Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: jt91aEVx9YrY0FfL4W2FDOHwul9KMmee77vrLofpU8Y=
Subject key identifier: C9:9F:CE:D0:72:C4:CE:F1:8F:65:7B:9E:8B:CB:6F:43:00:74:2F:8A
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 019DA30A757F4ACCF6914BACED784FFA4065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 00:01:04 +0000
Manifest this update: Sun 19 Apr 2026 00:01:04 +0000
Manifest next update: Mon 20 Apr 2026 00:01:04 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: NeuFFpQAHKT/v0ohjhKiwrQUE9Fl7mbJ9kkVw4u/epk=)
2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:75:7f:4a:cc:f6:91:4b:ac:ed:78:4f:fa:40:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Apr 19 00:01:04 2026 GMT
Not After : Apr 20 00:01:04 2026 GMT
Subject: CN=c99fced072c4cef18f657b9e8bcb6f4300742f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:1d:7c:d4:89:99:56:13:bb:77:ac:3d:d5:
d6:e0:10:94:13:3c:f9:e4:41:81:54:65:73:66:3e:
93:f8:e2:41:7b:05:9f:8e:d7:57:65:3e:f3:38:f4:
85:90:49:61:88:3a:bf:a1:c2:c7:c1:a0:24:05:65:
c4:b9:f0:af:0e:15:5f:07:7d:90:53:a8:4b:44:a5:
eb:cc:b0:72:64:40:a2:7d:51:3b:f7:dc:3e:de:ae:
2a:d6:7a:de:5d:ea:b8:9a:4e:60:16:a0:7e:77:b7:
ae:ca:1f:07:d5:4a:7b:f1:08:0b:24:6b:4d:48:7e:
70:f4:50:58:55:04:b5:73:32:da:ac:7d:c1:7f:d2:
80:86:b3:a0:9e:84:00:a9:cb:f4:3b:7d:1b:fa:40:
a1:d2:97:eb:97:ee:52:18:3f:d7:36:09:35:a2:9f:
fb:2a:aa:17:61:0d:85:8a:b9:fb:05:db:f6:aa:11:
47:0e:13:29:70:39:7d:44:1c:37:fd:88:0d:c4:94:
dd:a4:5d:b7:f9:d3:4e:89:de:3f:32:ca:8a:aa:a2:
37:51:aa:57:45:c8:2c:cd:7f:2c:44:a5:b2:de:ad:
b6:cd:df:be:d8:9f:29:1f:83:2c:1a:38:fd:9a:4b:
85:70:93:11:7f:ae:db:53:3b:f3:87:21:07:f8:10:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:CE:D0:72:C4:CE:F1:8F:65:7B:9E:8B:CB:6F:43:00:74:2F:8A
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:c8:f7:c5:8e:b7:d4:6f:47:3c:d0:16:da:2c:51:01:82:
b5:2d:6b:7d:9b:27:b5:34:ab:ca:61:b6:de:5b:73:f1:05:a7:
ef:fe:1b:e1:72:47:c5:b6:ef:16:04:26:85:83:bf:67:a2:7e:
4f:28:e0:1b:05:45:62:db:73:c7:b8:56:3f:b3:07:65:2f:89:
79:4c:78:85:58:ed:92:ac:f1:66:5e:fe:60:0f:10:ec:48:95:
4d:86:bb:ed:df:d6:75:7e:e9:2f:bb:7c:2d:5e:b3:24:67:49:
bf:11:3b:dd:dc:80:6e:c1:c3:b4:d2:5e:b4:03:3d:a2:a8:22:
d9:5a:23:d8:41:47:e5:e2:64:78:aa:e6:dc:77:3f:d8:21:94:
25:95:cd:a7:9d:12:d3:8d:fd:2e:80:13:ee:05:2b:69:4a:d4:
41:62:6d:c6:8a:1f:55:74:6f:80:78:6c:59:06:4a:da:d5:cf:
72:c6:1a:a9:81:5f:76:2a:77:a9:ce:cd:d0:58:ff:35:15:5a:
86:9c:d6:99:0e:c6:3d:52:aa:34:02:59:f5:59:86:d1:f5:89:
af:b5:1b:44:26:1d:a6:0f:71:98:db:76:88:98:bc:8b:75:d5:
5b:03:f6:57:c4:5e:4d:92:64:1a:4a:43:ad:74:f9:36:c8:10:
ec:f9:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:43 2026 by rpki-client