Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File: E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier: MoffuJfBTHAN2kOdsB9b4bIRPOTeWTaXgiRdqBywOhI=
Subject key identifier: 68:C3:AB:6D:A1:A9:0F:E3:C0:71:9C:20:A2:C0:A9:52:1E:98:75:40
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial: 019FAA874E1173BF4F6E55A6452A39FEEC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number: 090C
Signing time: Tue 28 Jul 2026 21:00:21 +0000
Manifest this update: Tue 28 Jul 2026 21:00:21 +0000
Manifest next update: Wed 29 Jul 2026 21:00:21 +0000
Files and hashes: 1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: Wp6m5t24RKkpXoKfLhXGYuqJYTvbGWmgXLCL7VfeiJM=)
2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:4e:11:73:bf:4f:6e:55:a6:45:2a:39:fe:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Validity
Not Before: Jul 28 21:00:21 2026 GMT
Not After : Jul 29 21:00:21 2026 GMT
Subject: CN=68c3ab6da1a90fe3c0719c20a2c0a9521e987540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:63:f9:bd:89:ac:ad:f4:da:c9:0c:e3:5d:
1d:91:31:7a:3b:34:1c:30:d1:44:a9:35:92:78:94:
52:ae:f5:b5:e1:a8:f7:2e:5e:6c:c4:05:d4:75:4b:
88:b3:c4:13:4e:cc:1e:fa:37:d7:16:2c:21:91:82:
12:e4:54:5e:e3:ed:3a:80:0b:de:8e:0f:ae:fe:58:
ce:89:01:95:36:72:5a:54:52:9e:a5:27:b6:6e:db:
10:8e:eb:c4:c9:ec:b6:ee:cb:51:a3:f0:54:c1:7d:
b0:4b:ff:39:02:43:35:73:b6:14:e2:67:ff:2a:d0:
52:f2:2c:17:51:cb:2b:54:38:7c:2f:0d:9b:bf:3e:
1d:b4:45:5a:a2:f5:58:52:ad:ff:96:55:d3:13:0c:
9b:94:51:4b:5e:31:be:1a:b7:57:21:69:98:e5:20:
bd:dd:13:12:1c:c4:78:6a:0d:65:1b:43:fd:43:36:
b5:cd:1e:47:23:c6:29:34:3b:d2:f8:81:b3:03:2c:
e9:68:69:ea:f1:65:7d:ed:f6:9f:1b:44:4f:72:8b:
3f:d5:5f:7e:c5:0d:71:7e:6d:8a:df:0e:8d:59:5d:
2b:b1:c6:2f:88:68:70:51:4f:c0:42:04:92:a8:25:
4a:e4:be:0d:bb:54:7f:05:15:ce:71:81:bb:a1:3c:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:AB:6D:A1:A9:0F:E3:C0:71:9C:20:A2:C0:A9:52:1E:98:75:40
X509v3 Authority Key Identifier:
keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:00:4c:08:11:95:f7:66:fa:53:75:d5:38:03:50:13:fe:4c:
d8:56:de:16:a1:d6:42:1e:cb:24:f2:d3:d7:1c:c8:96:00:22:
36:e3:52:eb:f0:36:a3:04:9f:e5:27:54:ab:fc:47:5f:a0:eb:
76:a8:08:7c:9a:35:da:a2:e0:ca:4f:05:16:d5:9b:da:6a:2e:
95:84:2c:7d:02:29:d2:18:b2:3a:6e:ce:be:d7:b0:41:85:cc:
6e:f0:18:7d:e1:ef:11:6f:4d:29:04:e3:42:b2:c7:42:03:bc:
af:0c:6c:ab:06:06:1d:16:10:65:e9:a7:73:22:54:b3:b8:6c:
54:c5:88:2f:a6:26:26:59:7c:58:3d:ae:c0:78:51:72:8c:bc:
ec:1d:3d:45:7f:1e:77:5b:0d:8f:04:21:88:11:d7:c2:46:7b:
65:81:f6:66:0e:5d:64:b1:a7:29:f5:3d:35:3d:40:49:91:dc:
55:5d:3e:74:4d:ac:26:23:9c:58:f9:ee:78:e8:bb:4c:4f:a0:
c7:08:eb:2f:03:7b:43:33:6e:45:b3:80:f1:07:3c:0c:10:4c:
57:9f:32:6c:b1:bc:c9:8a:c9:cb:e8:5f:7c:e6:71:f6:02:d3:
10:7b:aa:01:28:71:76:1f:fd:3d:0b:d6:f5:55:ef:7b:ce:09:
94:0e:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:04 2026 by rpki-client