Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier: Yx/nSZySQBsJl6oU31qbKKAiq34cSU8kGMRsWostrkM=
Subject key identifier: 9D:12:33:27:B5:01:89:70:B5:62:19:C9:A0:9B:6B:B5:BA:E9:C7:B5
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 019D386676651B0EA8EB9616D0FA209CE746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: 01aDFcgwpP0gaeNsCEBXvu9EqVo.roa (hash: X2qj0FduSAsiEFG0pH2Wl6RB6wezxtiHDycSdWfuHyg=)
2: 39rPTu5yX2a1zfysxgm6Jq1HK_o.roa (hash: 6BnKkYXbYywwMGgDtqlqpR6k8qdTXNyGen3SDvJqbAk=)
3: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: gelTWp+TAqxkVM2NoxiNr3cy7ZCf+bkkJ/Qt+vgKmM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:76:65:1b:0e:a8:eb:96:16:d0:fa:20:9c:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=9d123327b5018970b56219c9a09b6bb5bae9c7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:9f:03:49:1e:f2:6b:f3:fa:e1:31:35:d7:
80:12:e7:41:5e:52:bd:b2:ab:cf:42:4d:1d:40:42:
71:10:0c:85:3f:d7:60:63:37:9b:52:27:7f:b8:2b:
fe:b9:15:1e:82:47:b3:a0:fb:02:ec:da:3d:33:32:
22:ea:4c:14:40:f5:2a:66:44:a0:ab:19:80:cb:40:
a4:87:99:ec:5a:e0:82:67:0c:f2:d3:aa:07:a9:cf:
d6:5a:7b:f6:4e:79:72:97:04:aa:7d:d4:27:87:d3:
5b:c5:a0:8e:f2:51:21:3a:b2:73:5b:95:b2:d7:8f:
90:8e:91:5b:53:64:89:d4:6a:1e:62:ef:6f:18:bb:
89:43:57:63:f3:95:14:5f:a4:ec:aa:20:a2:f3:1d:
2d:b1:13:13:dc:b4:06:17:22:fa:0f:df:f5:00:0d:
f8:31:09:62:46:79:31:30:ec:60:3b:bb:bc:94:4b:
79:e8:51:2f:d0:24:db:0f:be:f4:11:64:1d:72:85:
ff:2e:13:1c:47:c6:68:6d:ba:1c:b0:05:7d:2a:bc:
1e:ae:06:77:b0:e6:38:c8:55:4a:95:03:bd:be:88:
31:29:89:8d:4b:76:8b:01:11:20:ef:07:f8:96:e4:
52:6d:45:59:8b:ab:ef:6a:b3:74:ba:9a:97:09:da:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:33:27:B5:01:89:70:B5:62:19:C9:A0:9B:6B:B5:BA:E9:C7:B5
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:cb:e0:52:00:46:b2:5d:3f:49:64:35:32:c9:a2:7e:d0:
5d:52:7b:95:e8:d3:23:5c:58:69:5a:1c:fc:4a:5e:b3:6e:73:
24:67:e7:68:54:b7:63:ad:d8:d9:aa:f9:cc:b0:b7:2e:43:ce:
bf:7d:3f:c2:2c:f0:14:a6:5e:0a:ec:7b:e7:85:41:14:ed:35:
26:bf:26:54:8f:36:4b:b2:e6:d2:b3:b4:82:9c:88:2e:5d:bb:
51:b7:ef:6f:29:dc:b6:a6:f7:42:dc:ed:59:21:f4:58:58:d1:
cf:00:21:91:78:0b:a2:3e:d5:1d:6c:8a:74:84:57:70:d7:0d:
03:bc:81:62:95:ee:86:97:38:df:52:04:e5:86:39:d6:01:00:
0f:ff:78:36:96:c4:99:8f:8e:0e:c6:18:01:99:81:41:84:37:
3b:11:e4:bf:c4:d9:d7:80:cb:51:e1:e5:ba:46:6d:58:25:12:
33:4f:cb:3c:06:15:65:60:12:53:67:b1:40:bd:b5:34:ed:fb:
3a:50:2c:16:83:3c:b2:25:b1:13:30:82:cb:cc:26:9f:43:1d:
1f:15:a2:b5:12:27:bf:e6:96:3e:ba:11:2d:ab:77:6d:49:e2:
d2:93:28:70:5e:7f:a7:14:63:ce:31:b0:45:55:8e:c9:a2:db:
82:fa:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:15 2026 by rpki-client