Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: f0O+2iWM0o8cX6uQkvWjOu7ktjRYPl8Gk0zBPcsK5M0=
Subject key identifier: 94:40:B2:EA:A9:39:2C:01:6E:3B:55:A0:0D:EB:F6:1B:87:5D:4F:AE
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019D265FE346CDF1A82C77AC80DFC76724AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 0740
Signing time: Wed 25 Mar 2026 19:01:51 +0000
Manifest this update: Wed 25 Mar 2026 19:01:51 +0000
Manifest next update: Thu 26 Mar 2026 19:01:51 +0000
Files and hashes: 1: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (hash: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A=)
2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: cEztjhPuXv1H5gjNZCRCQSD36UOSCUBUzFGd9gJYYSw=)
3: g9ua57B68Th2qHv-LwwTCs4_D70.roa (hash: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e3:46:cd:f1:a8:2c:77:ac:80:df:c7:67:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Mar 25 19:01:51 2026 GMT
Not After : Mar 26 19:01:51 2026 GMT
Subject: CN=9440b2eaa9392c016e3b55a00debf61b875d4fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:44:46:d1:d3:97:85:84:43:e7:c3:29:a7:
67:64:e2:0d:89:4a:2b:69:de:13:46:9f:5e:51:8e:
ae:f3:2d:ff:20:0b:60:8f:59:93:2b:61:68:b6:30:
ae:4c:d4:0e:29:c0:78:bb:89:08:e6:c5:17:eb:bf:
19:f2:8f:b1:f5:62:85:83:36:b4:28:94:7f:f6:3a:
21:45:cb:9f:f4:2b:b3:69:85:7d:19:74:a5:76:d2:
16:83:d7:92:40:06:e8:73:a3:80:68:6d:ba:1a:c7:
ae:47:5f:6f:0e:65:74:ad:f5:bb:fb:8e:b2:45:cd:
cd:4f:60:8c:a0:48:4e:11:67:ee:20:3d:5d:ff:ed:
68:24:e5:c8:c5:0d:1b:12:b0:93:40:84:66:3a:ff:
e7:9a:0f:c9:df:44:91:70:2b:02:b5:e8:fd:2e:89:
c4:18:d4:5c:2f:73:9a:a1:25:8f:61:da:eb:7e:23:
97:47:b3:59:1b:9d:b0:a7:a5:3e:35:01:48:f7:bf:
44:32:68:5f:75:17:0f:bb:16:eb:e7:b2:81:39:e1:
2f:2f:d6:77:fe:d0:7e:fa:ba:95:95:ea:c2:bd:b8:
22:a8:40:99:72:33:3e:e9:63:73:c3:12:5d:6f:65:
fa:59:be:3e:c0:e1:61:15:3c:a7:a9:94:e3:86:87:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:B2:EA:A9:39:2C:01:6E:3B:55:A0:0D:EB:F6:1B:87:5D:4F:AE
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d9:ac:af:00:4a:78:8d:61:c9:8e:2b:12:08:85:63:9c:38:
b5:00:99:4d:fc:c9:ff:8c:72:0c:0a:69:63:59:57:58:b3:37:
b1:e8:10:cf:f0:cd:40:94:24:a9:3b:ea:8d:e6:97:ca:e9:03:
c9:17:a8:dc:08:5d:75:8b:0e:97:f7:8e:d3:e8:ad:3e:09:e8:
81:ce:d5:6f:97:8c:7b:98:d0:e3:92:2c:b0:44:52:f3:d6:cf:
4d:0e:b0:74:f4:88:f5:b5:91:3f:cc:c1:c3:4c:25:62:86:dd:
4c:cd:8b:74:91:a6:3f:78:9e:b2:8f:21:4c:c8:4a:ac:0c:08:
9f:58:8e:07:fa:68:4e:f8:2c:f0:65:dc:14:ad:21:60:61:92:
7a:bd:e0:2e:f6:85:4c:da:24:30:6f:e3:d6:61:b3:89:c6:a4:
ce:af:cb:85:25:65:cd:90:4a:a1:4a:1d:f3:53:4e:14:4c:31:
a3:06:7d:14:e8:7c:90:66:02:e4:f5:db:0e:d2:27:4b:fc:80:
99:c0:f3:58:e1:51:3d:2e:a9:00:e9:a3:11:81:e1:c6:99:da:
9d:e0:ab:37:c7:16:5f:b0:71:7a:31:67:10:ce:80:25:66:78:
48:b1:c1:15:04:40:08:99:ea:f4:1f:6c:f3:fc:78:e7:c8:39:
2a:67:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:23 2026 by rpki-client