
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier: D7f9LxmYIHupAV9JGVpiOqOT8yutopQA1JD74H5NVm0=
Subject key identifier: C0:E9:BC:52:27:63:7A:FF:A8:9C:C1:D3:4B:17:F5:92:8B:65:39:9A
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial: 019CA97CF23288F323CBE2781CC01969C029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number: 0801
Signing time: Sun 01 Mar 2026 13:01:03 +0000
Manifest this update: Sun 01 Mar 2026 13:01:03 +0000
Manifest next update: Mon 02 Mar 2026 13:01:03 +0000
Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: KEkqM5kz1Yos8Yr7z5NZAhw6gDPeW3d237zkAZlfs0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:f2:32:88:f3:23:cb:e2:78:1c:c0:19:69:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Validity
Not Before: Mar 1 13:01:03 2026 GMT
Not After : Mar 2 13:01:03 2026 GMT
Subject: CN=c0e9bc5227637affa89cc1d34b17f5928b65399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:e2:d6:a5:25:4d:f1:17:63:bc:b7:de:a6:
5a:e7:37:c6:f1:a9:ac:2c:de:84:58:2b:35:14:89:
16:9b:2c:38:8d:9c:a2:ab:bb:95:ef:ce:48:29:a3:
78:f6:d9:27:6d:a1:64:0e:3f:29:41:1b:80:23:21:
af:b9:3e:04:ea:ee:8a:6f:4e:83:be:67:b2:f3:83:
1c:60:70:b3:ff:e5:d2:b4:7d:8e:82:07:d6:95:b6:
83:d8:6e:a0:17:89:cb:80:98:42:7d:a8:ae:53:59:
68:d4:9d:dc:99:43:86:62:cc:d8:b2:6e:52:c5:92:
f3:b3:b6:56:96:74:83:f4:5f:3e:6a:4a:01:ae:6a:
1c:14:d7:21:b6:dd:64:57:05:29:8e:b6:3f:e8:e2:
92:46:cd:96:54:7e:b9:c2:29:38:44:e8:f9:59:b9:
c1:3e:af:0b:11:57:55:6f:bc:cc:5c:62:a9:5e:e9:
32:e7:40:e6:fb:d7:80:3d:17:6c:57:a8:83:8b:5c:
65:01:74:72:a3:b4:b5:5e:bf:8b:2b:f6:8b:8d:21:
45:26:64:7d:31:22:95:f8:6c:0d:33:e1:6c:66:65:
3d:bd:57:6d:65:12:76:3a:a5:b9:c9:15:a3:59:ec:
2e:a7:fe:31:8f:d8:2c:b5:19:7d:4f:66:d1:c5:4a:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:BC:52:27:63:7A:FF:A8:9C:C1:D3:4B:17:F5:92:8B:65:39:9A
X509v3 Authority Key Identifier:
keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:1f:23:c4:90:30:fc:e9:05:c5:be:c5:26:76:fc:39:43:
12:71:f7:ae:21:18:1d:e6:4f:f7:07:48:fe:9a:1f:68:ab:c1:
5a:71:5a:23:4c:95:eb:d3:cd:e0:3e:89:8c:b2:c4:64:61:54:
85:e6:3b:6b:57:76:82:cb:6b:02:3b:a1:d0:03:c7:fe:28:ed:
1b:1d:96:f1:89:4e:36:50:f5:67:74:03:ac:a5:e9:de:30:d3:
e5:fa:81:84:d5:de:f1:b7:9e:ba:c6:0b:0b:d1:d1:6e:e0:a8:
d8:32:fe:0c:bc:90:8e:e4:ce:bf:28:60:d2:35:4b:d4:72:31:
82:f3:9e:c4:0c:3a:f0:43:55:28:66:fa:6a:d8:f5:91:94:24:
4c:fa:43:56:d7:99:7a:59:b8:2c:ff:22:f4:16:1d:05:17:26:
6c:cc:b0:80:e9:83:5c:25:ae:a5:24:15:6c:5d:91:13:9d:33:
01:24:a0:f9:59:70:e6:59:bb:34:64:1d:51:52:82:39:36:f1:
9c:51:55:af:c8:f0:4a:ed:b0:c2:13:8a:84:7f:4d:80:09:90:
9c:99:10:6c:b1:a6:6d:7a:a9:67:88:7f:d9:8b:32:01:ca:64:
12:05:79:fe:5d:31:08:99:f6:53:6d:0e:80:da:74:55:f2:73:
97:3d:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:49 2026 by rpki-client