Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: RhfoFCbzYThcTSu0ZaIhMSO2kubqBQlPTmAwOYY0o44=
Subject key identifier: D8:5C:3E:02:43:B6:88:45:D1:2D:16:7E:9A:F8:B1:7B:AC:11:44:56
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 01A124669797D520D9A6095D1D9BE200D3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 1400
Signing time: Sat 10 Oct 2026 06:01:05 +0000
Manifest this update: Sat 10 Oct 2026 06:01:05 +0000
Manifest next update: Sun 11 Oct 2026 06:01:05 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: MdzHAQ46DurIy/yOt1cB+xVTi88gvR4NObFWpNrL6FY=)
2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:97:97:d5:20:d9:a6:09:5d:1d:9b:e2:00:d3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Oct 10 06:01:05 2026 GMT
Not After : Oct 11 06:01:05 2026 GMT
Subject: CN=d85c3e0243b68845d12d167e9af8b17bac114456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:35:82:76:d4:f2:c5:48:ba:49:90:45:0f:
75:cb:68:7c:6a:ad:87:e8:88:bf:d0:7c:86:8a:00:
03:d2:d0:e0:9c:13:f2:37:f5:14:32:ff:d6:f7:02:
1a:1b:fa:2e:de:dd:db:44:a3:33:3b:b7:81:37:08:
37:2d:7d:49:84:13:7f:42:49:56:e8:6c:7d:0a:ff:
83:eb:f5:58:c2:53:79:62:e3:e3:d9:0d:94:e4:b1:
31:c2:a7:73:80:1a:5f:35:16:30:bd:7d:37:12:22:
ca:aa:1f:2b:44:5f:bd:05:e0:32:1a:a8:a3:cc:b9:
58:6e:bb:69:6c:49:de:0e:3a:cd:4c:c4:e1:e3:a1:
74:8b:47:0d:f4:a7:d8:a4:c9:a7:5a:00:c4:18:82:
e7:4d:57:5f:8b:77:af:c2:84:2e:91:16:c4:1c:1e:
6f:74:75:2b:0f:76:27:f2:69:f3:ee:93:c5:7a:e0:
63:cf:43:ba:56:73:88:ff:d5:4e:22:23:4e:83:d8:
1b:92:7c:f0:a3:26:20:0f:de:93:8e:e8:71:aa:9b:
e3:ba:c5:0a:f9:c6:81:33:7c:19:b1:a3:99:dc:8b:
1c:fb:83:a6:d5:dc:ad:54:b1:0b:f4:80:2a:1f:44:
cc:74:e7:bc:6e:fa:b1:f6:dd:bb:1a:4f:9c:5b:6e:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:3E:02:43:B6:88:45:D1:2D:16:7E:9A:F8:B1:7B:AC:11:44:56
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:4d:d8:8c:37:95:2d:6a:9d:b7:f6:73:b6:fb:f8:0c:44:
60:b9:a5:40:5f:95:a8:53:4a:f1:9a:24:e5:16:e4:77:8e:bd:
76:fe:42:cd:5e:b2:00:e7:d5:27:2f:c6:c9:1b:c1:34:d2:8d:
15:70:09:0f:2f:84:40:cd:bb:36:6e:e0:b4:d8:ac:1f:d9:6f:
a4:c1:d1:41:28:b6:c0:22:02:10:47:a8:d2:29:cb:c8:7b:6e:
0c:60:b7:55:75:5e:fa:98:be:d4:fb:22:8e:e4:97:c5:ce:a8:
ef:0c:f1:ee:1b:a4:4d:f9:bc:07:62:b9:92:90:a9:62:4e:9c:
e1:8d:0c:c0:bf:bc:8c:b8:d8:e1:be:6f:15:3b:2e:1d:60:e0:
4d:fa:3d:91:ec:a9:79:7d:73:6a:42:dc:8d:3b:e5:2a:a8:18:
1f:16:e5:90:30:3c:4c:a6:b1:a5:8b:aa:42:f0:c1:cc:ae:fd:
c0:26:bc:3d:0a:b2:43:3a:a5:03:5e:ba:47:80:3f:98:3f:7b:
1f:a2:ee:65:0d:88:23:73:f2:19:72:14:af:14:0b:5a:79:df:
25:7d:48:69:3d:f3:7a:db:cf:f1:75:18:bd:c3:52:56:c7:ae:
2e:22:87:5f:95:ec:bb:94:56:3f:8e:90:8a:f5:7f:8b:17:92:
e8:dd:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:53:49 2026 by rpki-client