Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: YS3EGXt7MBd5HVnK/hEWUPo7araBb57RYDRUhkL69GI=
Subject key identifier: 68:CA:EC:43:37:41:23:AF:29:20:6A:AC:FF:B4:45:5C:70:3C:C6:BC
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019F8F7E09EC5E87BBB7D939F5920E17ADE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 11B3
Signing time: Thu 23 Jul 2026 15:00:29 +0000
Manifest this update: Thu 23 Jul 2026 15:00:29 +0000
Manifest next update: Fri 24 Jul 2026 15:00:29 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: YxjKXCVQG5YSOQhPPI9dKaHHx324AQz2tgXKwXX31wM=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:09:ec:5e:87:bb:b7:d9:39:f5:92:0e:17:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Jul 23 15:00:29 2026 GMT
Not After : Jul 24 15:00:29 2026 GMT
Subject: CN=68caec43374123af29206aacffb4455c703cc6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:e3:8f:7d:77:93:fc:6e:6c:b1:2b:da:fc:
77:7d:ea:65:d0:e2:41:13:c2:b8:35:cf:57:2a:50:
d3:54:9c:6b:fd:73:cb:31:44:c1:4b:8c:1e:c3:36:
3a:f8:74:3c:f4:f2:ce:b4:df:9b:d4:6a:1b:d5:44:
6f:74:c1:7f:05:0b:a1:14:17:51:07:97:f8:6e:cc:
13:1e:4b:38:91:05:61:b4:36:84:90:a6:4b:3d:68:
df:65:15:7f:c1:b9:7c:d5:9c:a0:6d:37:34:2e:21:
fa:82:41:19:9e:c9:f2:8f:71:ef:6e:37:c2:00:2e:
73:7a:08:1c:6d:b2:31:5a:df:eb:13:7d:4d:ff:71:
6f:bd:c9:de:9c:01:a2:8e:0e:61:83:7f:3c:83:bb:
e0:31:03:c1:9e:e1:04:61:0d:24:73:b6:60:ba:f6:
5c:fa:99:33:c6:ce:b0:d1:34:c3:c7:e8:ec:db:e7:
e9:35:6d:40:be:7a:e4:df:4c:e8:ec:c5:3e:80:80:
28:ed:1e:39:b2:88:db:47:40:95:3f:17:e8:0d:ee:
89:aa:d8:ba:71:63:4e:7e:04:17:56:48:89:f9:d2:
c7:29:93:f4:a4:e0:80:fc:7e:c8:60:85:b1:a5:a4:
e4:2e:10:20:cd:e1:aa:6e:44:f8:8e:a6:57:27:78:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:EC:43:37:41:23:AF:29:20:6A:AC:FF:B4:45:5C:70:3C:C6:BC
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b9:5b:a0:77:7f:92:c1:96:d5:af:12:f9:f0:4a:ae:d8:7b:
ec:50:b2:85:97:c0:a2:42:77:b4:4f:23:eb:a1:5a:e7:2b:a9:
4d:dd:d3:a2:cc:c0:23:34:50:78:c2:fe:81:d4:dc:36:71:9c:
ab:17:58:0c:f2:93:eb:95:e2:f3:46:9e:49:2c:31:75:fe:a6:
b7:0e:e7:b1:1a:6c:46:45:f7:5c:d8:25:ab:08:76:ee:48:e5:
f0:c2:19:13:8b:45:74:d0:04:a8:d3:a0:3b:9e:84:99:d9:fe:
53:84:09:53:1b:02:01:d4:96:7a:94:aa:b1:8e:3e:24:16:ab:
63:f4:70:df:ec:7c:65:a7:96:38:a3:2d:88:1d:31:36:3f:d9:
9c:47:1b:03:66:2c:52:83:77:ec:33:98:a5:98:f4:69:15:73:
58:7b:33:26:6f:1e:d8:a4:b4:ce:f9:38:58:01:aa:76:24:10:
9c:96:f1:3a:c4:62:b9:ba:70:c6:87:69:c5:52:77:38:05:f9:
f6:89:d0:3a:c9:3c:1a:99:a2:7a:34:28:54:ef:7a:94:9d:22:
9a:b4:24:52:c4:5a:40:6b:4b:81:1b:a9:c3:4f:22:b3:4e:d9:
84:eb:0c:bd:79:0d:a5:80:27:75:44:01:5c:d5:76:fb:ed:ce:
48:d9:9a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfgnsXoe7t9k59ZIOF63lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjYwNzIzMTUwMDI5WhcNMjYwNzI0MTUwMDI5WjAzMTEwLwYDVQQD
Eyg2OGNhZWM0MzM3NDEyM2FmMjkyMDZhYWNmZmI0NDU1YzcwM2NjNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lXjj313k/xubLEr2vx3fepl0OJB
E8K4Nc9XKlDTVJxr/XPLMUTBS4wewzY6+HQ89PLOtN+b1Gob1URvdMF/BQuhFBdR
B5f4bswTHks4kQVhtDaEkKZLPWjfZRV/wbl81ZygbTc0LiH6gkEZnsnyj3HvbjfC
AC5zeggcbbIxWt/rE31N/3FvvcnenAGijg5hg388g7vgMQPBnuEEYQ0kc7ZguvZc
+pkzxs6w0TTDx+js2+fpNW1Avnrk30zo7MU+gIAo7R45sojbR0CVPxfoDe6Jqti6
cWNOfgQXVkiJ+dLHKZP0pOCA/H7IYIWxpaTkLhAgzeGqbkT4jqZXJ3jmrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjK7EM3QSOvKSBqrP+0RVxwPMa8MB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLlboHd/
ksGW1a8S+fBKrth77FCyhZfAokJ3tE8j66Fa5yupTd3ToszAIzRQeML+gdTcNnGc
qxdYDPKT65Xi80aeSSwxdf6mtw7nsRpsRkX3XNglqwh27kjl8MIZE4tFdNAEqNOg
O56Emdn+U4QJUxsCAdSWepSqsY4+JBarY/Rw3+x8ZaeWOKMtiB0xNj/ZnEcbA2Ys
UoN37DOYpZj0aRVzWHszJm8e2KS0zvk4WAGqdiQQnJbxOsRiubpwxodpxVJ3OAX5
9onQOsk8GpmiejQoVO96lJ0imrQkUsRaQGtLgRupw08is07ZhOsMvXkNpYAndUQB
XNV2++3OSNmaTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:47 2026 by rpki-client