Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier: 1yQw73W4zXkRRGt9QfRRD3DsPo4fnEIEySf0Lf+HcCM=
Subject key identifier: 05:69:FD:6A:7F:10:A2:97:37:76:62:D7:AF:38:75:3B:2C:68:96:EB
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial: 019D2703ACA35B555391186AD0A088BE7BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number: 17C0
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: 7X2RiZJPsCXa5/ydgw/YBakBDUOjvtQW6z0gP6Qukk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ac:a3:5b:55:53:91:18:6a:d0:a0:88:be:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=0569fd6a7f10a297377662d7af38753b2c6896eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:24:8a:2e:c5:01:69:38:f8:ad:be:53:cb:
c3:ad:c8:50:09:97:f3:a5:d6:2e:74:5e:61:f9:2a:
a6:98:8f:5a:14:eb:6f:5d:1a:38:91:98:a6:21:70:
c5:4e:6d:ce:31:4b:c1:be:08:88:25:43:2d:42:46:
4f:6a:d4:eb:1c:04:1a:f7:06:6e:d4:14:3c:60:ae:
78:2f:9a:be:f0:71:30:29:f4:de:c4:19:0c:c1:5b:
54:e6:cd:1e:93:98:77:a0:53:43:34:0c:9b:e3:96:
9d:ad:64:be:cf:c6:7f:ef:e9:af:6b:34:9a:93:75:
39:ad:05:f3:49:d7:f3:5c:f6:42:00:9c:51:75:64:
11:e0:52:97:f1:aa:5c:27:c9:ee:7c:1d:e4:7d:21:
08:46:95:f2:90:de:a8:d9:ab:a2:d1:73:0a:4f:b3:
9d:7d:8e:ef:49:bb:c7:82:4e:aa:6e:50:3f:13:27:
47:bc:36:fa:60:df:3b:78:9f:31:47:f5:89:0d:32:
91:8f:de:52:46:65:49:87:37:7a:8f:71:b6:f6:47:
82:54:89:23:a7:0c:f4:68:1f:80:13:13:8e:cf:3d:
cf:6c:3c:3f:0e:2d:ac:cd:e2:e0:f6:56:ba:51:d5:
be:00:69:ac:31:60:e1:09:90:78:19:c0:04:2d:42:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:FD:6A:7F:10:A2:97:37:76:62:D7:AF:38:75:3B:2C:68:96:EB
X509v3 Authority Key Identifier:
keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:a3:f2:bb:b1:29:ea:46:b8:1e:0b:1a:6a:04:d6:fe:f3:
5a:98:b9:28:a0:a1:e6:fd:65:6d:57:05:e4:08:76:a8:3d:68:
1f:ed:96:ad:24:be:30:80:f6:0e:8f:79:e5:2d:ce:e5:98:e8:
b3:a8:1c:ba:2a:36:30:bf:4b:cf:81:2b:8d:1e:9c:0d:4d:25:
06:74:12:0e:2c:a9:11:80:72:e9:cd:b1:02:6b:ca:d3:69:74:
67:df:01:b6:32:18:5d:a5:d0:88:0c:52:cd:70:1a:a5:87:8e:
6a:06:10:31:a9:a8:69:21:93:0c:32:c1:b9:47:6d:cb:23:5b:
85:84:bd:85:25:52:50:47:68:94:75:f2:a9:b9:d2:d1:b4:8a:
3d:eb:a9:e8:cd:82:21:fc:ec:f2:98:40:34:b1:a3:e2:f6:6a:
90:3a:b8:f7:0a:65:ff:b5:02:67:df:f7:fe:03:3e:44:97:22:
cf:70:7a:a3:1b:80:9d:30:f4:e1:1f:f3:f2:cd:21:73:3c:97:
e5:68:02:01:09:27:39:ea:61:d0:70:35:7b:e1:ac:bb:77:44:
e4:d7:1f:0f:52:5f:ac:f4:13:ce:25:0c:ac:21:f9:b0:34:d2:
74:bd:87:b8:1b:05:5e:74:b0:d6:58:6b:8a:9c:99:4f:fa:2b:
a9:2d:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:35 2026 by rpki-client