Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: 7+/BNZ8DK9o+DV+hnNViDrUi6gpnt0fBWv2RxTjNZ5M=
Subject key identifier: EF:29:73:76:59:46:25:3D:29:7A:DC:D1:A0:00:33:4A:26:FE:B2:44
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 01A0CE23DB616B32A5511914CA58B9C28D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 03C8
Signing time: Wed 23 Sep 2026 12:00:51 +0000
Manifest this update: Wed 23 Sep 2026 12:00:51 +0000
Manifest next update: Thu 24 Sep 2026 12:00:51 +0000
Files and hashes: 1: 4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa (hash: tVTEQ5EqgDdG6S5oFPG0kZJ9juKgZKh/vp79fStLNpo=)
2: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: K48iGW/TKvWVyaU9btmosjmANafDfhUbCyM//Gr+6Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:db:61:6b:32:a5:51:19:14:ca:58:b9:c2:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Sep 23 12:00:51 2026 GMT
Not After : Sep 24 12:00:51 2026 GMT
Subject: CN=ef2973765946253d297adcd1a000334a26feb244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:1a:e8:35:fa:0a:e0:1b:5d:22:fb:fa:38:
2f:ee:07:9f:78:dd:2b:00:ec:f5:4c:b2:21:a1:a6:
5c:41:a7:69:f6:5b:42:72:0a:4b:c3:00:f5:dd:c7:
cf:2a:79:97:09:0a:1a:1a:ad:dd:75:ec:3c:03:74:
b9:f6:37:a2:2d:b8:e8:6e:75:09:c7:97:c5:64:18:
34:fb:e3:f3:61:36:6a:b5:be:70:a2:cc:1a:74:60:
42:c5:0c:37:fd:3e:b0:ff:9a:2d:00:2b:d3:38:1a:
07:63:17:2c:be:84:c1:05:69:c7:ff:31:ae:bc:7d:
22:ee:f0:db:5c:45:67:f6:ef:fd:b7:ca:f3:76:de:
88:83:b1:cc:d9:ff:06:9e:4d:59:38:91:be:1e:6c:
8c:b7:eb:ec:eb:e1:61:3e:d9:0d:56:7c:f0:25:5e:
e8:26:7b:92:77:70:fe:ff:d5:62:73:7b:4a:c0:7c:
85:99:c6:17:86:8d:55:36:fd:de:18:18:9e:ea:80:
eb:9b:1a:a9:f6:98:5c:5e:c2:4a:a1:5e:04:2b:c3:
04:c9:86:81:23:e8:dc:e9:c0:8e:d2:ea:9b:d0:73:
bf:9d:65:e9:af:d0:af:ed:88:c5:72:d5:c5:9a:81:
61:fb:4a:a3:f1:ea:30:1e:a7:cd:9d:b7:c8:85:21:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:73:76:59:46:25:3D:29:7A:DC:D1:A0:00:33:4A:26:FE:B2:44
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:c0:54:72:9a:5b:67:30:e9:2f:a3:30:23:e8:f9:2f:1e:
0f:eb:b2:a9:cf:8f:12:5b:93:45:48:82:8e:f6:14:85:d7:c5:
2e:a5:27:b4:21:9a:44:4e:2c:40:c4:6d:ed:f5:2e:41:63:91:
d9:ed:47:97:3c:6c:28:55:f2:25:44:12:ab:80:34:a6:43:6d:
8e:23:39:78:3b:49:5d:09:76:3d:09:d5:b1:a7:39:3c:1c:8b:
4a:86:b7:b3:59:b8:01:31:c7:d7:6d:a5:be:52:f2:a6:a9:e7:
54:16:67:81:80:b4:8f:53:22:7b:3d:e8:1b:3e:a9:78:e9:1d:
01:e3:13:f7:9f:9e:f6:ee:3b:04:b3:15:27:05:23:f0:c0:f4:
1e:3c:0f:39:d4:2c:48:da:ac:b9:8c:77:be:92:07:92:26:97:
7c:fb:42:a3:fc:f4:49:6e:ff:a3:79:5f:9d:2c:08:d0:47:48:
53:7c:49:3c:0f:e1:8b:b6:03:07:98:c6:e8:5b:c2:35:1c:bc:
d8:11:c2:0f:1e:a2:99:61:63:68:28:a2:0c:62:11:13:aa:54:
38:a3:81:eb:07:87:70:fe:46:0f:72:fb:05:ba:4e:21:03:91:
99:49:b8:10:ea:e6:92:60:7f:bb:fd:ad:a9:8d:3f:34:18:28:
e6:da:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:58:06 2026 by rpki-client