Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File: E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier: UJjTX2+2rK+cb2Simn1KO/Fko2EqG14ht2gHmx2hrN0=
Subject key identifier: C1:6A:F3:E6:8E:09:EF:92:05:04:1E:94:83:5B:3E:8C:73:8B:B3:8E
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer: /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial: 019CAD22E144D86364A1AFD6498F508C4F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number: FF
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: Eu0ygeZWVXjMYK+Pv+gsLel22esrwixWEPggMQtZ6Bc=)
2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e1:44:d8:63:64:a1:af:d6:49:8f:50:8c:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=c16af3e68e09ef9205041e94835b3e8c738bb38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:56:fa:d3:e3:2f:84:ab:53:4b:dd:5f:e7:
66:80:cf:f6:da:ed:be:9a:d2:be:a8:bc:7e:fe:a9:
b5:42:b1:e9:2d:f7:57:be:ea:43:0c:98:4a:e5:d4:
39:78:83:15:ae:d2:f1:e7:11:e8:90:78:c9:2f:95:
bd:7f:36:c1:56:e7:92:97:de:81:22:e7:7b:46:61:
61:cb:85:93:e9:6d:15:c2:31:f5:cd:91:77:60:76:
35:2a:13:3a:5f:1f:9f:27:96:5a:1e:15:14:f4:3c:
5e:86:ba:25:16:55:f9:4f:19:92:e4:0c:55:5f:8c:
bd:83:69:c3:24:b5:74:8e:bb:be:92:8e:0a:7a:59:
3d:01:c9:b5:d2:e9:c6:62:38:18:40:2f:f6:cb:b5:
ee:4e:1e:fc:10:a9:55:ec:93:99:29:4f:27:a1:46:
b7:8d:86:20:88:f4:26:fc:f6:bb:52:25:ce:59:ea:
fa:71:aa:98:d9:98:cc:0b:f0:5e:7a:68:0c:c9:51:
1b:bc:74:c0:9d:0b:a7:26:66:fa:c7:8c:1b:3e:37:
de:06:a5:04:a2:48:d3:d4:ef:8f:b7:27:4a:bd:7b:
34:a6:17:62:65:fa:80:95:44:01:b1:a0:19:cf:15:
80:65:71:d8:8b:a0:e8:23:8d:9b:1e:92:18:9a:70:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:F3:E6:8E:09:EF:92:05:04:1E:94:83:5B:3E:8C:73:8B:B3:8E
X509v3 Authority Key Identifier:
keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:87:f4:c7:ee:13:a9:89:24:87:31:e1:43:30:36:f5:b9:
31:a8:c4:57:b5:74:61:bc:4d:24:5a:4d:20:24:f6:35:c2:b2:
72:44:0c:0b:6c:cc:cb:8b:30:01:cd:5b:b0:2d:7b:63:74:2f:
95:ad:25:41:02:2d:e5:da:ca:2b:e4:89:39:c3:66:6d:66:2a:
65:e4:0a:8d:00:f8:b1:74:2a:1d:3d:0d:8b:7b:6e:91:f8:35:
84:b2:17:81:76:1f:3a:cc:0c:9e:55:ab:23:73:4b:67:cf:65:
27:04:05:5e:38:23:1c:15:6f:cc:55:e8:25:d0:07:04:91:54:
0c:cb:a0:f1:d9:b9:7a:a4:22:67:97:73:70:a3:df:ca:d6:bb:
05:34:df:b8:c4:95:46:51:d9:b0:18:81:63:6f:16:10:78:e9:
29:5b:2d:07:4f:3d:8f:47:ed:4a:c4:50:51:83:1c:b8:e0:f5:
50:83:c0:cb:48:3d:7b:29:5c:a3:7b:7d:79:4c:ba:7b:37:fd:
6c:22:0c:f5:98:b4:6a:a2:ab:90:52:9d:e0:4a:1e:95:42:ff:
66:f1:1b:65:e6:68:bc:b4:3b:bf:70:01:90:d0:6d:c5:20:f8:
58:d0:a7:58:2d:87:f0:33:c9:c3:81:a2:06:be:73:70:fe:3c:
05:28:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:02 2026 by rpki-client