Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: HiIR0DmyDPtveam48BCqMvFu18dYIKfYdkI6fLekua4=
Subject key identifier: 0E:EE:94:EA:2C:1D:B0:EC:56:CC:C9:6D:22:8E:DE:71:0A:96:CD:B6
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019FAA1A2FDA6821ABA863710120C46EBD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 19:01:10 +0000
Manifest this update: Tue 28 Jul 2026 19:01:10 +0000
Manifest next update: Wed 29 Jul 2026 19:01:10 +0000
Files and hashes: 1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: e08x8flpNQgerTyVkmVTijtCm/EQW1vPlO8oUE6kyAY=)
3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2f:da:68:21:ab:a8:63:71:01:20:c4:6e:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Jul 28 19:01:10 2026 GMT
Not After : Jul 29 19:01:10 2026 GMT
Subject: CN=0eee94ea2c1db0ec56ccc96d228ede710a96cdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:12:55:33:aa:b5:28:ef:a0:5c:39:0c:fc:
4a:64:64:7b:2b:f2:31:5c:32:23:35:da:94:49:c8:
2e:6f:42:00:dc:b8:f7:96:d8:29:be:4b:6e:df:ec:
f8:25:62:2d:97:66:d3:f9:e5:37:c2:c5:cd:ac:45:
7e:27:7d:26:2b:6c:9c:48:0f:eb:36:61:d5:02:a4:
d3:11:89:18:9b:08:aa:c8:a3:cd:02:11:56:9a:74:
0d:a2:0a:1c:d3:26:47:0b:76:76:78:b7:c4:f8:4f:
3e:d9:67:45:c2:fc:4e:d9:f5:6f:94:a9:07:9c:3b:
80:72:91:dc:ce:ee:9d:b1:34:25:52:02:ad:8d:0b:
99:95:37:ec:93:03:81:9b:c1:a7:fe:60:af:7d:5c:
40:52:ca:6b:bf:a8:65:a1:ff:3f:4a:3b:6a:28:47:
48:85:1a:f2:71:88:69:24:c9:5c:95:e9:89:1a:12:
6c:aa:f8:db:16:fe:9b:45:e0:ad:a6:bd:6e:98:28:
d9:14:b7:bd:fe:ed:54:df:54:9a:61:5f:a1:c9:12:
44:f4:df:48:06:47:64:68:26:d0:b5:8b:02:48:4d:
dc:eb:9c:49:35:a5:ef:78:66:11:7d:7a:14:4f:9e:
14:11:96:4a:2a:a0:b7:a4:43:40:bd:74:bf:76:66:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:94:EA:2C:1D:B0:EC:56:CC:C9:6D:22:8E:DE:71:0A:96:CD:B6
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:48:01:91:7c:87:08:d0:11:10:25:3d:a1:69:15:f1:f1:
eb:95:ea:c1:c4:eb:ca:02:f6:93:81:90:a7:80:ab:3b:7f:17:
40:c6:ca:ed:00:25:b2:bc:c1:02:7f:84:e9:ed:02:75:3c:28:
48:0e:21:40:cf:d3:72:0a:f6:35:c0:24:6e:c4:13:43:4e:0e:
61:8b:12:6b:cd:e5:f3:e8:6c:87:65:fe:09:b0:e3:f3:bd:04:
99:d1:ef:b5:34:46:90:3e:78:26:af:63:14:48:75:cb:b4:e2:
01:55:14:fa:ec:cf:88:b0:95:ba:83:88:e3:3e:4e:4f:39:43:
5a:1b:38:9b:08:e0:3a:43:5a:6a:64:30:02:cd:93:86:da:d8:
bc:cc:00:1c:55:79:57:00:53:b8:13:72:cc:24:69:36:9e:dc:
77:fc:d0:c4:8a:20:34:6b:b4:59:46:cd:1b:3b:1b:96:40:95:
c5:1a:c0:99:92:22:92:b5:88:cc:55:14:5e:e7:34:ec:83:56:
5f:ce:f0:90:38:c3:d5:87:91:9e:7a:f7:c3:8b:f1:7f:11:a3:
92:9a:f9:6b:09:f9:c7:49:92:61:a6:32:4c:a6:5a:31:3f:cd:
ae:5f:fd:b9:66:98:a1:ee:55:50:b3:fe:a9:a0:8b:ae:a8:c2:
09:b2:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:17 2026 by rpki-client