Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: aeJn0iOwy6rk8zCJksi+rgB+6cdSUhLJ3MVe4Qa/j1A=
Subject key identifier: 1B:6A:B0:6C:F9:9B:00:03:C5:E7:12:E3:15:A7:FF:DE:B8:05:54:B8
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019D386646D8D46D27FEBE2982E5B0569C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: wovyAhDPufYSeM+QCYtBv8zKm+NgqtzSdoTDZ8H2154=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:46:d8:d4:6d:27:fe:be:29:82:e5:b0:56:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=1b6ab06cf99b0003c5e712e315a7ffdeb80554b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:86:b3:dc:a8:3d:98:8a:69:fb:09:0d:40:
c7:dc:fa:e8:31:98:e5:23:52:17:7d:7e:d1:85:4d:
47:a5:87:4c:89:d0:ea:24:28:3c:ab:ba:0f:bc:3c:
21:5d:61:7b:82:00:ef:82:71:ff:3b:60:96:f9:01:
58:68:37:8f:76:6d:3a:65:e0:07:a0:a7:53:e6:fb:
3b:9e:c1:ae:73:de:d2:76:9e:39:a4:74:ed:85:da:
58:01:09:c2:d4:ac:d3:c8:fb:f3:c0:54:8b:26:65:
fa:76:aa:78:4d:a7:0f:ed:60:f8:62:2d:f2:94:f9:
44:89:a0:42:5b:0e:a6:fb:75:88:e6:0f:13:ca:0d:
a4:62:8e:51:fb:9e:2c:78:f6:0b:f4:3d:d1:7f:13:
1a:d1:04:b6:f3:79:07:33:c5:f5:aa:63:c9:aa:09:
ac:e2:bb:7f:1e:f4:ea:96:07:2d:f6:76:fe:04:54:
cb:3c:74:13:c2:70:99:87:91:e5:e1:31:ed:6c:67:
1f:70:8e:41:97:2f:13:60:39:65:2b:06:1c:ce:96:
e1:17:ef:46:92:b6:33:13:20:fc:e8:bc:c4:c7:96:
de:f2:e1:2a:f2:30:dd:14:1e:ac:d1:ba:97:c0:17:
c7:9b:e6:17:bb:9c:fa:55:e7:82:f9:91:24:e8:c8:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:B0:6C:F9:9B:00:03:C5:E7:12:E3:15:A7:FF:DE:B8:05:54:B8
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:97:82:cb:a3:d0:ba:ac:0a:d0:44:ee:c9:96:85:fc:99:
a0:77:b9:05:1c:a3:5e:68:07:dc:b5:8f:74:87:17:8e:09:68:
cb:e5:81:52:59:37:f7:f5:a4:27:94:83:ae:72:53:72:77:1d:
04:d5:93:f5:11:c2:f4:2a:7d:be:c1:51:a7:af:50:3e:fe:dc:
ec:47:a9:4a:a3:12:e8:1c:47:07:97:ef:78:5e:02:98:a2:a2:
b8:17:84:e0:ee:41:18:8d:d6:aa:d5:80:5a:1f:1e:7b:31:ce:
65:df:68:8f:17:a9:6d:7f:1d:64:8d:29:b2:72:7a:4f:9d:6f:
9a:e9:18:be:f1:c5:17:07:db:7b:43:8a:e4:16:45:df:dd:9e:
3a:7d:99:79:3e:8a:82:05:3f:99:99:a5:00:e9:74:38:f0:14:
2e:f4:2e:df:e9:58:ae:9f:10:3e:6a:04:ce:19:23:31:91:14:
d3:80:f4:2d:93:a4:31:01:a4:6f:fb:2f:0c:8d:db:89:40:60:
65:43:22:90:f2:4d:35:24:2b:4a:c8:98:7c:39:3b:c3:c8:3a:
94:88:a6:8d:d2:b5:9e:75:87:80:2c:1f:01:9c:ca:70:87:96:
c5:f3:ab:18:ab:be:60:9e:29:9c:84:c5:3b:f6:75:c5:67:31:
8c:98:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:20 2026 by rpki-client