Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: 4AcO3mB+q6JUOYzt9PFCPXGIIe5EDY1gHJaTNiTlgqg=
Subject key identifier: 69:16:38:DB:2A:C1:68:67:AE:19:36:F1:C4:1B:EE:3E:09:DA:EA:25
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019E30047F89929D219212BE4E8D36B375FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 10FD
Signing time: Sat 16 May 2026 09:01:01 +0000
Manifest this update: Sat 16 May 2026 09:01:01 +0000
Manifest next update: Sun 17 May 2026 09:01:01 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: 91WI1UvdSl+PQg3z8+gZCbvJr3dIYLJOMmmUMBEVJek=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:7f:89:92:9d:21:92:12:be:4e:8d:36:b3:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: May 16 09:01:01 2026 GMT
Not After : May 17 09:01:01 2026 GMT
Subject: CN=691638db2ac16867ae1936f1c41bee3e09daea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8c:f9:ef:38:55:a4:56:ad:9a:c4:49:86:8c:
91:6d:e5:e6:75:9f:ea:6b:3e:7e:19:c3:53:37:be:
ee:e1:3c:1d:75:ef:5f:76:e6:e0:f8:1c:d0:51:cd:
a8:e9:5c:cc:d5:e7:a2:d1:bc:4f:8a:8d:82:78:a7:
d2:5f:ff:3c:08:fe:7b:85:24:30:40:f0:b8:5b:a4:
52:d3:12:14:ec:c1:e7:e5:37:56:c3:49:52:1c:9b:
c6:94:a9:4a:95:7a:b6:b4:d3:a7:de:72:a0:57:8a:
42:f1:49:52:91:38:1b:03:b8:a5:4d:62:6e:53:92:
fa:08:0c:43:f2:b5:4d:e4:a4:8e:ca:98:bf:15:f9:
2d:0b:c4:0e:a3:98:39:c9:ff:5a:a0:b0:78:71:da:
4a:0e:d9:3c:22:a8:4d:f8:14:31:06:6c:10:2a:7a:
ed:7b:c7:e8:7c:67:a1:b6:a6:21:34:0d:03:47:0c:
a6:f0:44:62:70:f4:a2:2b:52:69:62:59:92:80:bd:
c3:2d:96:14:6b:84:5c:09:47:a6:08:d2:84:2a:e4:
6b:3a:be:9e:e7:95:ff:9f:27:c5:14:69:d2:a3:8a:
60:d0:38:26:ff:fd:01:7a:7c:5b:b2:53:00:55:14:
4f:30:52:ce:86:2c:cc:87:20:ea:cc:43:b5:8f:a6:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:38:DB:2A:C1:68:67:AE:19:36:F1:C4:1B:EE:3E:09:DA:EA:25
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:c0:85:95:27:9f:4c:c7:30:34:eb:af:d4:d8:c2:e7:f4:
82:14:66:0e:60:7f:18:a9:05:c6:62:44:6b:46:a6:7d:90:19:
76:e3:df:e5:c2:3c:1d:40:23:99:57:d5:a1:cc:94:6a:2b:56:
30:8e:b7:9d:20:da:d7:58:0c:fd:bd:e9:1b:18:40:f3:7d:10:
f8:12:20:91:bd:16:b6:d7:d0:c8:13:39:ec:e6:9f:c5:c3:5d:
bd:13:6a:9e:13:22:7e:a3:58:98:ce:fe:17:67:18:8c:f9:1f:
38:67:9e:89:d2:97:da:9c:a3:b8:0e:51:8c:df:f8:bb:a8:0c:
d5:7c:36:7e:7d:88:d4:9f:b7:48:a9:ed:24:4a:19:3d:94:7f:
c8:01:f3:30:87:6d:b9:5b:7c:8f:71:c9:25:52:41:65:7d:e7:
37:76:da:bf:ec:3a:74:02:0e:44:0f:c7:ce:d5:3b:15:bd:41:
7b:a0:6b:c8:6d:15:d0:23:f2:3c:b3:c4:22:cd:69:ba:fd:2d:
3c:0b:78:aa:b2:68:f7:c6:16:8f:b3:92:5a:25:68:60:c7:cf:
b3:cf:bf:78:82:ab:b8:7d:5b:ba:1d:36:a0:8c:d9:ac:ec:5e:
15:43:c8:1e:24:31:3b:8e:4f:7c:4d:d8:20:89:44:20:9e:58:
30:e1:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:52 2026 by rpki-client