Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: F6GrnqV9jxAKMVteZ3c+WNbxt7/ZwaHh40KjOszER6E=
Subject key identifier: 60:D2:B8:AC:49:2B:0A:E9:CB:C5:D9:17:D2:1E:3D:B9:D3:B8:C3:8E
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019D9BBEC13A053E743E710FB65E05860620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 0844
Signing time: Fri 17 Apr 2026 14:01:02 +0000
Manifest this update: Fri 17 Apr 2026 14:01:02 +0000
Manifest next update: Sat 18 Apr 2026 14:01:02 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: 6jc///tj0hJRPq2B8arC0g9sMGEK2FdphS2vYfYZpHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:c1:3a:05:3e:74:3e:71:0f:b6:5e:05:86:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Apr 17 14:01:02 2026 GMT
Not After : Apr 18 14:01:02 2026 GMT
Subject: CN=60d2b8ac492b0ae9cbc5d917d21e3db9d3b8c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:6c:ac:63:59:ab:ae:27:ec:40:f5:ff:0b:
b9:50:43:d3:cd:1a:62:8e:56:d8:94:9a:72:a9:38:
ce:c4:f8:95:b3:38:20:29:d7:2d:5e:f2:38:58:bb:
5b:ab:b4:72:96:b8:9c:6f:11:2c:70:84:c3:da:e0:
45:32:62:b6:7f:9b:fb:36:63:e5:8b:48:45:da:08:
6b:13:6a:88:09:14:58:b5:b0:6f:6a:3f:5f:91:05:
ef:00:a6:88:03:ac:e6:5b:50:e5:f8:12:43:61:d7:
3f:46:1f:a3:64:85:64:54:35:32:31:70:f5:33:7b:
40:65:19:06:d9:09:23:33:20:0c:90:39:89:a1:2e:
b3:a9:14:fc:59:e4:bb:ec:39:e3:d2:1f:40:18:e3:
5a:cb:4e:3b:d2:61:73:0a:cd:4d:fe:f9:0d:5d:a1:
74:cb:17:d1:ba:cd:2e:2c:2f:0f:55:19:50:8d:37:
50:5a:3d:b9:a5:08:1f:6b:f7:d1:44:ee:8a:11:cd:
9f:fc:58:b7:37:e0:83:fe:ee:dc:5b:68:5b:57:0d:
be:5b:8a:58:5b:bf:24:61:84:3e:a1:85:c5:1c:4d:
ae:dc:14:fb:f7:e7:de:0b:66:c8:60:3a:b9:73:8d:
fb:07:21:d1:44:34:f9:75:7b:24:7a:52:f9:ee:c8:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:B8:AC:49:2B:0A:E9:CB:C5:D9:17:D2:1E:3D:B9:D3:B8:C3:8E
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:97:23:72:9f:4a:c8:e1:81:37:0a:0a:17:3f:ae:8c:e8:6f:
4b:9f:6a:89:ed:05:78:dc:0e:d8:95:eb:79:5d:df:fc:6a:aa:
0b:05:73:82:69:f7:4c:15:e1:bb:1b:17:e3:d6:0b:a5:ce:77:
a0:d4:3e:39:71:d3:d0:f7:cb:64:6b:50:16:5e:8f:55:b3:33:
b1:df:8f:d2:21:1a:f6:d3:a3:42:6a:a2:e7:3c:e1:a2:08:c1:
0b:df:c6:97:c3:47:46:ce:be:18:36:85:05:92:b2:7c:1b:9c:
b3:c0:e1:c3:aa:58:c7:ca:8f:c6:b2:0a:47:60:64:70:3d:49:
04:30:10:54:a1:a9:15:86:32:b0:3e:a8:63:71:7f:b1:36:4b:
bd:b6:22:1c:cc:38:c9:a6:4f:c5:e7:72:96:f4:3d:3d:7a:69:
36:2c:40:23:ac:89:32:88:a3:5f:ac:46:cd:a8:65:a3:5d:6d:
21:50:59:c0:96:94:9f:5a:fa:da:32:1c:85:67:76:75:5d:6f:
d7:79:e7:cb:0a:58:54:6f:dd:21:14:d5:9c:ef:70:24:3a:f4:
cd:98:c3:6c:70:e1:74:80:6b:1e:da:d5:51:d0:82:7e:60:02:
ed:ee:41:76:43:16:45:33:c9:98:35:b3:1e:89:e9:8b:ca:e7:
fa:88:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:57 2026 by rpki-client