Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: EMTb8wjTQDHMmBsyhzwVEuLPOz2jA90ueGnj0F2K5RA=
Subject key identifier: 26:22:4E:63:23:EE:BB:37:B3:2A:CE:EF:1B:D2:0B:FE:FC:92:04:5B
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 3A5046B2E5B1AADD9CF59A041A8A5C577AD31CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 0120
Signing time: Thu 26 Mar 2026 09:22:58 +0000
Manifest this update: Thu 26 Mar 2026 09:17:58 +0000
Manifest next update: Fri 27 Mar 2026 11:39:58 +0000
Files and hashes: 1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: OmCApvyrfFs8kAvHtbzjUCr2jGJ5LcJa12JT2qFtodo=)
2: AS207529.asa (hash: 91RgF1Q59DuPxrUsovbhCfTP8zMA9dTvBr19p6JV5F0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:50:46:b2:e5:b1:aa:dd:9c:f5:9a:04:1a:8a:5c:57:7a:d3:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Mar 26 09:17:58 2026 GMT
Not After : Mar 27 11:39:58 2026 GMT
Subject: CN=26224E6323EEBB37B32ACEEF1BD20BFEFC92045B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:72:55:d1:f9:b9:55:ff:73:36:c9:f1:12:
94:19:f6:01:eb:9f:57:5e:73:be:cb:a1:a7:e9:0e:
22:3e:48:00:9c:cf:9c:b6:a4:dc:bf:08:6d:8f:fe:
14:33:f5:9a:f2:22:7b:d7:e2:33:07:a6:68:f3:c0:
30:d3:f2:ab:2c:24:4b:b9:df:79:df:b9:38:cf:f1:
b9:62:7c:f0:69:4f:86:07:17:98:57:7b:0a:6b:44:
12:e0:88:76:8b:05:5b:46:fa:88:b3:8c:31:b4:95:
3f:35:e3:2e:91:92:5a:47:ce:9a:69:9b:8c:e8:51:
9a:bb:4e:5b:b8:83:52:48:29:a4:0f:fc:bf:8b:c8:
f4:cd:ef:c8:27:a6:ff:cb:c7:d2:5c:aa:1f:11:ff:
bd:75:21:90:7b:31:6e:9a:aa:bb:5e:75:2e:b9:73:
81:ec:10:e5:aa:35:46:ed:8f:9f:46:c2:af:ad:07:
1e:4e:b3:b8:2a:8d:f4:50:f7:a8:2d:5d:20:17:0c:
0d:3c:1e:96:72:3f:8b:0d:fa:67:ab:34:c9:8b:63:
17:ce:63:f9:df:75:d4:21:5c:44:3c:f3:18:a6:46:
c7:62:b5:e5:67:16:e4:bd:4c:29:9a:f4:bb:74:f3:
dc:41:c8:b9:fd:4c:f1:e7:b9:e0:90:a1:f2:af:94:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:4E:63:23:EE:BB:37:B3:2A:CE:EF:1B:D2:0B:FE:FC:92:04:5B
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6c:a5:68:bb:a8:c0:94:61:aa:71:c6:dd:e6:ca:d2:d8:e6:
ea:07:f5:4d:db:1a:6f:c2:b1:9b:1f:4b:f0:91:98:8e:81:bb:
b9:47:54:71:fa:67:e6:6b:34:40:11:f8:3a:f1:0c:67:b9:b2:
22:13:ac:51:f4:07:3b:33:14:e3:a1:67:c9:15:6e:5c:a9:b9:
77:04:db:87:ec:35:48:24:17:e3:86:e4:c5:46:63:93:c7:cb:
f7:a6:41:cf:59:87:26:97:42:d3:a2:bd:06:64:a5:b5:14:e7:
02:55:5f:c9:87:1c:35:10:f5:68:0c:f9:c8:78:79:88:35:ef:
42:88:96:a5:3d:fa:8e:63:1c:e2:4f:47:c1:da:71:d6:7a:5a:
02:9e:27:a9:6d:20:44:b9:ee:6b:c0:48:33:cb:ff:fe:a6:7d:
ac:19:11:0e:fc:40:09:51:a6:64:05:67:6f:86:1d:f9:a1:e9:
3c:79:7f:55:cc:71:e4:42:e2:48:e4:ac:d9:78:b5:83:89:b4:
73:dd:e5:af:e0:f9:09:01:90:35:66:ba:37:60:69:6a:48:13:
9d:b4:10:7b:64:1c:72:89:ca:df:9e:91:59:41:80:a3:b5:93:
7c:bb:bf:40:65:f3:06:7c:d2:e3:58:ba:59:1d:8e:4f:69:0a:
aa:b7:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:03 2026 by rpki-client