Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: qNCbd4RomvYHzXlewITVJCgGTd8RzKpyuzhOjZsnzUw=
Subject key identifier: E4:B3:0C:A7:4E:A1:B9:DD:E0:75:6A:16:F8:D5:79:73:50:9C:75:39
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 019CAC7E08C8561B40E779E53C31F4FE64D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: E1_qOVvH8nrOWTOLw8OYuG7I7l4.roa (hash: pIFcjaUirrK025T2zVEMwQTVwHipFJl67DIxSrVxIxo=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: JZFVjhljheZAsjcdqZ2xckS/beFv+uX65a5A069/zV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:08:c8:56:1b:40:e7:79:e5:3c:31:f4:fe:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=e4b30ca74ea1b9dde0756a16f8d57973509c7539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:b5:3e:21:72:82:54:13:0b:ca:5a:f6:85:
34:d0:42:9e:04:8e:e8:6a:57:40:a1:6c:61:80:7e:
f1:2d:93:37:fb:ad:c0:1e:45:18:02:2c:0f:9d:5d:
09:f8:bb:6f:86:33:5a:d0:da:5f:0c:4a:24:13:5d:
03:17:a7:c8:1a:4d:c2:d3:7b:88:75:28:05:cb:4d:
57:f9:30:dc:d7:ae:80:85:c0:69:47:29:00:3e:32:
6b:fb:3e:67:f8:45:8d:10:7b:80:e4:51:08:36:8f:
8b:92:a2:e5:a5:cf:4a:aa:dd:80:41:2b:be:a1:04:
63:f7:01:22:b8:97:e1:b4:f1:46:7f:06:16:14:84:
ec:ae:8e:17:64:d3:d4:4d:0d:05:3e:84:66:05:e4:
79:af:09:0e:ec:92:97:cf:c0:2c:a0:3b:58:7e:b2:
c5:44:a1:b3:75:19:37:f2:ae:42:ab:b1:07:fd:75:
b2:b8:89:53:f3:7e:50:bb:7d:04:94:99:70:f5:89:
8d:d3:7e:93:3c:70:c4:61:65:cc:79:29:56:5a:ee:
5e:d4:60:1e:e9:2d:7d:e0:87:f7:da:99:60:58:a9:
a9:3b:d8:7c:f5:19:12:7a:b2:74:1e:76:81:d4:cd:
94:03:59:5c:32:1b:9b:f0:62:bb:0f:0a:3c:c0:f7:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:0C:A7:4E:A1:B9:DD:E0:75:6A:16:F8:D5:79:73:50:9C:75:39
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2b:3a:5f:6f:03:a7:14:f6:f6:33:48:56:68:f2:cd:cc:5e:
76:7a:63:e3:be:60:f2:db:9a:60:18:8f:af:40:bb:10:69:d1:
03:a2:3f:77:16:41:10:76:3b:e5:c4:42:4f:84:1a:15:12:d2:
72:dc:0d:fa:a9:4f:3f:fc:18:7f:b1:f2:d4:bf:d0:78:b1:75:
67:28:07:cb:33:e0:18:0d:df:b8:49:e9:e9:13:d4:33:b8:a2:
7e:e9:29:fe:5a:5e:1d:9b:05:b7:9a:c7:20:51:6d:b0:88:8e:
a5:a3:13:d8:32:2d:81:aa:45:6f:c4:2d:57:59:fe:1d:6c:22:
9c:2c:36:bc:4d:43:54:80:72:83:a0:2e:12:86:ad:84:b7:15:
77:2d:c4:40:a6:c3:d7:04:ce:93:aa:e3:14:e1:04:ee:2d:2e:
99:de:52:fc:7e:58:18:7c:cb:d2:2c:23:0f:79:82:5f:42:80:
0b:68:64:a4:d7:72:cf:6b:77:73:b3:e2:b7:3d:fe:b1:83:18:
bd:01:9d:70:0a:76:b6:b2:ed:17:ed:ed:60:a4:cf:df:6d:e6:
5a:39:c3:10:f6:6b:3c:1f:05:1a:f1:d0:cd:17:63:4d:1d:44:
6e:7c:24:d5:2d:0f:7d:19:cc:e0:a1:79:2e:90:85:7d:5d:c4:
5d:96:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:02 2026 by rpki-client