Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: mfpmznMKFT/6CCVprrdB1tBABKTta6WxeVCQ/rg0U7Y=
Subject key identifier: 85:88:07:D8:D5:29:3A:05:E1:4E:00:74:FD:13:5C:50:74:64:87:54
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 69245EB989B62E35CE900159DA34F1C425540EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 0219
Signing time: Thu 24 Sep 2026 14:04:07 +0000
Manifest this update: Thu 24 Sep 2026 13:59:07 +0000
Manifest next update: Fri 25 Sep 2026 16:33:07 +0000
Files and hashes: 1: AS207529.asa (hash: BvphpJpL2uB0KRh6/fjlm/kgQ9a7ekqRvAQY9puR0n8=)
2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: kQLMnOsuwD1zBhj2Vg+Fas+9Je1cVlK9xKMKEJbfe4s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:24:5e:b9:89:b6:2e:35:ce:90:01:59:da:34:f1:c4:25:54:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Sep 24 13:59:07 2026 GMT
Not After : Sep 25 16:33:07 2026 GMT
Subject: CN=858807D8D5293A05E14E0074FD135C5074648754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:c3:ea:b7:77:ce:cd:79:eb:d8:bb:78:ba:
ff:9d:4c:7f:cb:ec:ee:74:b1:49:d1:5a:1c:c7:de:
a7:7a:ed:2a:a9:4b:1a:15:49:18:10:36:d4:e9:36:
aa:5f:ca:af:6b:1b:26:47:2d:7d:a7:d5:08:30:88:
b1:a3:ae:ac:9e:c3:5e:da:eb:be:da:3d:4c:f5:3f:
d2:08:60:95:fe:58:84:91:c6:e2:77:0c:e8:af:2b:
0b:58:0a:11:4b:b6:5e:ae:5e:a2:f7:5f:a9:3a:b6:
09:99:fc:27:c0:cc:d4:d9:21:51:36:9d:24:88:6f:
c9:57:b7:62:56:51:ca:9b:77:2a:5d:fd:18:da:52:
b8:b3:64:7d:ca:81:ea:d9:96:5d:8d:53:12:e8:4c:
27:f8:65:c0:93:e3:de:89:85:d8:be:a2:5b:d0:9b:
6a:28:e0:0f:b5:4e:43:66:8f:67:2f:2a:17:19:1e:
9c:15:81:31:62:34:f9:5f:cc:ab:cd:7f:4d:70:2a:
45:83:6a:43:b0:7b:c9:11:17:8f:1f:9f:b0:fb:ae:
a3:6a:d1:44:af:9c:71:fc:38:1a:8e:85:12:ab:84:
f0:a2:76:6c:ce:39:68:53:29:97:a9:3a:91:50:ce:
05:26:12:a5:74:a3:2a:ec:c1:e4:db:4f:cc:61:28:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:07:D8:D5:29:3A:05:E1:4E:00:74:FD:13:5C:50:74:64:87:54
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:5c:91:aa:51:99:05:87:a2:2e:dc:ba:22:14:98:a1:3d:
20:76:4a:71:ac:01:16:77:1d:d2:7b:c3:af:55:c0:d9:05:d6:
09:d3:06:e9:cb:0f:c5:da:16:d0:fc:fb:94:4f:51:f1:ce:29:
cd:6e:5a:d7:d6:5d:d7:0e:5d:63:08:c7:bb:86:75:e8:80:45:
b9:0e:94:95:bf:8e:c3:4c:a4:14:f2:56:03:3a:90:6f:79:4e:
ed:4a:69:ab:46:0a:ea:69:96:02:c7:2f:8e:14:f4:fc:21:9a:
79:42:78:7a:8c:e8:cd:46:29:1b:91:c9:26:11:a9:e5:c5:c1:
75:e7:56:d7:9f:7f:6f:c6:5b:4b:82:23:67:aa:94:0a:1c:c8:
53:27:03:e8:9b:9e:d9:c7:e9:09:eb:2d:b5:a6:4a:e0:bd:f0:
f9:31:f1:20:0b:9d:64:c6:c7:21:19:10:16:6a:2e:71:11:76:
ed:c9:8b:b4:4e:ea:7c:0f:ef:53:32:7f:ac:fe:ff:e4:9f:38:
b7:0e:67:7f:21:e1:18:29:06:63:c5:ac:2d:91:62:ba:68:f4:
d5:42:7d:59:ff:df:39:4e:68:9e:0c:d1:ca:86:21:42:1f:f2:
ed:75:c4:66:51:07:97:d4:24:3b:63:53:bf:7c:33:2b:14:f7:
1e:22:d0:89
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaSReuYm2LjXOkAFZ2jTxxCVUDr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTlmZWNjM2E0N2I3ODcxMWUwMzQwMjM0NzNmMTVhZDNi
OGQ0OGRmOTAeFw0yNjA5MjQxMzU5MDdaFw0yNjA5MjUxNjMzMDdaMDMxMTAvBgNV
BAMTKDg1ODgwN0Q4RDUyOTNBMDVFMTRFMDA3NEZEMTM1QzUwNzQ2NDg3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJa8Pqt3fOzXnr2Lt4uv+dTH/L
7O50sUnRWhzH3qd67SqpSxoVSRgQNtTpNqpfyq9rGyZHLX2n1QgwiLGjrqyew17a
677aPUz1P9IIYJX+WISRxuJ3DOivKwtYChFLtl6uXqL3X6k6tgmZ/CfAzNTZIVE2
nSSIb8lXt2JWUcqbdypd/RjaUrizZH3KgerZll2NUxLoTCf4ZcCT496Jhdi+olvQ
m2oo4A+1TkNmj2cvKhcZHpwVgTFiNPlfzKvNf01wKkWDakOwe8kRF48fn7D7rqNq
0USvnHH8OBqOhRKrhPCidmzOOWhTKZepOpFQzgUmEqV0oyrsweTbT8xhKB9DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUhYgH2NUpOgXhTgB0/RNcUHRkh1QwHwYDVR0j
BBgwFoAU6f7MOke3hxHgNAI0c/Fa07jUjfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1
N2JiLzAvRTlGRUNDM0E0N0I3ODcxMUUwMzQwMjM0NzNGMTVBRDNCOEQ0OERGOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmN01Pa2UzaHhIZ05BSTBjX0ZhMDdq
VWpmay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05
MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIvMC9FOUZFQ0MzQTQ3Qjc4NzExRTAz
NDAyMzQ3M0YxNUFEM0I4RDQ4REY5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALARckapRmQWHoi7cuiIU
mKE9IHZKcawBFncd0nvDr1XA2QXWCdMG6csPxdoW0Pz7lE9R8c4pzW5a19Zd1w5d
YwjHu4Z16IBFuQ6Ulb+Ow0ykFPJWAzqQb3lO7Uppq0YK6mmWAscvjhT0/CGaeUJ4
eozozUYpG5HJJhGp5cXBdedW159/b8ZbS4IjZ6qUChzIUycD6Jue2cfpCesttaZK
4L3w+THxIAudZMbHIRkQFmoucRF27cmLtE7qfA/vUzJ/rP7/5J84tw5nfyHhGCkG
Y8WsLZFiumj01UJ9Wf/fOU5ongzRyoYhQh/y7XXEZlEHl9QkO2NTv3wzKxT3HiLQ
iQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:11:47 2026 by rpki-client