Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: 9lzTOQZwpjL4Hk1jGf8U37irzuJpR3wnDyQk+TyH9Jo=
Subject key identifier: FF:3C:FC:C7:CB:A8:66:87:14:8E:F1:E7:46:DF:2F:12:1B:85:6A:A9
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019D2884A405AB6B2FACF6DE5217C6C30D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: +quxpY5UNTQm8niJUdmViAU237iYCEKPtOFtGKO2b0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a4:05:ab:6b:2f:ac:f6:de:52:17:c6:c3:0d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=ff3cfcc7cba86687148ef1e746df2f121b856aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:bf:16:73:da:42:a8:50:90:48:de:58:98:
1c:a7:68:c1:a5:98:6b:cd:9a:94:04:bf:70:d1:f7:
7a:aa:af:b9:c6:89:86:cd:df:ee:04:7f:94:91:73:
9a:3e:9d:bf:72:8c:8f:a2:cc:5b:78:1d:28:1d:d6:
d3:a3:5c:69:92:52:0c:5a:75:00:d9:a0:71:19:bc:
2d:a3:6e:25:4e:b4:13:a1:5e:15:ff:e1:b6:0d:b8:
48:17:53:d0:90:2d:11:0f:ab:96:e0:68:54:61:96:
08:0c:87:44:3c:65:61:4e:65:db:2b:d6:e0:3c:4a:
a7:f5:e1:11:a7:5e:93:81:95:eb:de:f3:1b:a1:1b:
0b:cd:65:ae:a7:6b:63:29:e1:4d:d9:95:c2:e7:22:
6e:98:93:d3:ec:4d:74:ae:19:b3:80:df:1e:36:f5:
42:0d:b1:bd:b5:73:56:56:92:7a:ef:9c:f3:8e:81:
4c:62:65:35:4d:c2:be:22:97:9d:43:bb:b4:29:60:
e2:51:ff:bf:d9:b2:fa:43:2c:a6:7e:94:0a:96:c5:
03:70:1c:f9:72:82:54:69:37:95:2c:c2:c1:dc:aa:
6c:12:c6:29:e6:67:60:4f:e2:6b:54:be:6e:fc:9a:
53:36:00:67:77:38:9d:30:ea:87:66:d7:8c:b2:c3:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:FC:C7:CB:A8:66:87:14:8E:F1:E7:46:DF:2F:12:1B:85:6A:A9
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:07:a3:a4:76:60:d1:22:5b:e7:ac:94:48:35:ec:3f:4f:a8:
0f:a6:a6:ed:e4:8e:d2:66:29:0c:15:6d:e4:df:2a:43:84:45:
3c:03:5f:2b:64:09:2a:10:4a:a9:73:5e:35:6e:b4:e9:a6:a8:
0f:fa:2a:f8:22:c1:08:01:9f:cb:a8:45:11:f4:ed:36:92:53:
98:41:13:fe:ba:30:d8:f6:62:27:ad:18:41:a1:20:a1:3c:0d:
12:fe:93:81:07:de:b8:fb:9f:42:70:ef:09:da:af:d8:a8:e5:
42:72:d5:19:90:40:8a:33:48:4a:67:c3:f3:4a:47:4b:bd:c8:
64:77:7c:94:21:89:05:d5:c3:df:f2:64:79:74:89:93:4e:c4:
4a:b6:8c:54:d9:b6:6a:76:f3:62:fb:67:a0:42:e4:26:db:5a:
7d:24:8a:b6:55:44:fe:16:98:70:07:6d:81:de:12:5d:11:e6:
04:ee:2a:41:e9:13:80:09:71:68:2a:89:30:56:45:cf:a3:04:
8e:a1:71:23:ef:70:ec:60:c3:11:00:5f:73:a4:0b:0d:a6:b1:
53:75:a6:bf:bb:d6:ed:2d:80:ef:07:d9:a7:c3:48:d3:bf:b7:
a9:f0:a4:d3:e2:6b:da:44:fb:c2:69:89:7e:2f:43:23:30:94:
17:1a:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:16 2026 by rpki-client