Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: SNmhZkYq1MxQE8NuCCDlR36cz72r0cPU6RpoLq1HnjY=
Subject key identifier: 68:C0:D9:41:3C:4A:DE:D0:8E:B6:71:59:6A:1B:D7:DF:F6:2B:B0:0C
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019D27A8C0F89A270A5B6C929CA10411BD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0F1C
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: G8SuTM3d98qg2pNqpspenCwxU46gEdf1Ln1UUcr7kPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c0:f8:9a:27:0a:5b:6c:92:9c:a1:04:11:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=68c0d9413c4aded08eb671596a1bd7dff62bb00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:10:36:96:b7:2d:99:14:38:c5:2d:a6:9e:
48:b4:1d:03:a2:7a:65:2b:9d:fc:81:c6:49:d8:20:
ac:3a:f9:c7:78:aa:11:db:93:27:97:88:7b:ba:67:
28:87:9e:9e:d1:5d:08:6f:f0:cc:e4:1d:36:89:4c:
a2:e8:bf:d8:4a:59:09:cc:46:7d:d4:e4:48:7a:6d:
f3:53:2d:54:ed:d5:c0:de:33:34:91:54:da:61:c2:
3e:c5:52:c4:65:64:1e:77:92:44:f6:4c:2b:f0:94:
67:3c:a5:28:35:f3:bf:b7:49:8e:f6:b7:4d:88:3a:
e0:2e:9a:58:06:09:ac:8d:30:d1:7a:40:c6:81:6f:
4e:e8:5b:6d:64:38:4c:26:30:1e:31:5d:70:5e:5b:
a1:3b:b2:1f:62:20:81:b6:bf:e8:77:6e:e4:86:1a:
2c:8d:22:bd:69:ef:f3:81:a9:11:ac:cc:01:a9:62:
89:35:92:f7:d6:d1:bd:9f:28:0d:a3:c0:ce:fc:3f:
43:93:bc:f7:d0:0c:6b:3f:b4:cc:3f:66:97:74:76:
91:6a:d8:eb:7e:d2:cb:2c:1e:b6:ae:7f:19:b4:0c:
52:8d:b4:95:72:45:19:cd:24:98:93:89:86:81:2e:
eb:56:25:74:ff:a4:55:b8:9d:66:f8:20:bf:06:f4:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:D9:41:3C:4A:DE:D0:8E:B6:71:59:6A:1B:D7:DF:F6:2B:B0:0C
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:83:58:04:b7:a5:9f:a9:a6:39:03:22:45:5d:17:99:46:
52:81:59:f7:8c:c7:e3:1b:5c:dc:e8:ed:d2:31:df:16:c3:d9:
4d:5a:5e:66:a7:5f:7a:e9:29:fd:d1:cb:f7:a4:3d:e9:a0:10:
80:5d:2b:bc:27:0a:21:85:aa:d1:ac:4a:c3:5d:f0:1f:23:19:
62:51:c6:c9:bf:13:49:2d:a3:7b:27:e8:a1:71:83:3a:b8:da:
9c:ab:02:d2:03:24:38:19:fe:58:29:80:fa:93:67:92:64:f1:
8f:cd:61:06:7f:3b:38:6f:a1:10:97:02:64:85:21:6a:6c:08:
ed:be:ac:d4:a0:e0:26:29:65:67:9d:bd:cf:ef:de:fd:2c:2c:
af:73:70:c0:54:29:4c:4e:8d:6f:50:09:7f:5f:c6:46:68:12:
09:9f:d5:32:5a:91:f9:9d:3f:f3:6f:e8:86:82:f9:e2:88:a9:
19:b0:9d:cd:bb:0a:5e:30:03:31:c7:5d:c8:b3:bb:51:d8:6a:
f1:cc:7e:a2:90:18:e1:4c:33:87:34:ce:72:49:32:eb:86:dd:
aa:4b:cf:11:5f:0c:3c:0c:5b:d2:5e:83:89:e3:e3:60:a6:49:
66:31:09:2c:32:85:6e:fd:db:6b:fa:21:e1:bd:14:c0:55:93:
f0:ee:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:12 2026 by rpki-client