
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: I54rLzjSTg8/0U/VU7zZkqbwmTD6cccxE54FxPF7ZVs=
Subject key identifier: B3:E8:AA:18:4D:A2:F8:0A:8D:26:E5:B2:A2:20:D3:63:C2:7B:07:CB
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 01A0D011C2EA4A7C4268BFADB8A0969347FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 1259
Signing time: Wed 23 Sep 2026 21:00:19 +0000
Manifest this update: Wed 23 Sep 2026 21:00:19 +0000
Manifest next update: Thu 24 Sep 2026 21:00:19 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: xjuDBSMUxrFo9hJmQqSRO0M+7xOLRc3OLNkmy2If/G0=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c2:ea:4a:7c:42:68:bf:ad:b8:a0:96:93:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Sep 23 21:00:19 2026 GMT
Not After : Sep 24 21:00:19 2026 GMT
Subject: CN=b3e8aa184da2f80a8d26e5b2a220d363c27b07cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:04:91:d4:f9:1e:b1:98:8a:5c:a3:78:e3:68:
7a:95:6e:16:04:58:77:5a:58:62:88:29:b0:f7:ab:
9b:b2:42:ce:8c:a3:9d:a5:f0:fb:7b:ea:bf:4c:98:
17:c1:3b:74:18:ea:68:0b:e9:39:99:0a:6d:a5:0f:
37:1c:95:24:92:64:9d:2c:1b:c8:4b:ec:12:1a:53:
bd:19:ae:16:67:4a:91:bf:68:ce:52:70:63:16:7b:
e4:f4:45:16:a4:3f:3e:e1:da:ba:72:3f:4f:17:f0:
88:6d:7b:c2:d7:61:0b:cf:ce:84:38:ef:38:52:cc:
29:5f:a0:35:8e:73:a0:cf:f9:06:f5:6f:03:4f:b7:
b9:ca:b2:d2:3f:e6:29:aa:93:80:0b:5c:7a:64:49:
a4:37:07:74:17:46:66:88:36:6b:3d:14:62:dd:bc:
93:47:29:38:a0:d7:f4:4c:48:40:a3:1c:36:80:2a:
72:d1:a9:3d:cd:cb:a4:be:aa:fd:76:15:37:16:e0:
44:51:2b:b1:50:f8:4d:5d:3a:27:ba:e0:74:fc:20:
d5:ba:11:dd:dc:c3:f8:3d:73:a6:94:e6:0a:29:83:
25:71:c5:62:3b:56:74:f4:99:9d:92:98:7f:0e:53:
33:96:3d:2c:17:2c:64:70:d0:4a:f1:ab:cd:22:70:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E8:AA:18:4D:A2:F8:0A:8D:26:E5:B2:A2:20:D3:63:C2:7B:07:CB
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2e:94:08:8c:39:a4:36:97:85:28:4b:ea:4a:39:30:b1:2e:
cf:64:92:86:66:db:cd:0f:f5:0e:d0:cb:c8:48:d2:1d:e3:21:
cc:04:4b:44:ef:2c:11:02:9a:59:2a:23:72:a7:5a:8d:37:f7:
0d:9d:60:4a:63:2b:33:9c:c5:cd:0e:b8:c3:98:3e:2a:a6:e3:
fe:e5:7f:95:73:7c:9d:c7:24:19:f6:e0:97:e0:f1:f7:37:2b:
a1:97:3f:ea:10:08:76:2b:30:a1:c7:7a:f5:cd:89:5a:9a:0e:
31:5a:0d:9e:0f:ed:fc:9c:f4:c7:ca:f8:93:3e:b7:32:79:7d:
0e:d4:bd:0a:16:8d:ca:5f:4f:04:3e:7c:9f:f4:ae:42:29:80:
7f:96:fe:04:a7:bc:8b:ec:9b:10:bc:8f:3c:59:2d:64:56:f2:
aa:92:d0:f0:00:e3:22:e2:72:af:18:cd:3f:08:5f:e4:2b:01:
75:a7:9d:25:7e:ef:11:17:4e:95:01:d4:8e:55:20:2a:02:48:
e7:13:20:05:8f:ac:3a:9b:66:b0:92:df:5a:44:c5:20:f7:f4:
92:c9:a0:07:d5:79:1e:03:16:8d:f7:fd:43:85:94:69:9d:45:
71:85:03:2e:b6:c2:c0:18:72:83:54:10:1d:38:46:59:1b:41:
f8:e2:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:59:36 2026 by rpki-client