Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: 71A2Al9Lf90V3XB5npe+tYIfX5U93ZX4NdjVMof8ClY=
Subject key identifier: 87:3F:2E:52:0A:0A:D7:E4:6B:03:95:7B:30:58:37:D2:D1:3B:7E:2D
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019CAF10C78879ACE8C2DF9BEFF3BD30368C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 15:00:38 +0000
Manifest this update: Mon 02 Mar 2026 15:00:38 +0000
Manifest next update: Tue 03 Mar 2026 15:00:38 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: Zlypc7wnsid91Li5hTdHtZxDZGGVt3HjvPE28K/MNAw=)
2: Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (hash: riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:c7:88:79:ac:e8:c2:df:9b:ef:f3:bd:30:36:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Mar 2 15:00:38 2026 GMT
Not After : Mar 3 15:00:38 2026 GMT
Subject: CN=873f2e520a0ad7e46b03957b305837d2d13b7e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:e8:66:f1:e1:74:a7:16:e0:0b:42:d7:c2:
92:8b:3a:38:3a:30:c1:49:e5:3d:52:f1:1f:38:25:
c5:8c:ce:86:89:52:ea:35:0c:ea:74:db:b2:9d:e8:
70:55:73:08:eb:9d:33:08:8a:7b:49:bc:c9:13:86:
72:df:86:a2:16:4e:f2:66:db:de:86:66:e4:17:b3:
6e:ec:18:10:65:76:3f:01:10:8d:b0:8a:0c:b5:70:
49:a2:02:90:6f:50:cc:f3:b0:a1:56:b9:b6:52:20:
b0:c3:29:b5:69:6e:b5:3d:0d:90:9b:5b:0c:3a:38:
69:0f:af:3b:7b:0b:49:49:0e:8a:e8:91:2d:b0:af:
80:3f:28:ef:49:87:db:b1:1e:b7:67:43:75:7f:5b:
10:51:e4:66:77:54:76:86:a7:7b:e2:b1:1b:d9:63:
ed:f2:20:e4:f8:fa:3f:b4:c4:d5:c0:44:fd:20:ac:
b3:2e:1d:d0:eb:e7:d0:1f:8c:17:29:67:bd:ad:56:
da:f1:e7:34:eb:99:b1:3f:b6:3e:76:89:ff:43:28:
9e:af:c6:8f:81:ba:39:b3:e7:93:04:4e:a8:59:ad:
c8:ba:71:ba:7a:6d:20:d8:33:92:01:2b:1c:e5:d4:
0e:0f:02:3b:9d:b8:29:2b:f6:1d:90:4c:0f:40:dc:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:2E:52:0A:0A:D7:E4:6B:03:95:7B:30:58:37:D2:D1:3B:7E:2D
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7e:fb:fa:25:f0:a3:e4:1e:bd:23:15:0f:52:fb:8b:be:52:
33:ca:1b:90:82:b8:73:89:de:d0:43:16:2c:0e:6d:e0:6e:92:
66:5e:b6:b5:c8:29:34:62:27:8b:b8:37:7e:55:9d:32:10:b8:
09:c9:0f:62:15:46:5d:d0:35:3c:d6:4f:a9:1d:d8:f1:0b:da:
56:cb:69:27:fc:05:69:7c:d4:5c:ca:a5:c5:13:ee:98:44:24:
1c:c1:45:b9:cd:29:00:49:a7:71:1a:8b:74:f3:de:7d:54:89:
99:ce:0c:1e:0d:a2:9f:4c:00:49:81:b6:bd:6c:23:d3:f9:5c:
56:0b:60:c7:be:7e:52:23:98:f9:45:07:35:c7:a7:0f:14:dd:
96:b3:df:86:47:7d:e8:7c:36:4b:67:38:82:4c:00:38:74:87:
35:ac:80:71:85:08:1c:b3:2e:bc:24:52:23:f3:5b:3a:66:3c:
7d:e5:20:aa:2c:76:01:e5:9d:a8:8c:14:be:aa:13:f1:b1:e1:
66:31:38:b1:70:17:41:45:f7:fb:c9:65:26:06:17:07:4f:be:
17:1f:39:10:af:fc:23:96:3b:56:1e:9a:b4:b2:fa:a4:52:82:
f9:c9:c6:3f:ba:68:49:27:d3:21:79:0f:0c:4d:fe:5c:d5:84:
4c:44:b6:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEMeIeazowt+b7/O9MDaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjYwMzAyMTUwMDM4WhcNMjYwMzAzMTUwMDM4WjAzMTEwLwYDVQQD
Eyg4NzNmMmU1MjBhMGFkN2U0NmIwMzk1N2IzMDU4MzdkMmQxM2I3ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYXoZvHhdKcW4AtC18KSizo4OjDB
SeU9UvEfOCXFjM6GiVLqNQzqdNuynehwVXMI650zCIp7SbzJE4Zy34aiFk7yZtve
hmbkF7Nu7BgQZXY/ARCNsIoMtXBJogKQb1DM87ChVrm2UiCwwym1aW61PQ2Qm1sM
OjhpD687ewtJSQ6K6JEtsK+APyjvSYfbsR63Z0N1f1sQUeRmd1R2hqd74rEb2WPt
8iDk+Po/tMTVwET9IKyzLh3Q6+fQH4wXKWe9rVba8ec065mxP7Y+don/Qyier8aP
gbo5s+eTBE6oWa3IunG6em0g2DOSASsc5dQODwI7nbgpK/YdkEwPQNxAgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc/LlIKCtfkawOVezBYN9LRO34tMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqn77+iXw
o+QevSMVD1L7i75SM8obkIK4c4ne0EMWLA5t4G6SZl62tcgpNGIni7g3flWdMhC4
CckPYhVGXdA1PNZPqR3Y8QvaVstpJ/wFaXzUXMqlxRPumEQkHMFFuc0pAEmncRqL
dPPefVSJmc4MHg2in0wASYG2vWwj0/lcVgtgx75+UiOY+UUHNcenDxTdlrPfhkd9
6Hw2S2c4gkwAOHSHNayAcYUIHLMuvCRSI/NbOmY8feUgqix2AeWdqIwUvqoT8bHh
ZjE4sXAXQUX3+8llJgYXB0++Fx85EK/8I5Y7Vh6atLL6pFKC+cnGP7poSSfTIXkP
DE3+XNWETES2oA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:55 2026 by rpki-client