Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: ETT1fz86vpp9u60WnVlFnjjeq5825hTpRIW0NHoMzis=
Subject key identifier: 5D:1B:BA:83:36:DA:B7:F6:4D:8A:44:B1:FF:4B:CB:51:58:E7:E1:BA
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 019CABD9370077054435E4C31BF74E721C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: Srf5+g7YYAUT/UZmqRNvxlXvQvIUD90VapNqSsxQVzQ=)
2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:37:00:77:05:44:35:e4:c3:1b:f7:4e:72:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=5d1bba8336dab7f64d8a44b1ff4bcb5158e7e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d3:23:24:37:98:05:5b:a2:06:44:6a:14:2d:
1c:51:64:0a:d1:64:d9:6d:1b:ba:68:ca:3b:0c:1b:
b2:b4:d2:6c:ee:18:df:87:3a:3d:c0:49:1f:7b:f1:
45:8d:a3:2d:ed:cf:05:90:59:14:45:70:2e:55:d6:
f2:2a:c8:73:55:d2:af:da:72:42:b6:db:34:47:3e:
db:23:03:c0:b1:82:54:95:ca:b1:44:d0:6d:4d:f0:
ca:2f:07:2c:5e:6f:75:78:b8:c7:af:b5:4e:f8:14:
cd:2f:53:85:98:b8:31:36:ec:7f:7b:e2:0a:23:83:
78:2a:e1:2e:58:29:3d:74:30:86:a3:3a:b8:7c:17:
f0:38:0f:ba:4d:15:b5:cb:9b:9c:59:6f:14:73:65:
69:f8:65:8b:96:02:0a:39:8c:25:54:a7:ba:2c:09:
93:41:b3:d1:39:c3:26:ef:df:12:9b:bf:eb:c1:1d:
15:27:c7:15:5c:28:56:0a:4b:c5:07:2d:d9:33:a5:
ec:c4:e4:3f:10:41:62:ab:8e:67:91:2e:66:b0:fb:
30:2e:5b:83:a9:63:ef:3c:70:3e:37:2e:75:bd:de:
5a:84:23:2d:7d:eb:96:19:a9:1d:54:8b:6d:e9:30:
d8:ba:1e:cf:7b:db:3a:22:16:43:23:25:78:f1:4e:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:BA:83:36:DA:B7:F6:4D:8A:44:B1:FF:4B:CB:51:58:E7:E1:BA
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:3c:aa:95:cf:c8:0d:54:e0:9d:07:c5:56:4d:f6:0b:52:
1f:8f:85:8c:46:f8:3a:91:92:fd:72:67:d8:f8:e5:6e:4c:91:
31:5f:e9:42:ae:ea:49:3f:60:76:cc:8f:47:70:86:8d:3b:8b:
6f:55:fc:f8:3a:32:3d:42:85:43:93:b4:6f:39:49:54:fb:74:
24:84:9a:c0:da:fc:da:9e:ef:ff:f5:da:e3:3a:e5:be:fc:3b:
22:6b:d7:73:3f:a3:aa:ae:25:46:22:52:4e:65:a4:50:85:67:
49:a0:3b:ec:aa:73:31:4b:03:b2:d2:a8:9f:0a:fe:35:13:ac:
3d:58:7a:f2:9a:c2:d9:6b:04:4d:3c:0a:06:58:9c:30:67:b6:
94:ae:2e:46:c8:86:a0:a8:d9:13:7a:24:0f:1f:70:77:83:64:
55:81:fb:0b:be:c9:07:9e:21:fa:a9:7f:7e:a1:a3:6e:93:42:
af:83:23:00:ef:e3:32:10:ea:2a:3a:65:ac:f7:0a:27:37:75:
b4:65:bb:f7:00:e9:e0:50:c6:00:05:60:4e:c2:46:9f:45:a1:
0d:ea:25:66:9a:48:c8:92:1f:fc:55:6c:0d:93:14:43:89:75:
fd:ec:35:0f:98:36:23:e3:77:92:dc:01:6a:b0:5a:31:eb:42:
d8:8a:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:18 2026 by rpki-client