Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: s3FTI1BdYXdxcfgUbiE/ObBB03EEHYB6Tc1ubWymsCc=
Subject key identifier: 36:29:E1:B4:18:A7:54:81:1A:03:E1:D3:5D:A8:29:CB:83:ED:1A:C1
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 019CAA21BC1428DD79A24C242F9955D84CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 13C6
Signing time: Sun 01 Mar 2026 16:01:03 +0000
Manifest this update: Sun 01 Mar 2026 16:01:03 +0000
Manifest next update: Mon 02 Mar 2026 16:01:03 +0000
Files and hashes: 1: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: HcgdOFZCxtr6JPdURBwqsPvdP4J7MpMoKwWxgAl+/DI=)
2: KWE3M70sDcdzbGUDzkIHTbsCxOk.roa (hash: coZwB6MM6YyaakbxM3r6Pr+BZjVFbJhu/1xom1a40N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:bc:14:28:dd:79:a2:4c:24:2f:99:55:d8:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Mar 1 16:01:03 2026 GMT
Not After : Mar 2 16:01:03 2026 GMT
Subject: CN=3629e1b418a754811a03e1d35da829cb83ed1ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:4a:8e:52:fa:48:c1:37:43:c6:e3:16:a0:
43:ea:84:62:3b:ec:c6:d3:8f:a7:31:6a:9f:39:98:
07:cd:d0:eb:da:f3:85:8f:10:f5:35:47:37:4f:d8:
2b:85:1a:47:dc:ab:13:0e:2b:54:8a:34:6e:b9:b4:
39:5c:d3:27:c3:4e:f5:dd:b1:ff:56:92:68:04:74:
73:c1:be:d0:c1:94:f1:34:8c:60:59:a9:de:4e:4a:
e0:d1:e1:9f:8e:8a:c5:c4:1c:dd:f7:0f:69:24:e0:
ee:32:51:d7:67:ca:e5:5a:5d:ba:02:a0:ee:02:f9:
02:42:bd:e6:0b:a2:3f:14:7e:83:84:97:81:0c:75:
99:d8:79:45:c2:5b:54:f6:8b:a3:f7:6f:e2:fa:8b:
79:dc:a8:3c:4a:09:c5:a0:fa:a1:c7:f1:1b:20:ff:
e7:0b:ca:42:ce:4b:7e:95:b0:0d:99:01:d6:3b:7a:
6a:10:fe:5c:dd:20:84:6f:a0:1c:2c:4a:7e:5d:30:
a1:b6:b4:77:f7:3c:f8:45:fd:a9:2b:61:ca:f2:6a:
39:08:87:f6:7c:9a:11:f9:53:e2:f0:6d:d2:df:de:
a8:b0:cd:e5:60:1c:0e:51:46:26:ac:7c:1f:5f:43:
87:d5:a7:81:4c:b0:d5:f7:55:c6:6c:05:39:70:8c:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:29:E1:B4:18:A7:54:81:1A:03:E1:D3:5D:A8:29:CB:83:ED:1A:C1
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2d:76:47:87:a8:8a:8c:13:f2:ed:f2:c8:59:68:4e:cc:43:
8b:44:c1:72:4f:b8:1e:79:11:d0:5d:26:7f:ad:1f:40:1f:62:
3b:46:d3:9a:69:60:11:1c:ae:65:27:1e:12:92:0b:b3:45:61:
8e:a1:75:7b:15:ba:d9:60:94:b9:73:26:91:ae:c6:a3:18:ba:
81:98:74:bb:cc:c3:11:63:b1:ba:72:9a:e3:d6:5e:19:16:5d:
1c:04:5c:82:f4:cc:9f:8a:f5:d6:85:cd:c4:e1:e0:1c:24:e5:
04:3c:e6:36:cf:f4:52:f4:03:33:da:1a:5e:ea:25:ff:38:fe:
51:9a:79:f0:39:32:f1:44:44:38:91:d7:65:3e:7b:4a:57:65:
d3:93:93:e2:22:92:a4:d0:4b:9f:8a:5b:b3:37:4e:b3:b0:9e:
47:5b:ff:27:d0:d7:55:22:ea:98:fc:33:25:16:83:c3:7c:ce:
78:e0:e7:80:9e:98:3f:7c:34:51:79:f7:84:ad:8d:09:6c:62:
76:df:f1:7f:b2:61:1c:70:13:89:b2:7e:04:64:e6:bd:bd:d0:
c9:34:f0:2e:62:d3:9c:1c:43:33:66:25:c9:03:23:5a:85:1c:
13:40:4f:db:1c:59:96:61:ec:9e:f1:5c:57:23:0c:4c:c6:96:
79:e7:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:11 2026 by rpki-client