Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: XCl4URvYIQfPmIS/LhXGq+LTn5nqShtE+IUTol25pgc=
Subject key identifier: A1:C5:DA:20:C3:E1:02:BF:90:3D:A2:89:07:B3:54:3F:97:02:C2:61
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019D29619B94D8C62CAC62FBCAA39354ED67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 1075
Signing time: Thu 26 Mar 2026 09:02:35 +0000
Manifest this update: Thu 26 Mar 2026 09:02:35 +0000
Manifest next update: Fri 27 Mar 2026 09:02:35 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: i0KPPE3man8AsV8S/9aHoE5OWdskshKEvLTDY7kUHgs=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9b:94:d8:c6:2c:ac:62:fb:ca:a3:93:54:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Mar 26 09:02:35 2026 GMT
Not After : Mar 27 09:02:35 2026 GMT
Subject: CN=a1c5da20c3e102bf903da28907b3543f9702c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9a:1b:6f:93:36:98:12:02:fe:b8:0e:de:d9:
56:6a:24:4a:7b:97:2b:4d:56:3e:ac:ed:1c:99:7b:
7e:5f:d7:ba:69:e5:6e:ca:c8:0c:e7:87:9a:b9:28:
ff:78:7e:78:84:d4:72:44:9c:89:35:30:2a:ba:28:
fa:c0:c2:2d:ff:95:87:a8:8a:b4:02:38:d7:6b:2a:
4d:de:c0:b5:c1:5d:92:bb:04:4c:9f:4f:e9:b5:64:
a7:dc:52:c1:f8:1d:a0:f1:7f:7d:3a:17:4d:51:48:
26:3c:c6:ee:e0:88:c9:57:48:33:cf:04:be:1e:54:
83:92:61:9b:71:e4:a4:5e:f6:8b:90:2d:8d:a4:83:
48:d1:e9:a9:d2:94:bf:41:5d:4b:66:cf:85:e9:a5:
63:a7:2c:03:97:7a:d2:91:77:8f:c0:50:68:81:74:
81:d3:a5:1d:03:d0:a4:16:cd:dc:12:9e:0a:fd:c5:
94:ac:5d:cb:4e:93:73:3b:85:a3:84:c5:9e:44:98:
05:fa:8d:d3:81:7d:4d:83:f2:ab:9e:06:e9:3a:f4:
27:ae:4a:c8:1c:c2:60:8c:c0:05:20:57:55:25:18:
e4:f2:eb:cb:dd:cf:62:3a:7a:54:41:73:c0:9f:4a:
d3:5e:a6:c6:b6:3e:96:76:69:76:20:7f:9b:d5:79:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:DA:20:C3:E1:02:BF:90:3D:A2:89:07:B3:54:3F:97:02:C2:61
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:d2:f8:01:01:82:6a:c4:a4:39:bf:f1:b0:cc:1a:d7:84:
55:ae:34:9a:70:52:3e:50:fd:d3:fd:77:48:5b:50:0f:1d:37:
c6:8a:04:3c:f2:b1:91:6b:64:a4:56:c9:c7:49:76:c9:03:ca:
3b:7f:eb:f7:f8:85:3f:1f:90:51:f0:25:38:cc:c3:cc:1b:9a:
17:b3:27:19:cc:86:5b:39:8c:3f:4c:2e:ae:da:56:a6:f3:0a:
06:05:2f:70:54:52:82:3b:b3:87:81:6b:a3:7b:a8:fa:31:a9:
41:10:5e:ce:4a:ed:a9:99:3f:39:4f:58:59:a8:6a:fe:01:1b:
15:37:61:48:c8:52:3c:3d:0d:68:de:6b:93:59:4a:2a:49:eb:
6f:1e:5f:8f:08:f6:e0:2f:27:b5:0c:1f:27:ce:c0:d1:cd:3e:
cb:fb:d3:a2:b5:37:57:29:e6:53:1e:c2:ec:59:c7:6c:7b:99:
47:e1:bc:55:44:b1:dd:38:ed:2c:c7:15:66:00:a7:bd:73:03:
a4:10:3b:07:f0:13:07:0a:b3:5e:ee:18:c8:0c:30:ce:95:14:
46:14:a9:4e:3e:76:df:e5:fc:76:be:c4:7d:ec:18:8e:95:36:
d4:5a:86:7a:43:96:ab:80:90:0b:45:4d:50:5c:48:5f:99:c8:
56:6d:57:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYZuU2MYsrGL7yqOTVO1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjYwMzI2MDkwMjM1WhcNMjYwMzI3MDkwMjM1WjAzMTEwLwYDVQQD
EyhhMWM1ZGEyMGMzZTEwMmJmOTAzZGEyODkwN2IzNTQzZjk3MDJjMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65obb5M2mBIC/rgO3tlWaiRKe5cr
TVY+rO0cmXt+X9e6aeVuysgM54eauSj/eH54hNRyRJyJNTAquij6wMIt/5WHqIq0
AjjXaypN3sC1wV2SuwRMn0/ptWSn3FLB+B2g8X99OhdNUUgmPMbu4IjJV0gzzwS+
HlSDkmGbceSkXvaLkC2NpINI0emp0pS/QV1LZs+F6aVjpywDl3rSkXePwFBogXSB
06UdA9CkFs3cEp4K/cWUrF3LTpNzO4WjhMWeRJgF+o3TgX1Ng/KrngbpOvQnrkrI
HMJgjMAFIFdVJRjk8uvL3c9iOnpUQXPAn0rTXqbGtj6Wdml2IH+b1XmjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHF2iDD4QK/kD2iiQezVD+XAsJhMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNTS+AEB
gmrEpDm/8bDMGteEVa40mnBSPlD90/13SFtQDx03xooEPPKxkWtkpFbJx0l2yQPK
O3/r9/iFPx+QUfAlOMzDzBuaF7MnGcyGWzmMP0wurtpWpvMKBgUvcFRSgjuzh4Fr
o3uo+jGpQRBezkrtqZk/OU9YWahq/gEbFTdhSMhSPD0NaN5rk1lKKknrbx5fjwj2
4C8ntQwfJ87A0c0+y/vTorU3VynmUx7C7FnHbHuZR+G8VUSx3TjtLMcVZgCnvXMD
pBA7B/ATBwqzXu4YyAwwzpUURhSpTj523+X8dr7EfewYjpU21FqGekOWq4CQC0VN
UFxIX5nIVm1X5g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:54 2026 by rpki-client