Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: mvVTU0D23Cq/XhubETVozg+72NM0RLkPtQXv4JCn7Oo=
Subject key identifier: 5E:14:5A:48:72:2C:AF:FF:56:BF:33:96:6E:A2:A9:63:0A:47:45:52
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 019CAB6BD34137F54A24B238F9D76ECBE94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 1840
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: pwUUTjbr+MyfEXJMZs7fVPW6iRBfRywq/L0Nb5VUvjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d3:41:37:f5:4a:24:b2:38:f9:d7:6e:cb:e9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=5e145a48722cafff56bf33966ea2a9630a474552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:1e:45:bc:aa:8c:ed:26:89:4e:b6:a9:6f:
e8:a2:2c:88:a3:b6:ee:6d:20:af:52:67:e8:95:d8:
1c:8d:cf:70:55:38:e7:af:d4:47:27:ac:5f:ac:b7:
45:ff:d0:9d:9b:fa:85:9d:d9:64:f1:9d:20:3a:68:
13:1e:7f:3b:14:f2:9d:f1:66:5f:85:07:76:1e:f3:
f4:f0:1d:a1:76:92:74:f3:93:cc:80:28:79:13:85:
95:36:21:0a:df:03:f3:a7:65:d3:a2:cc:17:89:11:
7b:86:c1:3f:08:d8:70:21:97:ad:af:33:70:28:0b:
23:8b:66:0d:ca:d1:f4:17:43:0f:7e:1a:77:30:23:
a2:72:f2:0e:31:9f:42:1e:c1:f1:61:04:cc:26:2f:
cc:e1:aa:9b:b8:3f:72:f6:fb:d3:87:bb:41:54:77:
e3:b1:99:1d:7d:d3:8c:60:78:5b:62:2f:76:04:ef:
41:3d:35:5f:a4:07:3f:45:29:ef:9c:bd:6b:f9:d6:
8d:d9:28:a1:02:b8:e9:25:b4:67:0e:e6:0c:ba:b4:
c5:2b:cc:cd:59:52:45:f2:70:87:e0:34:ab:b6:a1:
3a:d3:e3:3c:ce:a5:9f:42:42:cf:5a:85:57:4d:a9:
71:09:a1:cb:f1:2d:dd:9c:a8:28:6c:af:58:72:ca:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:5A:48:72:2C:AF:FF:56:BF:33:96:6E:A2:A9:63:0A:47:45:52
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ff:9c:63:a3:7a:db:2f:95:a4:97:3e:fe:c4:a6:06:31:c5:
a0:72:c2:6e:30:e6:fb:2d:71:24:c6:0d:38:bd:9c:6d:b0:34:
71:7a:36:9a:5c:ef:2f:d5:48:dc:39:81:8b:8b:c3:8a:5b:4d:
82:8d:7f:57:12:ea:bc:f2:25:7f:24:ad:a6:f0:b4:e6:6e:da:
e6:6b:b2:7d:10:82:c7:1a:72:9c:de:e3:19:ce:63:35:6d:7a:
0a:04:96:c7:45:d8:f4:dd:64:22:9b:de:5e:f7:92:34:24:04:
66:44:c4:52:fc:eb:cd:35:d2:b2:da:f3:6a:81:14:6d:14:48:
3e:ec:bf:15:49:f4:57:90:34:35:6b:9f:fd:7b:47:6c:20:46:
af:8f:87:51:b3:d0:1e:ff:7f:4c:fa:da:ec:bd:61:18:b9:98:
5a:ab:7a:29:29:b6:d9:e1:f3:b1:dc:54:a5:98:36:8d:d9:e7:
93:88:ec:95:22:39:66:71:f7:d1:31:fc:de:eb:b4:87:44:9e:
f8:48:95:f1:6a:43:3c:5a:b5:62:31:3c:ca:41:e2:76:73:66:
0c:8d:c3:d9:74:0d:80:e0:36:8d:e3:9a:e2:6b:22:9e:ae:ab:
09:d5:6d:ca:ab:65:c9:63:2f:c8:af:a0:9a:5a:c6:bb:96:f7:
87:ef:05:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:59 2026 by rpki-client