Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
File: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft (raw, json)
Hash identifier: jLUtcsgx58r48A4/Sn+eMRH9sbrL82EzYPCkTkdCPts=
Subject key identifier: 61:1F:DB:E0:8C:03:F3:0B:3E:A1:CD:6E:DA:34:6E:7B:EE:D5:6A:2B
Authority key identifier: 13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
Certificate issuer: /CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Certificate serial: 019FAD1B1A9132903C75C086382EACA66ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
Manifest number: 0119
Signing time: Wed 29 Jul 2026 09:01:02 +0000
Manifest this update: Wed 29 Jul 2026 09:01:02 +0000
Manifest next update: Thu 30 Jul 2026 09:01:02 +0000
Files and hashes: 1: Dg75WaAECc2_16xSrrua_Jl9vNA.roa (hash: Sqm9spSXxwwPSmf7/I85TDjTAS8g51LglO7cWoTaYU0=)
2: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl (hash: p5yuP/oyNSytMO4QIe4dx8hqqJxfkhxJbe1tHA9O4Bk=)
3: e5_vLejBPA3EP_yr_mC9Szf-bWM.roa (hash: RYb6H9omfbHfmdu03QeSOGuQd/N/QMFTHjBVUp9L/MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:1a:91:32:90:3c:75:c0:86:38:2e:ac:a6:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Validity
Not Before: Jul 29 09:01:02 2026 GMT
Not After : Jul 30 09:01:02 2026 GMT
Subject: CN=611fdbe08c03f30b3ea1cd6eda346e7beed56a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:be:16:fd:01:7c:a2:40:df:86:44:6f:60:
3e:e2:07:7d:26:93:4b:9d:63:fb:01:52:23:f2:47:
86:88:6d:67:11:f6:08:77:88:47:fe:ae:0a:eb:e2:
a6:07:c7:69:f8:64:18:d5:26:e5:2d:81:0c:ee:b0:
69:05:e0:ee:24:57:d4:e8:1e:70:64:54:ee:12:d1:
56:ef:ef:68:6c:f0:9c:0a:18:5d:56:38:e9:c2:41:
9f:f1:bb:8a:c4:06:e9:da:4a:f0:82:4f:b0:04:f5:
5d:29:8e:9c:4f:77:37:35:ac:7e:c1:09:fc:0e:67:
7c:3c:11:a8:2d:c5:c9:26:5f:4a:ad:66:95:2b:ea:
a2:80:e8:dd:44:cb:a6:99:a9:b4:27:90:ed:a8:dd:
23:2f:23:68:ac:fd:40:80:59:ab:71:bf:97:dd:21:
a9:f8:53:13:67:4b:85:55:3e:75:14:61:0d:9e:4c:
bf:0a:d8:b0:c0:89:d8:c4:fd:41:16:07:55:7d:dc:
9c:dc:bf:12:86:26:37:3f:09:c2:f6:45:d4:91:fd:
00:56:d5:98:dd:e5:90:b1:1d:ce:a3:97:07:55:d4:
26:13:00:b2:40:50:d0:94:67:44:bc:74:63:2c:78:
d2:c3:f9:fd:01:da:a2:92:3d:ae:e1:64:74:f2:32:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:DB:E0:8C:03:F3:0B:3E:A1:CD:6E:DA:34:6E:7B:EE:D5:6A:2B
X509v3 Authority Key Identifier:
keyid:13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2b:ee:2b:2e:38:88:b3:c8:6c:6f:b3:2b:0b:78:d6:84:06:
05:c3:b3:29:43:ff:3b:2d:ae:fd:22:35:51:a8:87:d4:4b:70:
42:a7:51:93:d6:72:7a:9a:99:68:22:30:9f:1f:4a:58:70:d7:
e7:ba:80:c8:72:93:cf:53:77:39:c2:5f:21:ac:1b:ee:27:11:
95:80:11:b7:ab:58:1f:44:0f:c9:2e:21:1f:46:f9:4a:90:cc:
74:62:0a:85:c8:6e:40:95:a7:6d:ea:c0:bf:cf:7c:29:88:5e:
9c:8e:ac:db:d5:9e:ef:c1:33:97:99:cb:12:a1:84:e5:c2:7d:
11:cb:0a:ba:33:80:e7:79:3d:5d:00:f9:bd:bc:5c:48:8d:3d:
c5:81:4a:d2:09:d5:a9:73:41:16:f9:d1:40:c1:03:92:a1:37:
f1:82:39:fa:07:4d:40:92:87:06:86:1c:3a:5b:2d:cc:a5:64:
29:fc:99:0b:70:55:3f:47:66:d2:a8:5a:9e:82:06:01:fe:22:
37:ce:56:06:b2:25:bb:c3:ae:ed:66:f6:bd:6d:76:dc:96:eb:
d8:90:66:52:3c:75:e3:0d:a8:36:af:da:2f:1e:43:59:1a:53:
aa:d8:5a:64:9c:23:32:df:74:71:f8:c5:1e:8a:1c:b2:35:93:
18:23:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:41:43 2026 by rpki-client