Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: b9Lcx1KHgUjtv++Qvq48T6sqqMjwOsgCphgnXQQPhLE=
Subject key identifier: 82:EB:92:91:C3:AE:19:9D:83:70:35:0B:85:63:30:3B:09:03:C9:89
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 01A0010174DA0B3F8189CD7635DE10F44CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:01:07 +0000
Manifest this update: Fri 14 Aug 2026 16:01:07 +0000
Manifest next update: Sat 15 Aug 2026 16:01:07 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: EcX12YYcgHWngHJ3jvFUnmCmG2LWZvi5PgT0mKAjjcE=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:74:da:0b:3f:81:89:cd:76:35:de:10:f4:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Aug 14 16:01:07 2026 GMT
Not After : Aug 15 16:01:07 2026 GMT
Subject: CN=82eb9291c3ae199d8370350b8563303b0903c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:ee:86:0c:68:9b:52:1f:7f:9f:7a:2a:19:
18:a3:73:69:ad:be:39:28:3c:95:c0:eb:61:a3:ae:
71:ac:9d:fe:a5:03:cb:4b:77:a5:79:7c:09:b1:15:
a3:07:82:17:fa:52:aa:8d:87:d5:20:fa:bf:73:4f:
d4:52:27:5d:c7:25:67:c4:f5:9f:d4:aa:54:a7:06:
31:08:19:0b:aa:39:e4:4d:65:76:e4:9f:fd:93:ad:
64:7d:b8:74:b7:80:b7:69:9e:cd:b8:91:ff:29:e6:
70:1e:32:88:16:19:51:f4:ae:b1:20:11:4f:fe:2d:
b9:78:60:fe:40:e9:4f:bb:54:d6:6b:b5:98:3f:d0:
26:4a:14:fd:70:bf:66:33:58:03:1a:69:77:67:d1:
67:4b:99:4e:81:88:41:b6:00:97:67:40:ba:a0:a8:
1b:3b:9a:ed:7c:62:a1:c6:00:92:98:d5:c2:c2:dd:
99:f9:28:e5:4a:67:db:c8:88:11:f4:bc:5b:5e:f4:
92:73:08:2d:6d:17:b5:4a:48:ca:14:a5:56:b2:07:
2b:72:62:cc:f7:d9:5e:d2:32:f0:3c:cf:f4:f4:0c:
8f:27:9d:04:46:16:ef:ab:d8:81:44:e8:72:9a:4f:
db:39:72:18:85:59:8c:ce:dc:b0:66:dc:25:75:c0:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:92:91:C3:AE:19:9D:83:70:35:0B:85:63:30:3B:09:03:C9:89
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:df:27:a3:af:fd:1f:03:03:56:3c:f3:2b:9e:01:82:ec:c5:
10:38:a5:64:42:c6:61:e0:bb:96:ea:be:3d:e1:c9:ff:bc:9e:
3d:68:a3:1c:d3:24:c7:33:5a:2b:48:86:88:b1:58:8d:ec:dd:
e9:79:47:c4:ff:e7:bd:27:cd:4d:44:0b:c8:c8:21:96:2e:81:
cd:35:8a:b1:f5:a5:88:c9:40:30:42:fd:6c:2e:cf:7c:93:0c:
e8:eb:29:74:06:82:2c:75:37:ea:fd:a6:fd:4b:23:2e:93:54:
eb:4c:c0:d5:a3:71:57:53:03:32:cf:f2:53:7f:bf:7b:7b:bc:
bd:bd:51:cb:6e:36:3b:3b:d0:9e:fa:43:05:67:6e:f9:bc:1c:
96:ef:23:bc:7a:38:be:42:d8:cf:00:bf:eb:95:e8:09:8c:66:
de:77:d1:f7:98:de:59:8d:d4:ab:df:96:87:b2:10:4d:45:a3:
f6:42:10:7d:08:47:60:36:7c:e7:a9:98:11:55:65:4e:0b:3f:
10:98:81:1d:88:fe:c2:85:fd:d1:0e:83:d5:1d:5b:40:4a:5d:
3a:45:09:48:32:94:bc:7b:60:2d:11:bd:3f:0c:c2:aa:68:25:
de:20:cc:57:a1:4c:dd:10:44:d7:11:c9:30:d5:38:23:8b:f7:
92:6b:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:18 2026 by rpki-client