Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: TgtAA4+DqvZzviGSygviHvzwClf8zfUxiYnqXLwcceI=
Subject key identifier: 51:3F:B8:82:C7:7F:EC:7B:8D:5F:B9:0B:7F:7C:45:2B:53:33:35:6F
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 019CAC7DC12DD7D67DC34F845894475BD2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 0470
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: C0Hg4BBGQ0/g+bOOZ+kcPjmhdfIeGqS3BMabfANm63w=)
2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c1:2d:d7:d6:7d:c3:4f:84:58:94:47:5b:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=513fb882c77fec7b8d5fb90b7f7c452b5333356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:39:95:46:38:e6:6f:cb:63:02:49:4d:b6:
c9:a3:ed:72:f9:9a:d5:40:2d:39:eb:25:1a:15:9e:
81:47:e5:1c:b0:6d:a9:d0:59:40:72:e6:c7:0b:c3:
6f:bd:8d:e6:3a:49:e6:6a:25:64:dc:87:ec:05:0a:
94:4e:c8:a0:93:04:9c:f0:87:b6:12:35:48:f7:af:
30:3f:c5:00:e1:25:1c:ec:46:ce:1a:98:1f:f5:7b:
8f:ed:12:6f:91:87:7c:23:98:16:62:6f:e5:9f:80:
b6:62:61:fb:ae:77:7f:e5:a7:a0:50:fa:3d:d9:68:
b7:1f:8b:47:e0:55:3b:bb:c7:b8:4b:9b:59:08:01:
4c:01:b3:e0:83:b5:73:47:0b:c4:47:fb:89:43:a0:
b9:20:3d:d2:07:fb:61:cf:26:d5:69:cc:a6:64:2f:
a1:89:bb:0d:63:ee:2f:41:a8:7e:a7:e8:f7:53:d2:
09:c2:dc:13:48:ee:1b:05:e9:67:6b:f8:47:f6:d2:
a5:f0:85:04:47:aa:72:18:51:4c:8b:5b:f1:f9:ad:
94:b9:4d:80:e1:a9:5e:aa:5b:a5:f0:20:5c:64:2e:
e0:d1:58:fd:f1:45:6e:a9:f9:4d:c5:27:c5:fa:76:
87:37:cc:0d:db:ef:24:b8:ac:3b:f2:0a:4c:90:8e:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:B8:82:C7:7F:EC:7B:8D:5F:B9:0B:7F:7C:45:2B:53:33:35:6F
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:fb:28:56:db:43:8f:ca:c0:33:3b:dd:13:db:80:6b:5d:
e0:c7:89:4b:37:7a:41:c4:61:8a:40:2f:f4:37:30:c6:18:7a:
43:cd:af:97:c1:b1:84:5b:0c:15:13:25:ad:9d:b8:eb:a0:87:
b4:dd:92:e9:fb:fd:d0:4a:5e:df:18:e2:bd:7b:52:c6:cf:6f:
75:70:39:d2:0b:16:ae:9f:8d:b9:c2:f8:45:4a:81:1f:4c:3d:
dc:0f:7d:ce:94:8e:2b:26:4b:fa:d0:b8:f6:40:a3:15:36:f7:
2d:04:a2:3d:57:6b:d5:ec:79:50:78:61:62:7a:8c:9b:99:5a:
1a:e5:06:48:4e:0c:6c:39:a8:c7:46:b1:79:7f:1a:d0:66:4b:
90:8c:29:ce:47:97:dc:40:c4:7e:43:95:fd:d8:a8:21:0a:31:
50:35:6d:07:67:35:72:7f:da:ff:25:24:cc:ad:f6:ce:c1:17:
22:08:f3:53:56:54:6c:d8:6d:36:e0:99:a0:8d:d9:b5:36:be:
4a:8f:3e:9d:e3:55:a8:dd:79:64:65:b9:22:a2:99:fe:c4:32:
b6:3a:85:02:5b:c8:47:fe:66:95:24:cf:a0:cb:ed:14:ff:2a:
83:32:c9:f8:19:b1:18:36:e3:91:0d:24:de:2b:8b:2d:b0:41:
f3:7c:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:19 2026 by rpki-client