Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: prFCQxcQlIiU54TjKE+ZvbeOd7GcGZxssbUnzUNi3EU=
Subject key identifier: C2:9E:3C:AE:11:BB:CE:D6:8A:46:06:6A:6D:A4:17:5B:98:38:32:37
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019D28BBEF2B4677EE2FEC6B8F36C33D079D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 01E1
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: WwF7X2MAHCnYd7EL+/EkRCQW0zAtgj/ILydyEzBis9g=)
2: hjHmhKUkMq2huO3HMGHtinUbmu0.roa (hash: qnr8V99TDGg77oRKiMRfR1bkws1Uoea8b25llDz2SOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ef:2b:46:77:ee:2f:ec:6b:8f:36:c3:3d:07:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=c29e3cae11bbced68a46066a6da4175b98383237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:2f:7d:3c:21:91:47:a9:1b:0d:3d:d8:a8:
23:ac:0c:3e:60:2b:6d:8c:99:c1:c3:e3:08:ad:d0:
52:16:87:17:47:52:cf:4b:e6:12:7c:d4:be:a3:21:
02:01:ad:75:1b:6e:f2:de:93:71:d5:24:35:f0:12:
0a:23:3a:0a:4c:04:36:4c:e0:37:05:3d:27:01:df:
d2:c1:85:a6:d3:fc:d7:a9:b5:fb:bf:63:72:d1:0c:
47:5e:4f:2b:d1:a2:bc:64:e7:64:46:37:bb:61:58:
89:a9:24:4f:f4:b3:cf:c6:6b:7f:bc:0a:a5:25:cc:
de:5b:88:41:2b:67:d2:49:76:38:3e:fc:f8:45:ab:
c9:89:20:73:80:fa:a5:bb:19:b7:00:1f:d6:21:72:
d5:dc:9f:28:6e:4d:a7:b8:7f:66:52:9b:69:21:26:
3e:1b:d8:68:b7:27:cb:d7:1d:27:1d:94:4f:78:9f:
c4:c1:fc:cc:ac:fb:1c:a8:fd:e3:7e:85:5a:47:c2:
54:a6:ee:4b:90:03:d9:b6:59:fb:28:f8:99:ea:1e:
76:76:82:ff:dc:73:9d:e9:df:c6:00:d7:25:91:b2:
58:86:6d:86:97:f7:cb:67:07:ce:9e:f4:5a:32:60:
1a:97:ec:1d:71:cd:96:40:53:b6:57:8a:58:5e:27:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:3C:AE:11:BB:CE:D6:8A:46:06:6A:6D:A4:17:5B:98:38:32:37
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:84:c5:03:35:88:60:be:71:a0:cd:41:d6:70:8c:0e:14:
17:71:26:86:84:34:1a:00:79:ac:fe:04:e0:5c:64:12:78:bb:
2a:78:e2:5c:69:19:48:e4:73:76:c6:8f:bd:00:fe:13:c0:80:
12:0c:1a:ff:41:2b:a8:41:d3:4c:5b:bf:9e:a4:b2:c6:e5:6e:
e5:53:f6:12:7c:d2:30:84:6d:49:12:24:96:2f:a8:51:98:d2:
87:80:d0:ba:7c:7c:ae:c1:a4:0e:9f:e9:ee:f9:59:29:03:59:
fc:d0:65:48:46:5e:28:0d:5b:9a:4d:a2:0b:b0:72:b5:45:6a:
06:60:d8:d9:17:93:e7:6b:76:27:92:42:e1:f1:49:41:04:b3:
25:74:7b:eb:e1:d7:d5:59:86:c5:02:f2:fa:1c:c0:f4:99:f1:
5f:96:0d:c8:67:62:7e:5a:3b:8c:88:47:5a:51:0f:28:57:0a:
e7:19:cb:93:3b:fc:b9:a9:be:de:d3:b9:78:40:d9:32:9c:28:
9b:93:37:c9:1e:79:b3:d4:50:a2:5a:5d:9b:3c:b8:6c:52:70:
3f:57:b1:9c:7e:60:29:e7:96:da:f4:aa:1e:f6:dc:a0:7e:c8:
33:d3:8c:9c:30:b8:9d:b7:6c:f7:11:73:f2:71:76:90:f1:76:
7b:43:15:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+8rRnfuL+xrjzbDPQedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx
ZmIzODAwHhcNMjYwMzI2MDYwMTM4WhcNMjYwMzI3MDYwMTM4WjAzMTEwLwYDVQQD
EyhjMjllM2NhZTExYmJjZWQ2OGE0NjA2NmE2ZGE0MTc1Yjk4MzgzMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYvfTwhkUepGw092KgjrAw+YCtt
jJnBw+MIrdBSFocXR1LPS+YSfNS+oyECAa11G27y3pNx1SQ18BIKIzoKTAQ2TOA3
BT0nAd/SwYWm0/zXqbX7v2Ny0QxHXk8r0aK8ZOdkRje7YViJqSRP9LPPxmt/vAql
JczeW4hBK2fSSXY4Pvz4RavJiSBzgPqluxm3AB/WIXLV3J8obk2nuH9mUptpISY+
G9hotyfL1x0nHZRPeJ/EwfzMrPscqP3jfoVaR8JUpu5LkAPZtln7KPiZ6h52doL/
3HOd6d/GANclkbJYhm2Gl/fLZwfOnvRaMmAal+wdcc2WQFO2V4pYXieLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKePK4Ru87WikYGam2kF1uYODI3MB8GA1UdIwQY
MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt
MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy
LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPGExQM1
iGC+caDNQdZwjA4UF3EmhoQ0GgB5rP4E4FxkEni7KnjiXGkZSORzdsaPvQD+E8CA
Egwa/0ErqEHTTFu/nqSyxuVu5VP2EnzSMIRtSRIkli+oUZjSh4DQunx8rsGkDp/p
7vlZKQNZ/NBlSEZeKA1bmk2iC7BytUVqBmDY2ReT52t2J5JC4fFJQQSzJXR76+HX
1VmGxQLy+hzA9JnxX5YNyGdiflo7jIhHWlEPKFcK5xnLkzv8uam+3tO5eEDZMpwo
m5M3yR55s9RQolpdmzy4bFJwP1exnH5gKeeW2vSqHvbcoH7IM9OMnDC4nbds9xFz
8nF2kPF2e0MVag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:31 2026 by rpki-client