Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier: BDIaB7wYF6ux8Cji73THJdwVG3C+xAfCwSHLnYacL90=
Subject key identifier: C6:B0:58:9C:0A:7E:16:B7:A3:8E:5E:17:C9:0F:C6:44:A0:A6:69:38
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial: 019D9B5140085D342C829B39EDC0209A5890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number: 0FAA
Signing time: Fri 17 Apr 2026 12:01:26 +0000
Manifest this update: Fri 17 Apr 2026 12:01:26 +0000
Manifest next update: Sat 18 Apr 2026 12:01:26 +0000
Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: jJP9l1aftwuixUNucl+tFDzvEUjmygp7vhADeE7Jpzk=)
2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:40:08:5d:34:2c:82:9b:39:ed:c0:20:9a:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Validity
Not Before: Apr 17 12:01:26 2026 GMT
Not After : Apr 18 12:01:26 2026 GMT
Subject: CN=c6b0589c0a7e16b7a38e5e17c90fc644a0a66938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:2b:24:88:40:69:87:fd:6c:b1:5b:30:89:
ee:24:17:f6:12:6d:e0:e5:f1:d9:8c:2d:27:57:39:
ae:ea:ae:34:ff:b6:82:7b:92:9b:00:85:f1:66:83:
45:57:be:b8:36:a8:3d:a0:18:07:81:e3:2e:0e:c2:
7f:70:2e:bd:0f:73:2b:f7:cf:73:8e:60:b3:49:03:
8c:de:e1:28:21:a1:88:6c:cd:a8:dc:b3:3b:bb:fa:
b1:f2:1a:18:52:c0:dc:44:73:14:5b:a3:c6:4f:d8:
6b:46:6c:54:ca:e0:b9:cf:fb:1c:07:87:fa:0c:11:
b1:76:23:c8:3e:37:89:22:ed:76:af:63:f2:db:2c:
42:db:e6:e8:09:8d:c3:be:fc:eb:ab:d1:79:be:83:
eb:82:1b:e6:5b:46:f0:35:2e:fc:d9:3c:f1:b7:e6:
f0:9b:e1:cf:37:4d:c8:12:b9:28:ab:34:f4:6a:e9:
c3:68:f0:93:65:62:60:e8:c3:7a:bc:53:ce:7c:25:
8c:3b:f8:42:78:e6:32:6a:d7:58:44:69:09:2f:82:
da:14:b1:64:b8:26:85:b2:ef:b0:c5:ac:e1:3f:8e:
ef:27:76:24:22:9a:27:5e:b7:26:42:95:01:c8:05:
22:9d:46:e4:d2:6b:22:25:33:f5:a7:2a:2e:97:ec:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:58:9C:0A:7E:16:B7:A3:8E:5E:17:C9:0F:C6:44:A0:A6:69:38
X509v3 Authority Key Identifier:
keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a7:c7:9e:81:16:47:dc:24:03:a0:89:f8:75:9e:b5:67:c7:
09:69:38:b5:60:bb:b2:6e:cf:96:37:7d:e5:0e:0b:ba:7c:bc:
c2:78:9c:00:9f:3a:56:29:ca:dd:9c:63:dd:34:21:f4:65:98:
21:30:05:7c:74:33:ff:1d:35:f8:82:2c:49:f1:b1:8a:b1:8a:
04:24:df:a3:52:a5:75:d5:c1:db:8b:5f:de:b6:f7:a9:c7:45:
dd:00:ae:e3:99:e9:22:11:ff:31:9c:9e:52:62:67:4f:73:55:
e5:19:96:7f:c4:6a:b8:0a:4d:be:36:70:02:6a:2a:da:92:9c:
10:54:14:39:da:2e:83:d9:42:19:ef:bb:48:b4:c7:ff:9d:b9:
e8:e7:22:7d:c7:48:e9:1f:76:55:8f:85:5d:09:23:4b:2a:44:
29:78:3a:25:44:5a:e2:16:5d:db:89:a7:09:e7:6d:63:7b:03:
1d:8b:58:be:2b:8a:c4:63:59:24:81:11:f8:0d:43:35:c5:fb:
f2:b8:8d:2f:77:72:d5:e6:70:a6:ce:28:51:41:f8:1e:c4:97:
62:f4:9f:01:e0:09:86:24:b9:e9:1f:02:cb:e8:c1:15:a8:fd:
17:f0:75:b8:23:87:e4:ca:74:c4:e5:2b:8f:73:8c:21:8b:2c:
89:72:b1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:38 2026 by rpki-client