Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: p2zuRk7QyeAWEbX5RCAZCiBcK6baurllSEu5n2ikD9M=
Subject key identifier: 09:4F:32:22:0F:B7:1E:39:8C:7A:0A:36:16:C1:32:06:AC:F7:1F:EF
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019CA97CD84839FB1BA7C1C4FCF1E55829D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 13:00:57 +0000
Manifest this update: Sun 01 Mar 2026 13:00:57 +0000
Manifest next update: Mon 02 Mar 2026 13:00:57 +0000
Files and hashes: 1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: /msgoVGQc5vNGv3EQU4y7FjQry72uUMP/45CZVkDR/Y=)
3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:d8:48:39:fb:1b:a7:c1:c4:fc:f1:e5:58:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Mar 1 13:00:57 2026 GMT
Not After : Mar 2 13:00:57 2026 GMT
Subject: CN=094f32220fb71e398c7a0a3616c13206acf71fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:41:01:dc:12:65:4d:f7:04:48:b2:87:de:
76:c8:51:04:4a:4e:39:6e:b1:6c:e0:19:26:77:d5:
a0:de:7a:e3:16:b3:02:d5:75:26:22:7a:4b:b7:04:
23:77:45:37:51:02:b5:d1:ce:07:14:39:87:40:79:
e3:70:fd:01:f9:88:2b:f0:40:b3:1f:90:95:84:a9:
1f:9b:1d:ba:a9:93:e5:75:03:de:2a:34:0b:5f:92:
5d:5f:5d:35:55:b9:a1:0b:97:8a:9c:e9:9a:57:79:
19:9e:e2:17:8c:12:a2:a0:73:22:ea:b0:80:ae:3a:
fa:22:a3:eb:8d:cd:28:7b:3d:68:46:37:2d:d1:c8:
97:d0:dc:33:ac:01:87:3b:12:d8:19:03:c7:4e:ca:
d3:41:9b:3b:2b:72:2e:50:05:3d:2c:98:20:c7:7e:
14:ae:c1:7a:1e:98:a0:87:01:dd:6e:30:14:0b:28:
b6:a2:15:5f:04:3f:23:1d:1d:42:8d:3d:74:c6:93:
59:0d:b2:f1:69:03:06:bb:66:f1:91:6e:fc:cb:09:
ed:3b:58:02:90:09:3c:89:66:9b:a3:ca:02:8e:81:
66:e4:88:48:a4:cf:b6:5f:c1:54:4a:95:48:7c:08:
95:e9:9d:0f:89:24:07:71:7b:f8:3a:bc:2b:22:07:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:32:22:0F:B7:1E:39:8C:7A:0A:36:16:C1:32:06:AC:F7:1F:EF
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:35:b3:02:d4:44:22:01:1d:bc:af:a0:81:b9:c7:9a:95:b3:
a4:31:67:14:d9:1e:0d:8c:92:25:f7:9d:89:a4:52:be:92:9d:
15:e5:31:f2:55:97:93:06:65:3d:f4:8b:45:76:be:b1:70:a4:
fc:e5:ec:04:69:6a:b1:55:30:01:c2:32:da:a2:a8:3b:3c:62:
e7:78:0e:0a:2d:55:ab:6c:35:25:c9:06:10:c4:03:5c:0e:43:
73:a6:c6:1d:50:18:88:ca:03:ac:25:24:93:3d:a8:4b:65:ea:
ae:09:ff:b7:7d:70:57:af:d6:10:d7:f9:c4:00:bd:9e:32:ca:
58:33:d2:29:dd:fd:85:17:f6:69:8f:29:9c:37:fc:6d:01:31:
0a:ad:f8:fc:30:e4:50:f1:05:96:fd:81:94:81:c3:c7:59:d7:
c9:49:33:25:bf:0f:32:0a:dd:03:16:64:e4:f9:e1:ca:78:01:
00:ca:e0:8a:00:60:eb:ab:89:42:1a:e3:5a:af:d2:48:78:b6:
81:ca:e3:a0:bf:55:a8:9c:0a:16:6d:3b:d4:8b:de:ae:b3:22:
d4:d9:81:33:63:c9:e5:ff:f2:33:f6:58:dc:08:51:55:e6:43:
0e:a4:4b:12:e3:1f:a4:a4:b4:73:88:57:21:b3:ed:e1:6d:ea:
b0:e0:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client