Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: XL2tuxMOdjUrQFvQoC1olBbwqbOEOhRXqJEc/Kb7UtM=
Subject key identifier: A6:23:DC:14:C8:01:26:39:F5:AE:CF:6E:85:D0:11:F9:3D:2C:13:AD
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019CABD9CB8AEA40B6EEE2D471F616866600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: D337AAcFZkCZIbKaAejpe5ooe6Y61CX4Bk53iAdBi5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cb:8a:ea:40:b6:ee:e2:d4:71:f6:16:86:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=a623dc14c8012639f5aecf6e85d011f93d2c13ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:4e:7f:4e:79:1d:af:86:eb:13:bc:2c:95:
bd:3a:25:e3:22:b1:b1:f4:55:39:87:29:75:cd:d8:
88:ab:6e:0f:82:e2:fe:92:a8:74:a7:bd:36:ec:5d:
4d:e5:5c:45:e2:ce:97:bc:3b:a3:97:40:82:cd:c8:
df:4d:26:d6:71:f6:be:01:9c:2e:70:5c:3c:ec:15:
df:e1:2d:1a:f6:d7:12:ce:53:c8:b9:e9:a1:c9:3e:
c9:5b:20:e6:a3:4c:f2:81:3e:bd:05:45:8b:72:78:
7c:59:3f:bb:3a:11:ea:e8:fd:8c:7b:e4:e9:df:f8:
85:d4:78:23:a5:27:4c:df:d9:39:66:ec:22:97:29:
9b:42:b9:2c:f1:b5:2a:6b:bd:be:7e:39:27:0f:3e:
78:5d:ec:87:a0:23:25:04:ec:2b:db:ec:99:67:fb:
12:a9:d9:13:c9:64:59:4b:8f:bc:fc:e5:e6:65:ce:
04:bb:7d:99:6d:d9:a8:ee:39:eb:cd:10:c5:57:82:
60:7c:b5:b7:8f:bc:9c:2f:bf:bf:30:03:19:c3:27:
0a:60:cd:08:5c:dd:a5:e5:89:05:02:24:0f:ee:ec:
0d:6c:cc:64:38:f7:7a:ad:b2:16:7e:94:21:50:90:
21:93:77:13:2a:78:fd:d9:1d:e7:48:bb:e8:08:ad:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:DC:14:C8:01:26:39:F5:AE:CF:6E:85:D0:11:F9:3D:2C:13:AD
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:f2:70:bb:41:46:40:30:fc:e0:58:3a:a8:c2:1e:46:7d:
96:b7:a4:ff:20:cc:ce:09:b8:ad:62:86:4c:61:8f:97:6b:f3:
06:4d:0e:9a:dc:05:da:1b:96:92:68:7e:c0:a2:ab:b7:21:d0:
8a:10:1b:c0:cb:15:13:91:f1:e8:69:02:b1:fa:40:a9:5b:6a:
4b:a3:36:ec:81:35:b7:0f:cb:34:70:60:75:cf:55:4c:81:07:
2e:b0:63:16:86:21:12:49:f6:81:f9:58:ff:5c:16:d0:f7:c3:
a3:97:3a:d0:b2:ab:03:4b:5e:e4:81:df:ca:d2:6e:be:9c:cd:
9f:43:18:33:1f:13:0f:68:a4:a4:02:f3:a0:e8:19:24:15:f5:
64:48:c1:02:0f:f5:04:09:aa:79:bf:42:70:25:a5:f9:c7:27:
bf:13:09:b1:9b:46:ae:3c:e2:6a:99:49:c2:6f:19:e3:44:4e:
bf:5e:95:09:35:57:ee:b5:45:2b:22:31:5e:33:07:76:ee:79:
42:dd:6c:a8:8f:94:1d:a8:39:26:ff:8f:67:73:50:2b:b8:51:
42:e7:e4:0d:cc:ee:90:95:8b:9e:d4:0a:1e:ca:93:b3:0c:42:
d1:3b:43:22:ce:82:a3:f6:be:56:a8:41:08:2a:77:2e:0e:88:
40:66:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:39 2026 by rpki-client