Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: JC20y3Oxz0A8gw4m/NkPzZo849Ek/TFshGI8pYBHG/A=
Subject key identifier: F4:5B:61:E9:BE:F6:BD:E3:E4:3B:83:E3:B8:5B:B4:FD:03:B4:83:72
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 019D29CE7866A724072A415A94137ACA5288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0DA7
Signing time: Thu 26 Mar 2026 11:01:30 +0000
Manifest this update: Thu 26 Mar 2026 11:01:30 +0000
Manifest next update: Fri 27 Mar 2026 11:01:30 +0000
Files and hashes: 1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: eI8pIreou2M5ZTCJpfr7IxnBR5JJxzYTxoS4Rx4bDLU=)
2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:78:66:a7:24:07:2a:41:5a:94:13:7a:ca:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Mar 26 11:01:30 2026 GMT
Not After : Mar 27 11:01:30 2026 GMT
Subject: CN=f45b61e9bef6bde3e43b83e3b85bb4fd03b48372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:a5:a5:e6:64:72:95:42:e6:ca:ab:ee:77:
5e:df:a2:94:12:b6:f7:8d:0f:21:dd:a5:74:7e:4b:
df:e6:73:6d:40:7d:47:39:5f:51:7d:aa:ea:51:83:
af:17:7a:93:14:57:84:87:53:b7:2a:1e:ea:59:c8:
1d:9c:b9:d0:71:cb:72:e6:3e:ab:a7:4d:44:4a:09:
b8:4b:5b:90:b7:17:c6:cd:75:a9:37:cc:36:b4:7f:
54:59:d2:84:7b:e7:3d:fa:cf:86:f6:1c:a5:25:6b:
e2:fd:2e:95:16:fb:58:c2:0e:7a:67:2e:2a:ba:62:
82:47:87:28:e6:9b:04:2e:d8:a6:3f:0a:4d:dd:b6:
c0:37:4d:74:df:51:37:94:ce:eb:31:b6:e3:5e:e5:
50:e5:cc:77:a4:3c:27:90:f3:0c:ae:55:3e:74:50:
c9:5d:38:43:c0:f8:7c:d0:39:64:79:82:dc:b3:78:
bc:90:b1:21:50:49:7a:50:31:5a:7a:95:9d:b0:3b:
09:31:0b:c2:e8:c4:c2:55:67:d4:75:90:fb:54:24:
4c:9d:c4:5f:ca:33:9d:a8:c3:d5:ab:c1:fa:33:ce:
a1:6d:81:af:b8:a7:73:3a:a6:96:d5:48:4c:24:a6:
4b:1b:fe:35:40:76:56:5d:60:54:14:af:86:d2:c6:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:61:E9:BE:F6:BD:E3:E4:3B:83:E3:B8:5B:B4:FD:03:B4:83:72
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:10:77:1c:43:a1:6d:3b:45:c5:2e:a7:81:06:93:29:e5:
1c:d3:63:7a:0f:5b:9a:1b:18:df:20:0a:3f:79:f0:de:d4:ce:
c0:52:a6:cd:a3:29:fd:21:4a:f1:da:42:d6:8f:4e:82:21:00:
81:c0:fc:68:2a:32:c3:71:16:72:b9:5e:d7:37:86:f0:fe:64:
48:a8:c2:51:5c:24:da:a5:ad:f8:73:db:90:da:cf:84:47:7b:
69:28:da:15:ef:18:ce:67:02:46:d3:a0:9a:a8:d7:33:0a:0b:
59:e1:b7:aa:d8:7e:3b:34:cc:a1:c3:41:5a:31:a0:88:01:76:
f6:bd:2f:3d:6c:84:12:4c:d6:7e:a3:01:bd:2c:b8:33:bf:fa:
47:81:3a:7e:2c:f9:80:48:44:93:cd:99:7f:e3:e2:99:7d:76:
b2:2d:c9:6b:8f:d8:c0:7b:69:17:8a:fe:d2:1d:03:49:c0:3d:
98:70:cc:82:14:83:72:3a:13:0c:f3:63:83:47:7f:54:26:9d:
7f:7e:03:d1:c3:89:7a:e3:ab:7a:a5:84:a3:09:3f:55:23:ae:
3b:b2:c4:e8:7d:52:db:64:85:1a:7e:84:7c:76:cb:91:41:0b:
da:6f:e9:8c:3b:a0:ad:50:3c:d6:cd:50:1d:6d:f1:91:68:d5:
51:92:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:45 2026 by rpki-client