Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: /I8jF0KUjX3vkVg2RGMXxBP/j/mMw8PyyUFCqflJibg=
Subject key identifier: 13:BF:1C:C1:9B:2F:CE:2F:D2:A6:A4:B6:ED:20:60:78:3D:9D:A5:6B
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 019FA93D9A6CBDF3162E31D034F6D865E4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 12D1
Signing time: Tue 28 Jul 2026 15:00:14 +0000
Manifest this update: Tue 28 Jul 2026 15:00:14 +0000
Manifest next update: Wed 29 Jul 2026 15:00:14 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: lnE8nIGVc3wPUlm6TaDlMToLNBGOJN50diPRsu9iRc0=)
2: a_ww7qv94cntVvxMyEa8w2y4rQQ.roa (hash: gcAP6sbYaBz9r+BWocW6ovurpJc3pHNDobJ/C/x7Cag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:9a:6c:bd:f3:16:2e:31:d0:34:f6:d8:65:e4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Jul 28 15:00:14 2026 GMT
Not After : Jul 29 15:00:14 2026 GMT
Subject: CN=13bf1cc19b2fce2fd2a6a4b6ed2060783d9da56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:23:d5:af:a2:d5:20:00:99:2f:ee:1e:92:
c1:81:ed:a9:e7:31:68:15:79:74:37:72:cd:5f:d6:
d7:d2:0a:6f:e5:3d:65:5a:a7:a0:20:65:6c:f7:88:
0f:a6:ac:1c:c3:73:26:11:a6:70:7a:45:e4:1a:cf:
29:e4:d1:1e:05:7c:bf:c8:f0:52:70:f7:ac:25:3f:
1b:49:7d:7e:80:da:20:b3:65:dc:8e:8f:90:6f:6f:
e2:8c:af:a8:e0:63:2b:10:c5:2f:84:2b:bc:ce:82:
5b:ef:f6:5d:e8:28:15:ed:75:e8:dc:ab:03:18:0d:
73:d3:1f:01:74:8e:54:18:13:b2:31:43:39:14:9c:
ee:22:b5:ce:3f:76:da:dc:b0:c7:ff:a9:ad:53:6d:
cc:ba:c4:0c:9d:ec:82:3d:29:f9:a2:4b:6f:93:14:
bc:f7:20:90:7f:7f:94:0a:51:05:aa:41:fa:10:d6:
8f:46:fa:8f:fe:9f:3d:57:61:e3:64:91:89:66:b3:
4b:3c:45:9e:0b:18:9c:2a:7a:08:94:43:be:0e:e2:
bf:a4:93:7a:f8:b6:1f:1a:cc:38:95:c3:fc:49:07:
68:56:c6:3d:c2:04:f0:46:7c:07:ca:dc:fb:64:27:
e8:b6:aa:56:99:60:e4:36:27:77:44:e3:c5:20:8a:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:1C:C1:9B:2F:CE:2F:D2:A6:A4:B6:ED:20:60:78:3D:9D:A5:6B
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:05:35:35:60:bd:7b:d3:e6:9c:4e:3b:76:1f:e8:cc:05:
5d:dd:52:46:0c:5b:65:10:f5:8b:54:09:58:f4:9f:19:83:6c:
6f:0e:ac:7d:18:7c:c9:d2:a2:9e:df:ae:f6:af:b1:c3:23:39:
65:04:0f:f6:a4:95:41:27:db:55:99:cc:8d:14:ce:bf:3f:e1:
1c:9d:9a:57:2d:3a:83:01:e3:c7:66:af:be:67:3a:95:24:17:
88:1a:03:2f:35:65:88:51:ac:5f:82:a0:d5:04:4f:45:3e:81:
0a:c6:3b:95:a8:1f:02:94:b5:fa:34:7a:d5:55:94:0b:12:13:
18:e3:e7:a2:fe:3c:46:0f:bd:18:c4:37:37:96:85:94:7c:36:
e6:33:fe:17:ce:7b:6d:3b:c3:95:b6:b2:ae:a1:cb:87:2e:1f:
f6:ed:f2:83:b1:2f:0e:87:7b:b0:27:48:16:8f:73:3f:8b:ed:
78:e6:2a:39:4f:6f:69:12:af:01:27:d8:df:47:82:a9:f4:7e:
23:a8:71:a8:b3:0d:26:d4:f6:bd:42:6f:1b:ba:75:6a:ef:f5:
be:90:a7:a1:40:d1:8a:3a:78:82:9d:ff:f5:38:54:19:72:56:
90:92:17:11:41:0d:5f:6c:11:c5:68:1f:2c:fa:8d:fe:1c:72:
05:ff:9b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPZpsvfMWLjHQNPbYZeTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzViNDA5MzhkODdjZDMzMjcyNmFhYTQ4MWFhNzFhZTZl
OTg3MTcwHhcNMjYwNzI4MTUwMDE0WhcNMjYwNzI5MTUwMDE0WjAzMTEwLwYDVQQD
EygxM2JmMWNjMTliMmZjZTJmZDJhNmE0YjZlZDIwNjA3ODNkOWRhNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMkj1a+i1SAAmS/uHpLBge2p5zFo
FXl0N3LNX9bX0gpv5T1lWqegIGVs94gPpqwcw3MmEaZwekXkGs8p5NEeBXy/yPBS
cPesJT8bSX1+gNogs2Xcjo+Qb2/ijK+o4GMrEMUvhCu8zoJb7/Zd6CgV7XXo3KsD
GA1z0x8BdI5UGBOyMUM5FJzuIrXOP3ba3LDH/6mtU23MusQMneyCPSn5oktvkxS8
9yCQf3+UClEFqkH6ENaPRvqP/p89V2HjZJGJZrNLPEWeCxicKnoIlEO+DuK/pJN6
+LYfGsw4lcP8SQdoVsY9wgTwRnwHytz7ZCfotqpWmWDkNid3ROPFIIrPBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO/HMGbL84v0qaktu0gYHg9naVrMB8GA1UdIwQY
MBaAFBN1tAk42HzTMnJqqkgapxrm6YcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQt
YTI1MGRhMTNkNjhhLzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQtYTI1MGRhMTNkNjhh
LzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFMFNTVg
vXvT5pxOO3Yf6MwFXd1SRgxbZRD1i1QJWPSfGYNsbw6sfRh8ydKint+u9q+xwyM5
ZQQP9qSVQSfbVZnMjRTOvz/hHJ2aVy06gwHjx2avvmc6lSQXiBoDLzVliFGsX4Kg
1QRPRT6BCsY7lagfApS1+jR61VWUCxITGOPnov48Rg+9GMQ3N5aFlHw25jP+F857
bTvDlbayrqHLhy4f9u3yg7EvDod7sCdIFo9zP4vteOYqOU9vaRKvASfY30eCqfR+
I6hxqLMNJtT2vUJvG7p1au/1vpCnoUDRijp4gp3/9ThUGXJWkJIXEUENX2wRxWgf
LPqN/hxyBf+bOg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:50 2026 by rpki-client