Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: YdAyu8OEemCp3JesW35oh2e6q3R/p8E33Y70hZES0Jk=
Subject key identifier: 8D:2C:86:21:B5:0D:B8:DA:B8:57:DF:3E:AD:44:7E:4A:61:84:DF:FD
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 019EBE47701380A0272D811D2EB8BBB5C9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 12C2
Signing time: Sat 13 Jun 2026 00:00:13 +0000
Manifest this update: Sat 13 Jun 2026 00:00:13 +0000
Manifest next update: Sun 14 Jun 2026 00:00:13 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: tJKISIOE+u3poj0yjMwUxilWzDHIc8lJq+D3ofmgy+4=)
2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:70:13:80:a0:27:2d:81:1d:2e:b8:bb:b5:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Jun 13 00:00:13 2026 GMT
Not After : Jun 14 00:00:13 2026 GMT
Subject: CN=8d2c8621b50db8dab857df3ead447e4a6184dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:ca:9b:57:1c:bd:b7:a1:59:60:e6:8f:81:
b7:26:63:73:76:1b:55:d9:18:99:c6:16:7b:a1:24:
4e:e4:f4:ec:c8:2c:db:16:05:98:29:98:c3:82:5e:
b7:eb:5c:f1:1f:75:a7:2e:e0:7e:60:39:e1:06:e9:
43:18:1b:0a:d5:4e:6a:fe:1c:5d:c3:f6:78:51:cd:
08:72:2f:7c:d8:ba:12:75:2e:4e:36:08:ff:9f:54:
01:76:73:0b:10:15:f8:2e:6d:2a:05:9c:27:18:61:
0c:e6:76:40:c6:4f:b7:aa:9e:51:01:dc:f2:31:b9:
cf:45:c9:70:c7:ea:2f:f3:f6:e0:39:aa:8a:2a:7d:
a2:81:2b:39:6a:bb:b9:0a:16:e8:62:61:3c:dd:09:
b0:74:c6:d3:69:1e:83:83:d5:7e:c9:3f:e5:0a:73:
b0:72:42:34:f6:fd:fd:fc:f7:8b:36:8f:d3:fd:45:
5b:63:1e:4e:c4:56:4e:41:d5:3c:b3:0e:5c:a7:72:
e4:7f:38:e1:b2:c0:7e:0d:c9:dc:34:84:a1:c7:30:
d5:24:c6:ee:0c:81:6f:e1:de:8d:4a:c9:ad:3d:2f:
d9:62:41:c0:e2:63:8a:26:db:b6:79:a1:39:f3:e6:
d2:ba:4a:f7:c6:31:bb:ec:f9:2c:0f:a4:4a:c5:fe:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:86:21:B5:0D:B8:DA:B8:57:DF:3E:AD:44:7E:4A:61:84:DF:FD
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b9:5b:ce:10:22:5b:e8:93:20:77:6b:4c:b9:a0:15:9d:55:
87:cc:41:93:92:44:40:82:cc:d8:3c:d2:64:91:64:14:14:ab:
0b:21:7c:21:7c:70:06:38:a0:73:0d:b2:0f:80:94:20:ff:ef:
84:be:0c:08:7d:20:32:aa:97:32:10:34:95:24:1c:eb:28:12:
02:66:d2:50:20:7f:a7:25:92:97:fd:12:2d:4e:db:f0:79:b6:
23:0f:e7:68:91:87:b2:05:48:60:d1:b3:80:73:a6:d3:2e:0e:
6b:d0:1e:fa:a8:09:4b:91:9c:90:57:aa:1e:2c:fd:9d:8b:1b:
88:40:c7:e7:eb:20:f6:83:68:8b:46:62:d6:b3:b2:ad:d3:6e:
83:74:24:f6:50:d6:8f:19:05:52:28:52:1f:3a:9d:1c:1c:cb:
39:74:d7:4d:8f:75:b6:14:3c:ab:7b:db:e4:d7:33:5a:3b:f5:
97:7e:28:c2:b4:fe:a9:ad:5a:d8:b7:28:33:99:5f:11:63:10:
7d:3d:d3:02:23:ad:76:d0:28:24:86:81:6c:c3:fe:37:12:a5:
5a:7a:69:b4:d2:53:a9:68:f9:25:92:29:6f:6d:51:0c:c1:83:
0b:a7:fc:a1:12:ca:76:33:df:23:51:61:bd:1f:c7:43:ac:27:
cb:34:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:46 2026 by rpki-client