Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: o9Th9PoLW2LTDJjbLjXjl0BPpGKM9SeBnyqVM0rsrbQ=
Subject key identifier: 70:BC:02:A7:7A:CC:F7:46:85:6C:13:77:93:0E:32:D9:83:F2:F9:DB
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019CABA2305BF42C301DB60A130D83CB245C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 076F
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: DTy0qGSLnyJMHDljEICskU/vKqR/KfxLrlze64Pqj7w=)
2: FlBj5E86mMaezxnELPbZi5fwTQY.roa (hash: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=)
3: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:30:5b:f4:2c:30:1d:b6:0a:13:0d:83:cb:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=70bc02a77accf746856c1377930e32d983f2f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:a2:ba:52:25:22:d8:0f:35:b5:ae:14:3a:
5f:52:01:0c:f6:a7:fc:d6:a0:9d:42:cb:0f:cc:18:
d2:13:bb:36:01:d8:36:96:53:4c:7b:d2:c1:09:91:
88:32:b6:5f:a6:0b:07:4e:4b:8f:82:ac:7e:ab:71:
cf:3a:1c:43:99:5f:b5:ce:30:6d:c6:f6:16:58:07:
98:64:df:af:37:20:40:fd:aa:d8:f8:56:e5:ee:bd:
b5:af:a0:6d:8d:ae:0b:b3:72:d0:0a:8c:e4:20:d2:
2a:3d:9a:c7:91:ec:90:49:c4:3f:a8:00:0f:09:a3:
63:22:1c:b1:50:48:26:6b:64:30:e1:67:3e:83:4d:
34:cc:7e:8d:12:06:20:70:2a:8f:f4:62:24:42:79:
d8:d2:70:7b:43:00:4e:31:60:db:04:b6:98:83:9e:
2d:f8:24:cb:a8:bf:f1:70:5c:d3:94:ee:c2:23:5c:
ea:f5:77:99:df:d5:30:e7:3a:93:1f:ac:c0:c5:88:
aa:1b:53:f6:37:bd:f6:de:b2:98:56:3d:17:5a:4f:
03:f0:0b:50:2b:7a:fd:fa:18:33:76:5c:51:2c:06:
a3:21:4d:1f:09:72:d5:a4:d0:3e:c6:e8:e7:c3:1a:
d0:00:87:ab:1f:98:e5:51:cd:f6:d4:b3:13:b5:e1:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:02:A7:7A:CC:F7:46:85:6C:13:77:93:0E:32:D9:83:F2:F9:DB
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e9:c5:ba:33:91:ff:d9:ec:31:63:6a:56:90:ab:0d:3c:aa:
65:80:ac:6a:70:22:68:a7:3d:f2:dc:57:8a:4b:14:66:2d:7f:
49:18:05:e9:c6:ae:67:c1:e2:e4:7f:3e:e9:0a:f6:e4:59:8b:
c1:bd:40:63:7f:9f:6b:76:d6:10:59:80:b5:eb:e5:0d:fc:9b:
c9:e3:3a:2c:78:26:30:b0:b8:a7:f2:40:87:4f:9c:fc:c2:55:
27:97:7d:fa:c0:46:b9:12:ce:6c:18:7d:98:f9:a9:0f:73:68:
16:69:87:81:52:8a:27:8c:58:9d:a1:92:b1:83:19:be:aa:3c:
dc:d9:95:e5:0b:35:99:a9:6d:82:d8:80:f4:76:37:25:1e:24:
92:de:70:11:74:0a:ac:dd:c4:7c:17:8d:ec:b2:d2:d6:04:ab:
67:03:c6:95:11:ad:7d:ae:a6:4d:36:b5:30:17:40:ad:ef:7e:
e0:2e:9a:1a:9f:7d:23:88:a4:09:96:45:36:34:00:9e:ce:8c:
2c:6f:bd:8e:7d:16:51:2b:88:19:e3:6d:d0:2c:b8:4e:f2:73:
df:91:a5:c3:1f:ae:b7:01:25:0d:34:0a:15:f5:f3:33:10:b7:
25:69:0f:3f:bf:c4:2c:cc:5d:76:76:e6:3d:c8:bb:a0:e9:ba:
54:1e:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:55 2026 by rpki-client