Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: Cv+pO+DuxqYx9Uzc3uNB/WbTCrPJFoO3q1hftaTdCso=
Subject key identifier: CD:84:5A:13:1D:A6:0D:8C:41:8D:54:49:FD:C1:0C:7C:66:03:BD:04
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 019D27A8C57D7A0578DB143F89C24C70F6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0C57
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa (hash: X7ptSGD8hMEh9qW7Py0+45xWZLrj3NoOhUjyiTrtyQc=)
2: YjQiPePy4rwjqfIv0GNTyuHUVeE.roa (hash: FRyYxB8E0O7w8Ro16U8SMCHBItOvlxbO1vjadeMtAvo=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: astEgbqeemP3mubERzVg49oaroLqZYl1JfS0/m+2dCk=)
4: ytUrE1yikUozgHVrWde_TAyxalY.asa (hash: cd7uv24NUxcddeM4R6jn2GTZOxo6970ut0T+FVbZ/XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c5:7d:7a:05:78:db:14:3f:89:c2:4c:70:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=cd845a131da60d8c418d5449fdc10c7c6603bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:dd:e4:0c:3e:dc:ea:55:f9:73:56:c3:5f:
ff:5b:4c:d1:e0:8c:81:fd:12:7d:16:eb:df:fa:a6:
3c:0e:bb:fe:15:9f:31:2f:61:68:c1:46:a0:5b:1a:
e4:9f:5a:b1:1f:05:09:b7:74:10:58:e4:f0:ed:e2:
b5:59:0e:72:d5:d6:18:c3:f8:1d:db:43:90:96:2b:
bc:23:24:20:45:53:7d:d3:6a:be:6c:1f:fb:79:0d:
60:1a:8b:3f:f3:15:b4:bc:aa:c3:43:f6:9b:5e:2d:
ea:52:9f:93:5e:cb:ed:a1:31:6a:a7:79:28:a4:ea:
57:ae:ef:d9:77:34:ac:1c:2d:26:c9:01:66:31:f4:
b0:2d:fb:f4:09:e4:8d:24:a5:ca:4e:ca:bc:c2:68:
9a:d6:58:45:56:99:c9:bd:1d:7c:6f:65:bf:83:69:
53:c9:e7:9d:62:a8:37:ec:3d:7a:39:cb:0b:67:52:
95:33:17:74:1f:69:3a:a0:2b:54:63:52:08:af:b7:
d6:bf:2f:51:63:8e:57:88:4e:7f:4d:96:b7:4f:8e:
43:da:c6:da:ae:9d:d8:f1:e8:5c:aa:78:ca:f6:fa:
81:9f:a0:bd:37:2e:07:37:9c:6b:21:21:97:fe:5d:
4c:ad:7a:4f:59:cc:58:ea:71:a4:12:72:fa:f7:0a:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:5A:13:1D:A6:0D:8C:41:8D:54:49:FD:C1:0C:7C:66:03:BD:04
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:22:b8:91:ed:e3:b2:11:cd:98:73:f1:f3:14:ca:e6:ed:72:
0e:5d:dc:18:d0:64:56:bb:76:2e:9b:6e:7d:ff:dd:02:22:01:
10:0b:0d:2d:84:bf:4d:37:1d:5d:6e:6f:c3:71:26:57:29:cc:
f8:53:df:8f:90:3c:e0:e8:63:ff:a3:72:b3:fe:47:59:73:2e:
65:3d:02:a5:1c:cb:1a:1a:ea:f1:94:bb:53:ad:bb:57:08:d1:
51:26:53:d2:a2:7a:64:88:de:8d:75:cb:07:45:b6:38:67:93:
dc:c0:af:58:c2:0e:2b:32:ba:c8:15:e6:ea:48:00:67:cb:b8:
ba:77:2b:9b:8b:88:19:03:43:4b:c5:66:d5:fd:b0:89:d6:8c:
70:5f:e4:f9:02:bd:35:c5:15:eb:82:0b:ff:99:c5:6d:25:7a:
15:a9:a5:95:1c:42:08:a9:65:73:ff:11:d6:93:3f:12:45:0e:
54:e0:76:91:90:60:e7:bb:c0:12:d5:b7:ff:57:e2:f9:5e:a5:
6d:e6:13:39:b9:b9:3f:21:68:5b:02:92:c6:a5:da:75:16:20:
f5:04:b7:59:ca:9a:3a:3b:8a:77:13:a2:07:1e:9e:ee:9a:f6:
8c:4a:9c:34:bc:65:14:a7:21:fe:0b:a4:be:08:5a:d3:35:a7:
de:79:16:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMV9egV42xQ/icJMcPavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix
ZDdkNGQwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
EyhjZDg0NWExMzFkYTYwZDhjNDE4ZDU0NDlmZGMxMGM3YzY2MDNiZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z7d5Aw+3OpV+XNWw1//W0zR4IyB
/RJ9Fuvf+qY8Drv+FZ8xL2FowUagWxrkn1qxHwUJt3QQWOTw7eK1WQ5y1dYYw/gd
20OQliu8IyQgRVN902q+bB/7eQ1gGos/8xW0vKrDQ/abXi3qUp+TXsvtoTFqp3ko
pOpXru/ZdzSsHC0myQFmMfSwLfv0CeSNJKXKTsq8wmia1lhFVpnJvR18b2W/g2lT
yeedYqg37D16OcsLZ1KVMxd0H2k6oCtUY1IIr7fWvy9RY45XiE5/TZa3T45D2sba
rp3Y8ehcqnjK9vqBn6C9Ny4HN5xrISGX/l1MrXpPWcxY6nGkEnL69wqbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2EWhMdpg2MQY1USf3BDHxmA70EMB8GA1UdIwQY
MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt
NWFjN2YwNjYyMzBiLzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi
LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyK4ke3j
shHNmHPx8xTK5u1yDl3cGNBkVrt2Lptuff/dAiIBEAsNLYS/TTcdXW5vw3EmVynM
+FPfj5A84Ohj/6Nys/5HWXMuZT0CpRzLGhrq8ZS7U627VwjRUSZT0qJ6ZIjejXXL
B0W2OGeT3MCvWMIOKzK6yBXm6kgAZ8u4uncrm4uIGQNDS8Vm1f2widaMcF/k+QK9
NcUV64IL/5nFbSV6FamllRxCCKllc/8R1pM/EkUOVOB2kZBg57vAEtW3/1fi+V6l
beYTObm5PyFoWwKSxqXadRYg9QS3WcqaOjuKdxOiBx6e7pr2jEqcNLxlFKch/guk
vgha0zWn3nkW4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:57 2026 by rpki-client