Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: rFHUZ9QkiUVb4C2iJvlUSjuQBvF8Zb7TYdOHD/+7TEQ=
Subject key identifier: B3:B6:AB:BD:1F:12:28:71:8E:98:3B:D2:17:82:96:61:50:97:E2:AD
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 019D29CE3A5BC18B23441C2912D8BDB7AD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 108C
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: 3CN1obc7sPD0b9+me131pkJF/XxT9jbHBoDy9OgjqsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3a:5b:c1:8b:23:44:1c:29:12:d8:bd:b7:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=b3b6abbd1f1228718e983bd2178296615097e2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:25:7d:41:be:d8:33:67:d3:5b:f7:2c:a9:
76:79:00:a8:63:f4:00:07:f1:a2:f5:61:93:e5:9f:
cd:43:8e:90:c7:65:3c:f9:2b:31:c7:d5:6a:0b:e5:
bf:eb:2a:49:49:f8:0e:f0:4e:6f:30:37:16:86:fb:
bf:91:26:cf:05:28:34:26:2b:f8:66:09:f3:f1:64:
14:6f:0f:ae:3f:95:f5:c7:72:92:e3:3f:50:f3:9c:
b8:f6:35:37:1c:2c:6b:bf:c3:84:99:78:33:70:71:
0c:e1:7a:55:c4:b2:6c:59:a9:8d:f2:a2:3c:a2:d0:
d2:91:1f:0c:7e:0b:eb:ea:3f:49:55:62:f8:54:02:
bb:e3:b1:60:fd:b0:3d:5a:56:52:91:e3:b2:f8:c5:
ff:b0:2c:24:07:91:f1:d2:95:7d:9f:a6:bd:5f:dd:
25:c1:34:80:77:cd:27:f5:bf:71:fc:f8:d8:af:c6:
38:f2:d2:3a:08:0c:47:7d:b9:21:0d:fc:86:38:3d:
80:b2:ea:cd:67:bd:bf:4a:0f:10:84:25:41:b0:54:
27:76:25:06:a8:dd:4e:a4:ae:d0:36:03:1e:f0:b8:
08:a6:a8:0f:e0:51:45:7f:78:68:76:ed:f3:0b:3d:
cd:e0:ca:0b:b2:d3:cf:ae:65:26:dc:01:fd:db:ca:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:AB:BD:1F:12:28:71:8E:98:3B:D2:17:82:96:61:50:97:E2:AD
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:06:bc:7c:7a:a8:32:7e:2a:7b:67:17:64:0a:a9:66:8f:ec:
20:29:5c:00:0e:17:c9:9d:ca:cf:b3:1f:c3:0c:59:9f:6c:0f:
ce:63:9e:5a:8e:09:44:9f:74:7b:67:73:c4:27:e0:cf:65:5b:
3d:24:4c:fd:11:62:57:43:dd:60:58:44:3b:c4:7f:4b:e7:17:
23:01:07:b0:44:80:e6:c0:fc:41:48:1a:81:9f:d3:37:b8:56:
82:21:df:ff:c0:58:26:88:c7:79:87:e1:fb:c9:6d:b0:9e:4c:
74:63:89:9b:c9:71:14:a8:24:b2:80:11:29:74:3f:96:9e:b0:
30:ec:a6:21:66:78:71:b1:71:2b:5e:16:0b:71:20:9a:7d:cb:
1a:ab:15:33:60:e4:d7:16:1d:7b:93:81:e9:f6:a3:d5:29:9b:
84:e1:03:1b:f0:98:03:ac:85:cc:9c:30:a0:4f:dc:e1:96:3b:
04:bc:59:55:5e:b7:a2:1a:a7:1b:45:cf:4e:d6:a6:52:c0:fd:
c1:31:56:0a:64:9a:ea:33:1f:8d:ae:d5:55:bc:ea:56:09:ee:
c0:11:9c:a7:83:f8:fe:51:95:8c:c7:bc:91:a6:04:2d:d7:03:
fd:0b:d1:11:c8:70:d7:70:6b:f3:96:0a:a5:50:c2:78:a8:fb:
89:47:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:20 2026 by rpki-client