Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: c97wXMONczfHf8uw425FEBbYIaZRqjt611w6vyJSu3k=
Subject key identifier: 83:80:54:C8:DB:4C:0A:E6:55:E4:F8:9A:AB:D0:9C:0C:63:60:CF:64
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019DA30A86BB74FAFC1965F00A901BB5460C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:01:09 +0000
Manifest this update: Sun 19 Apr 2026 00:01:09 +0000
Manifest next update: Mon 20 Apr 2026 00:01:09 +0000
Files and hashes: 1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: BLmgXJUVwJfpRwNh88LkerDOkJnQlFTAEJ3YltFFqNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:86:bb:74:fa:fc:19:65:f0:0a:90:1b:b5:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Apr 19 00:01:09 2026 GMT
Not After : Apr 20 00:01:09 2026 GMT
Subject: CN=838054c8db4c0ae655e4f89aabd09c0c6360cf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:15:2d:30:d7:67:9b:58:a1:29:ad:dd:4a:
b6:22:70:4a:54:0f:67:34:89:1a:35:c9:28:b2:8d:
12:51:30:30:61:9c:ec:49:09:86:5f:1e:d3:00:43:
33:fe:8c:4b:53:3e:f5:5e:25:a0:00:26:ee:72:bc:
bf:06:88:c1:84:4f:f2:e3:b0:45:47:25:ff:a9:82:
81:d1:54:69:7b:c0:ae:dc:26:8a:16:c0:ec:79:f3:
71:d6:de:39:66:6b:07:48:2a:29:ca:1a:cf:99:e7:
6d:35:44:30:42:af:3d:e9:8b:7b:ab:db:2a:b2:fc:
59:a0:54:4b:a9:c7:cf:6b:aa:48:23:3b:2e:4a:b3:
36:b3:de:38:5a:f5:36:54:ac:b1:37:64:3b:6b:b1:
8e:a0:c6:a3:ea:ed:39:2f:2c:43:2a:fa:22:2e:e0:
0e:60:93:cb:38:77:55:c4:25:93:ef:56:e8:11:af:
66:64:06:ec:8b:f6:ab:45:6d:7d:e8:ea:38:2e:6d:
a9:9e:07:ca:c1:e0:3b:a4:f1:0d:5f:66:5e:9d:53:
d2:39:5e:51:4a:2e:ef:02:ec:b2:d7:d4:80:f6:3d:
5e:e5:96:a0:19:64:ac:01:5f:4a:73:18:eb:cf:48:
0e:e6:29:3b:8f:34:69:d9:1a:a7:49:70:fa:a6:c9:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:54:C8:DB:4C:0A:E6:55:E4:F8:9A:AB:D0:9C:0C:63:60:CF:64
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:44:aa:82:55:b6:af:ad:f0:dd:60:6a:64:ac:21:33:e1:82:
9c:7a:b6:d7:e6:ef:c8:04:90:82:b1:21:b6:2d:ff:a2:ee:9f:
72:4d:2c:76:80:1b:38:5a:9a:e4:ae:d3:46:0a:33:81:03:a9:
4e:78:b8:57:0f:d8:ad:16:84:cf:77:56:35:83:9e:97:28:f5:
4f:40:50:d1:d0:19:53:be:28:ab:99:8a:47:83:13:c5:e3:81:
a8:1c:52:37:96:df:ef:f5:e5:35:95:a9:db:6e:05:a7:3f:60:
72:5c:ee:35:ab:42:90:59:a5:e4:47:8b:66:08:47:5f:af:2f:
b7:b8:05:4f:4f:1a:11:df:3f:5b:56:17:be:5d:b0:1e:11:0d:
4e:58:8a:f8:cd:3f:82:8f:d9:14:f0:5a:ca:ef:19:cd:1e:77:
af:34:14:9a:71:11:53:d5:92:e7:fb:c5:f6:b1:87:b1:1b:24:
e9:ec:09:29:84:51:2f:26:05:00:e7:c6:ad:6f:8a:14:31:87:
e6:75:9b:22:69:bc:fd:28:05:20:10:36:0c:d4:ec:14:f9:9c:
83:44:85:fb:07:f2:3b:5e:e6:c2:dd:c7:49:47:46:96:24:00:
1c:2b:ed:34:d0:13:e6:97:10:f7:d0:f4:a3:85:1b:f4:a8:3c:
cc:67:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:13 2026 by rpki-client