Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: /9mtbNy8Ew4iJ1xyCv7bfCTVQfEGsLFGm/1uOHwzEoQ=
Subject key identifier: 86:E1:8D:CD:28:35:AF:0B:F4:21:65:DC:E9:4B:20:70:D4:79:3F:C9
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019CABA1D3013675DA171AD19B22704245E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0FD9
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: Cd254sJdJwuu6H9I9E0srrpdoBA.roa (hash: pL8Cyr7W2nS2mcEsGc+8rfoSe9scnFA9gs7/69wjtfU=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: C82CP7sLWjPTqeqrqTFevnGLXLNWwSbNqOtMOUDBnDM=)
3: NKEvDzhxDBmLfFoED7YoUdXjLow.roa (hash: 29vPP7S5TvS0wSCUMz6/EH7GaUe47diCIdiBQvatduI=)
4: d0PfZiDQAfUb8dfx15UglgBUuoc.roa (hash: HZDXDvgZeDrPookCn9v4kcGEbz0yWS2FqsD6q/CriPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d3:01:36:75:da:17:1a:d1:9b:22:70:42:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=86e18dcd2835af0bf42165dce94b2070d4793fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:98:3f:da:5b:0b:ed:d5:6b:bd:11:20:7b:
d5:6f:52:86:e6:49:dc:dd:c9:72:7d:f1:05:19:09:
11:94:a9:59:50:93:ee:74:28:7e:00:ac:02:1b:44:
99:a4:57:84:1e:88:8b:f1:22:1f:d3:cf:ac:50:2a:
77:a2:5d:ab:f6:9f:ca:15:ac:14:fe:d2:c3:03:08:
c6:fd:02:b9:b1:87:87:40:55:b9:48:16:8e:84:9b:
ae:cc:d0:5d:2a:d9:82:01:e1:92:24:2b:50:10:26:
c2:04:6e:3b:bf:1d:e3:3f:3c:ef:c7:72:29:d0:db:
08:3b:3d:7f:eb:fa:3c:c8:97:02:a0:32:30:e7:32:
d6:0b:84:e0:a5:b4:b0:e5:7b:76:0a:84:9c:9a:3b:
77:24:df:d9:06:a5:84:a0:7e:57:17:f3:a2:8d:ef:
3a:0a:73:cc:e7:58:ee:95:e3:19:d2:ad:b0:e9:30:
4c:b1:93:c6:e3:4c:2e:99:8d:32:22:15:0d:e2:fb:
09:7c:ce:92:5b:4c:2b:49:e7:bc:c6:ef:58:eb:d5:
50:36:54:e8:8f:b2:d2:db:36:21:a1:5b:1e:67:ec:
68:91:8e:99:e7:c1:f6:ab:aa:07:76:ad:db:c1:fe:
39:66:01:e2:36:1c:b4:55:ec:98:50:90:e9:8e:4f:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:8D:CD:28:35:AF:0B:F4:21:65:DC:E9:4B:20:70:D4:79:3F:C9
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:2a:df:dc:aa:42:6d:ab:ff:87:f8:6d:40:e2:00:d7:13:
be:c1:d4:a4:52:b3:28:ac:d3:08:d0:a1:40:05:54:60:54:18:
83:20:47:3b:27:32:ca:a0:45:01:54:68:eb:68:b8:3f:0e:38:
5d:56:eb:fa:8e:e5:e2:44:b4:a2:fa:2a:61:97:1a:46:d2:96:
8a:89:4c:68:9d:84:8a:f5:66:0a:69:a7:99:0c:95:eb:b9:7b:
1d:6e:b3:4b:8c:08:de:df:4a:1b:ae:0e:25:52:60:ca:26:32:
c8:fc:53:3c:57:64:9e:88:78:20:e2:56:0c:09:86:bb:39:fb:
e6:2d:16:37:87:0f:8c:79:c7:e6:7c:95:7b:99:0c:b9:44:b8:
ef:f6:3e:90:98:33:6e:8e:8b:12:c8:00:71:bc:5b:aa:c5:98:
48:17:56:10:6d:d7:7b:1a:91:b9:24:90:14:a0:b7:fc:bb:bb:
44:df:f5:1c:15:87:45:28:80:50:6f:45:58:e4:ba:62:f3:e5:
d9:6d:09:2c:7d:e1:23:fc:cc:a0:47:ef:dd:82:31:e1:a6:bb:
e0:49:68:92:54:d5:28:b6:16:78:cf:ea:93:a3:46:eb:ae:a2:
18:77:59:24:38:17:f4:5c:70:95:da:5f:3c:24:75:71:a2:04:
2a:f6:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:10 2026 by rpki-client