Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: Bzh4jT899WG4yfc67WgLPAO3BcpT/+bYSKY7FSnGtps=
Subject key identifier: 21:F4:6C:E2:11:98:A1:3A:3A:B6:C5:6E:14:8A:E1:8D:01:EA:31:F7
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019EBEB5F36BE1DA74142301BBF4DFDAADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 18E9
Signing time: Sat 13 Jun 2026 02:00:55 +0000
Manifest this update: Sat 13 Jun 2026 02:00:55 +0000
Manifest next update: Sun 14 Jun 2026 02:00:55 +0000
Files and hashes: 1: AWdnvO_fGYURQMiK3WsDBvu78og.roa (hash: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE=)
2: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: 0IbR4Lj5mClmjISjnLvp+5orBMjWKEcEG7skWKovi3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:f3:6b:e1:da:74:14:23:01:bb:f4:df:da:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jun 13 02:00:55 2026 GMT
Not After : Jun 14 02:00:55 2026 GMT
Subject: CN=21f46ce21198a13a3ab6c56e148ae18d01ea31f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:df:7f:a3:d4:7f:d1:e4:20:cc:4f:4b:3e:
ce:97:e9:ab:e7:5a:eb:6f:fc:45:e2:6d:5f:bd:92:
af:cc:17:d8:a1:0f:24:a7:fc:b0:8f:11:b3:ee:03:
38:3f:c9:9b:77:21:66:dd:66:dc:da:e8:6a:d3:ec:
66:80:cf:9c:8a:34:ce:86:7b:b6:6c:fd:9a:b1:53:
a7:07:c7:b8:6e:e4:ad:80:e5:7b:16:e5:f2:df:eb:
ae:9d:33:35:14:a2:82:8c:01:37:c5:15:49:8b:74:
ae:a3:c7:99:40:9a:5b:22:06:b4:30:a1:b1:4c:a8:
ac:91:fa:66:11:e5:ce:31:2f:97:76:17:0c:fa:a0:
2b:66:f3:25:4f:52:53:d6:c1:0b:72:c5:0e:c3:13:
b5:9d:b4:09:8c:83:f7:8e:b1:19:bb:54:eb:a6:8d:
24:7b:ab:ec:c4:bd:f2:05:73:e7:db:ea:39:f0:2a:
9d:f5:6b:c9:57:86:e4:84:04:4c:89:e0:bd:cc:0f:
cb:cb:9d:8c:ac:8c:16:6d:70:49:d9:b4:a5:ec:8e:
78:21:e7:d2:87:c6:aa:7b:14:ab:ee:40:bf:5a:25:
ee:21:3c:3d:5c:ec:04:c0:0e:7f:1b:2d:07:74:60:
c0:fc:f5:ae:65:63:c5:d7:85:76:a9:9a:2e:ee:b6:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:6C:E2:11:98:A1:3A:3A:B6:C5:6E:14:8A:E1:8D:01:EA:31:F7
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:97:5b:7b:f7:7d:00:fc:68:28:85:e3:b3:fc:55:35:1a:
2d:82:9e:02:63:f4:c2:f9:03:cd:c8:6d:8d:97:7e:ad:4f:a9:
35:5a:bc:74:89:e6:6b:8c:62:58:b8:66:cd:cd:12:09:bd:ad:
06:22:c1:f1:a8:6a:a5:cf:f3:47:e1:a1:8b:b5:94:c9:35:0c:
ee:69:e6:ca:25:64:c1:ea:c6:2f:43:19:c6:c3:6b:dc:1e:e3:
23:d4:4c:ac:e1:4c:df:ab:33:9e:89:56:80:8d:66:79:eb:cd:
71:b3:cf:c1:19:d0:a8:ad:9a:86:70:8e:8b:1e:ec:fd:ce:3d:
4d:40:8e:13:88:a3:e1:66:a2:70:15:5c:c3:b1:75:59:50:0d:
af:f7:b9:97:43:06:d9:c5:39:d8:4c:2e:b8:c1:20:78:e9:a5:
90:52:65:ef:dd:ef:96:fc:45:6d:18:b5:21:55:3b:1b:8a:6e:
c0:89:73:a8:23:42:63:2c:ea:a1:11:aa:7f:80:d5:6d:a1:e4:
c3:8e:e4:ea:a0:00:d4:a5:43:06:e0:d1:01:05:9e:20:45:1d:
55:7f:f2:a4:7e:7c:12:3e:6c:88:3d:52:ac:74:40:b0:78:36:
a3:9b:5c:2e:1e:b8:82:54:c6:37:28:10:53:13:9e:5b:d9:67:
b0:39:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:38 2026 by rpki-client