Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: yvSqFdfrSgVkKqJAhY0VFLNFdy3jRAkMPigQg7yS2II=
Subject key identifier: B5:87:76:19:43:ED:5B:DF:C6:C8:BB:A9:FA:BE:65:7D:DC:6B:50:9E
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019D2704C94F4A0C375FBEE916241EB55871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: 7/yuI7mbH7zJvJrQNBSfNVxXqp1Lm8RbW5RkqIhbkk4=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c9:4f:4a:0c:37:5f:be:e9:16:24:1e:b5:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=b587761943ed5bdfc6c8bba9fabe657ddc6b509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:16:75:7b:b2:96:64:00:91:46:c1:3d:ba:
ca:ef:3c:71:d1:b3:1b:91:c8:4d:01:43:0c:90:6d:
77:f6:da:7a:7e:c6:35:5d:63:52:e3:2d:51:7b:57:
5e:25:a6:68:52:d0:5f:30:c4:65:a1:20:2b:dc:6e:
a5:bd:d8:24:f8:21:7a:c6:83:1a:f0:6e:e1:21:8e:
7c:4e:e2:04:57:75:57:38:6d:2c:05:40:bd:80:05:
0a:8e:0c:a3:ed:75:a3:8e:ed:7b:62:0d:9a:6c:1b:
85:65:f0:f2:26:d9:cf:61:39:29:53:36:b2:a8:87:
fe:0e:0a:30:2d:30:cf:32:37:b2:6c:71:c3:25:ec:
96:45:89:04:45:d1:75:8c:67:34:aa:b5:af:5f:6d:
e7:4a:75:44:c3:fc:c9:77:06:7a:c6:c9:bd:eb:39:
5f:05:94:de:83:84:14:65:7e:c9:c9:3d:7a:de:9d:
1d:b0:98:2e:63:e8:d4:0c:13:fa:f7:5e:4c:71:fa:
2d:96:a5:2c:75:3a:4f:fc:60:54:eb:4b:da:fe:56:
2d:f8:3c:e5:06:c5:d1:cf:86:ec:02:3c:bb:02:bb:
11:81:c8:95:23:58:54:d3:d1:6b:83:c0:dd:77:3b:
19:6c:8c:03:75:08:65:c4:d8:da:fd:70:75:62:56:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:76:19:43:ED:5B:DF:C6:C8:BB:A9:FA:BE:65:7D:DC:6B:50:9E
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:a4:4a:c9:cf:40:ea:30:38:a8:6e:1d:72:30:6c:ae:a1:
34:df:8d:24:65:5d:02:8d:2b:3c:08:f5:82:49:0e:50:4c:2b:
15:08:82:49:25:f7:fc:dd:6f:93:38:2c:6e:1f:ae:39:e1:a6:
90:9e:bb:ff:1f:63:a4:f9:ac:ec:e7:cc:5b:34:6d:74:9d:44:
92:01:8d:5e:c6:f4:e6:08:17:aa:3a:0a:25:0d:0a:7f:2c:eb:
f5:60:99:bd:f5:bf:10:6d:c3:77:e3:bf:41:b5:40:3c:13:89:
39:08:5d:44:e9:12:0f:46:8a:7d:9b:de:54:c7:07:a7:9d:e2:
eb:0c:77:7d:05:37:7c:3f:4d:d0:64:9f:ad:23:29:8f:4e:6b:
2f:b2:a0:b7:15:32:9f:0d:ff:ae:b9:ef:35:09:55:68:02:57:
d2:d5:38:18:90:51:b1:bd:23:29:ff:64:98:14:14:58:56:ba:
31:8e:6a:3a:93:ed:c6:61:08:b1:63:5e:5d:91:2d:08:69:88:
2b:92:13:c1:06:23:4d:3e:b4:c8:55:0c:67:dd:88:df:c8:ee:
6e:c3:33:e2:cd:02:4e:34:a8:02:60:63:f7:8a:a1:57:b3:0e:
1e:f4:d3:54:e9:9d:8a:1c:2e:1c:09:ac:01:46:81:a6:5c:22:
b0:0f:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:11 2026 by rpki-client