Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: rdaG9wJffcRuS44u+utUcK/QjqFWueL4jUHNO6LprEE=
Subject key identifier: 09:D9:0D:0F:83:13:16:E7:A3:26:9B:C8:4E:08:90:65:DC:D6:89:3D
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019D98BD7FD3E9A8DF000A75BBA87BA5304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: 6irQzRadq2pSM1/NbbG8m3eHFL8VSpAEHNXoVv3Il3o=)
2: Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (hash: riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:7f:d3:e9:a8:df:00:0a:75:bb:a8:7b:a5:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=09d90d0f831316e7a3269bc84e089065dcd6893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:1c:f8:c2:29:95:3f:6b:62:f3:7b:c8:9e:
af:19:55:8b:6e:17:f1:ca:19:47:19:9f:a1:56:30:
cd:81:f0:f4:0c:11:2b:00:c3:10:14:db:24:30:67:
9c:29:56:32:a6:f2:76:7b:16:6a:75:b3:d1:87:72:
c6:8e:ee:ee:04:85:6b:21:26:79:76:e7:a2:63:20:
47:e4:2d:96:c3:ed:d9:6c:3e:1b:aa:1a:58:30:0a:
99:d0:15:5c:9e:57:9d:1e:bb:21:48:dc:be:42:05:
2c:fe:16:ae:b7:2e:f5:4f:d3:b1:54:00:2d:9e:23:
7c:e7:da:fe:52:24:36:0c:cc:a1:42:48:f8:51:05:
ad:de:b1:f0:c6:8d:06:6f:a8:54:39:55:1b:27:5d:
e8:8b:e2:c9:ca:64:95:b3:90:ae:51:81:8f:27:96:
cd:ae:a8:3c:02:9c:69:7d:d9:77:c7:76:bd:6f:cc:
0d:5a:01:3f:49:07:68:40:29:d9:47:0b:f8:3f:0b:
36:cc:5b:1f:68:27:1f:dc:d6:2b:e8:48:43:58:73:
20:c0:5f:64:4c:33:37:8f:17:82:85:f5:59:d2:04:
6b:5d:15:ee:7a:55:c2:3b:28:3b:0b:a6:ff:b3:a8:
38:db:49:02:43:f7:c4:77:b2:46:f6:a6:78:c4:14:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:0D:0F:83:13:16:E7:A3:26:9B:C8:4E:08:90:65:DC:D6:89:3D
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:6b:af:d4:c7:01:1d:b5:1e:f8:b4:e6:17:c9:75:01:5b:
f6:02:e9:64:c4:1b:7e:fa:d4:f8:f1:6b:4b:2c:15:2b:20:81:
ac:ec:de:ea:61:8f:c8:cb:a9:6f:52:9b:d9:b6:10:30:77:d5:
b4:01:04:eb:d7:8c:ed:19:be:7b:33:f1:4e:fd:85:06:2d:5a:
9c:54:8c:92:f1:fe:4c:e4:82:f1:4f:74:c6:e8:0b:0f:8d:e7:
89:35:7d:19:a4:93:39:79:1c:78:42:5e:c1:62:0a:44:03:ec:
e1:1a:8a:33:fd:d9:45:d8:ca:f5:23:3e:8f:34:47:44:77:23:
32:89:20:a5:0a:5e:ae:d5:c0:5b:a0:fa:26:86:b9:e3:e3:de:
6f:53:2d:b4:35:a1:70:fc:73:00:24:f9:94:2a:b3:9e:ef:50:
30:98:cb:3b:ee:9f:9d:4c:ac:11:5f:f0:8d:8d:01:41:cb:8c:
24:ce:a2:9c:02:ba:7a:3b:b4:d5:1a:e7:0a:79:a1:cf:b7:01:
b2:64:08:6f:52:af:f3:fa:21:8c:e9:fc:fd:69:f2:e8:9b:97:
7c:7d:ec:18:f0:1e:d4:5f:01:03:06:b0:14:8b:c5:9d:b6:40:
1a:f3:79:27:9e:05:4a:d5:bf:ea:83:08:56:88:35:61:b4:8c:
23:36:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:36 2026 by rpki-client