Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: pi2d8aSx0sdycHBJn5Sx6WamVadBaWWtirMxEa31ccM=
Subject key identifier: AE:19:AD:65:5D:99:2D:76:36:66:63:0C:C9:62:4B:AD:19:FE:84:EA
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019F8FB51460702522D8596DA087BBBAE8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 0322
Signing time: Thu 23 Jul 2026 16:00:36 +0000
Manifest this update: Thu 23 Jul 2026 16:00:36 +0000
Manifest next update: Fri 24 Jul 2026 16:00:36 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: n+ijZIN4son6iuySjY58tHZ2o56vHnMR78ho2t/+SDw=)
2: ex3V8jEPHC15OeyVNhlPf888Muk.roa (hash: lL8rDUO+fDpEtiUvL1L8BlBnX7C9eguwrFBzGsL8ZPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:14:60:70:25:22:d8:59:6d:a0:87:bb:ba:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Jul 23 16:00:36 2026 GMT
Not After : Jul 24 16:00:36 2026 GMT
Subject: CN=ae19ad655d992d763666630cc9624bad19fe84ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:ef:f2:e4:5d:3b:aa:6b:8b:d2:88:2b:e0:
a4:25:d0:30:17:11:1a:78:df:ff:e9:48:c1:15:87:
c5:73:9c:33:e5:bd:ca:b9:53:97:fd:f8:6d:c4:60:
1b:7c:e6:89:d3:39:8d:c1:b4:74:63:3e:b3:ba:60:
bb:6e:5b:17:85:a3:c0:bc:26:b1:ea:10:9a:86:d7:
4e:99:1e:76:ec:49:24:f5:8a:c9:89:56:9e:d9:f3:
84:98:e9:0f:fa:77:11:f0:4c:c8:93:4b:00:70:69:
7b:50:d6:15:38:88:72:4a:d6:74:80:89:2e:41:5b:
d3:c8:22:a8:ee:3c:87:b6:e3:2f:70:df:c2:fe:79:
ff:af:86:e7:f2:94:7c:46:f2:53:bd:50:8b:0c:97:
54:f0:9a:a9:22:99:f8:0a:66:ce:3d:20:6f:ce:0f:
13:a5:0d:35:4e:d9:ea:a8:bc:6d:1f:1e:62:06:2c:
67:dd:98:0f:ad:ab:d4:07:c7:18:86:7f:c7:da:fa:
85:15:36:7b:53:91:f6:19:84:fd:1a:a9:d4:6b:6e:
6a:25:eb:3b:c2:9e:2f:f9:21:fa:c3:7b:98:fc:20:
94:21:b1:68:be:c6:50:50:31:f7:43:c9:ff:c7:aa:
9f:26:15:50:20:d1:e7:80:59:f4:eb:7b:5d:62:b9:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:AD:65:5D:99:2D:76:36:66:63:0C:C9:62:4B:AD:19:FE:84:EA
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:78:ac:d0:ae:35:60:0b:34:bd:a8:72:76:2f:33:ce:46:
f5:fd:be:33:ed:c7:2e:5a:f5:cb:2e:9b:bc:14:63:67:a1:48:
28:f1:10:54:c5:65:6e:95:1d:78:a2:f5:9e:55:97:9d:76:da:
ca:2d:4e:ac:5c:27:54:9e:5d:71:72:b2:9a:df:97:c3:aa:b1:
84:1a:50:5b:02:02:f1:4e:21:17:b5:1d:15:0a:82:cd:82:59:
9d:4f:bd:c5:6a:9d:0f:fa:fd:80:67:70:52:ea:01:62:69:ed:
e8:3e:48:6e:0a:55:b5:fa:30:93:bc:c3:ff:8e:79:6f:04:51:
16:b1:37:1f:ac:71:21:6f:d8:2a:7c:36:6d:18:e4:ef:32:ca:
c9:68:5d:18:1a:bf:e8:7f:65:fe:12:78:60:02:ff:03:ed:f8:
4e:00:90:7d:c3:be:26:62:36:d6:02:8a:f7:f6:51:1f:c7:6e:
d8:87:35:60:67:d9:5c:7c:6f:79:0e:29:fd:72:a1:37:33:95:
10:7d:09:23:fd:53:e7:fd:3c:b4:db:fa:23:7a:c5:d0:f5:32:
95:ce:14:5e:5e:27:ec:59:3f:92:cb:3f:a3:99:68:0c:82:0d:
3e:a0:1e:63:3e:74:66:69:f1:b2:81:28:1f:73:c3:c6:2d:2e:
09:69:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:25 2026 by rpki-client