82CF8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 18B2
Signing time: Fri 12 Jun 2026 21:01:00 +0000
Manifest this update: Fri 12 Jun 2026 21:01:00 +0000
Manifest next update: Sat 13 Jun 2026 21:01:00 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: LzuCjaXVzLSkmme/g4Ck3adfKydmCaoXFfzsXX3PBVM=)
2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:5e:7c:ad:c9:bf:88:41:76:f8:a7:a8:2c:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Jun 12 21:01:00 2026 GMT
Not After : Jun 13 21:01:00 2026 GMT
Subject: CN=b86a189bf5d3ab0b539d9811238fef6ef74c2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:f4:0e:d8:da:41:d2:8e:b7:ae:5a:f9:0f:
bc:9a:12:70:2e:23:26:5b:74:07:fb:3a:2f:8d:8e:
3b:90:9d:ae:97:d3:e9:8d:8f:26:99:70:38:67:cb:
8f:d9:3f:de:6c:d7:be:ce:21:c9:ba:bb:86:85:97:
9e:df:8d:05:94:ce:42:89:53:4e:76:54:85:07:99:
96:ae:93:dd:1e:d8:b9:0e:68:d0:8b:69:13:29:9a:
f7:e2:44:0a:7a:a5:54:07:3e:39:dc:df:73:99:10:
10:e1:f6:00:b1:f9:13:e2:c1:2e:52:2a:4d:1e:fd:
3e:25:2e:71:dd:65:a0:bf:5a:dd:13:5e:48:52:3b:
f4:4f:88:c3:6a:85:73:37:d3:3d:84:2e:db:2e:5a:
eb:46:92:b5:bd:81:3f:35:c2:07:14:76:2b:f2:8a:
8e:2b:7b:f1:d5:aa:f1:f8:35:c7:7b:a5:72:92:65:
5d:6b:c3:26:9d:a0:67:ab:76:3d:a7:d3:de:3d:a2:
0a:aa:3c:11:99:18:cc:a1:14:d7:e6:69:4d:9d:fe:
ce:b4:bd:0c:76:c2:56:7a:83:b1:4e:91:8f:f4:d7:
9a:08:58:bd:e4:81:f6:2e:cd:77:0a:32:85:e6:08:
27:33:d0:ea:7d:77:11:db:9e:b4:7d:f7:5b:7e:49:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:18:9B:F5:D3:AB:0B:53:9D:98:11:23:8F:EF:6E:F7:4C:20:26
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c8:d9:63:2e:43:92:71:5b:f4:a6:11:51:cc:18:44:39:7d:
c0:f5:56:55:b8:cc:f7:a1:73:74:01:d6:80:cc:27:44:b7:64:
b8:02:be:b5:8f:00:1c:1c:6d:31:85:6f:80:c8:70:e3:f4:84:
d8:98:42:a7:f1:d8:36:bd:49:2a:4d:97:c0:a2:f4:2e:c6:80:
b1:c1:d2:b4:96:3c:fa:07:a0:ea:25:78:d2:44:ae:19:f4:0a:
13:a9:e8:4b:d5:88:cf:cb:e9:b4:4c:5a:f9:dc:4d:7c:9b:61:
f5:9f:b1:d1:d3:3f:ae:75:18:01:a8:bf:bc:3b:36:63:65:b9:
16:15:c0:eb:8e:5e:cb:d0:50:6b:16:54:de:24:6d:c1:69:be:
35:58:99:e2:ae:79:02:e7:fe:23:45:99:7c:10:ef:e2:d5:41:
4d:a9:cc:47:89:64:b2:f7:2d:11:e2:41:25:43:af:cc:dd:a4:
4a:b8:0a:35:7a:53:21:50:5e:a8:36:25:fc:68:5b:4e:31:c7:
a6:2e:22:c4:58:24:05:08:7a:3d:ac:3e:7a:1d:72:0c:e2:6f:
08:f4:11:9d:e2:2b:f9:cf:d6:20:90:61:a3:5c:0b:ce:23:61:
00:86:48:2b:2c:64:fa:25:6a:b4:d2:a4:9a:47:51:e1:90:8c:
03:99:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:24 2026 by rpki-client