Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: 78dBSEI5RApmlHzDwAuBHKdNNcLlhiuol3ETgaOQmyM=
Subject key identifier: 34:F3:60:C6:F9:18:69:70:1F:09:D2:65:11:B8:64:C2:82:AE:70:E4
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019D38D33EA0DF9008C47AAB7B8C2539D348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 107D
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: YOWRNaD8WjRQfQ+pNMS5DXKshdeh7PKrB7LT0PxEj2A=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:a0:df:90:08:c4:7a:ab:7b:8c:25:39:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=34f360c6f91869701f09d26511b864c282ae70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:e4:d4:82:92:4a:04:07:7a:36:e1:c3:4c:
89:98:e5:a8:d9:91:00:ab:55:ef:c0:c0:4f:fd:95:
b6:ba:75:b5:55:5b:bd:c9:aa:ba:9a:bd:3c:0f:73:
e3:d6:b6:01:b2:88:d8:47:92:0e:81:93:9f:62:dd:
18:84:af:20:3a:5a:4d:c0:a3:ef:d2:23:27:3b:45:
bb:7f:35:51:3f:62:98:e9:94:aa:2f:bc:e1:f6:7b:
f2:1f:98:7f:15:4d:00:63:1b:15:61:25:cf:6a:1a:
17:bf:67:0e:a3:e3:99:e1:c1:8d:5c:aa:8e:e4:91:
35:c2:3e:80:5b:2e:1b:5b:ef:b3:71:94:3f:af:3f:
1d:df:98:8f:e8:ed:86:ee:75:1c:35:df:ca:51:3a:
c2:6d:66:32:92:3a:93:96:99:8d:af:17:c6:89:83:
3d:a8:05:06:c6:84:74:6f:6f:5f:a7:99:b1:64:6c:
b7:5f:c9:fb:ab:89:b9:6f:b3:e0:3d:82:2c:68:68:
29:bf:06:b6:c2:a3:b2:2f:02:7d:20:c1:23:67:d3:
88:78:a1:0b:2f:7f:c5:dd:f2:35:3d:48:cd:3a:b9:
8e:cb:8e:f0:2d:ea:60:54:1f:6e:19:97:2a:c1:db:
af:1c:46:f5:82:6c:d1:9d:96:6b:62:aa:6a:08:d7:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:60:C6:F9:18:69:70:1F:09:D2:65:11:B8:64:C2:82:AE:70:E4
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:de:15:58:96:64:fc:01:a6:92:1a:37:34:3a:2d:08:bc:
b0:ea:8a:72:4e:85:8e:95:34:cd:a9:8e:ef:a9:ec:38:12:41:
d0:6a:7b:31:76:16:b0:3a:d6:c9:df:a9:bb:db:2b:17:5b:bf:
0c:d9:47:d5:73:7f:ef:53:3e:3b:45:a6:94:09:da:0b:9b:4f:
cc:1e:6a:07:57:f8:05:ec:50:e4:ae:63:d1:43:28:bc:01:d6:
77:0d:e5:ff:db:0a:cf:c0:a0:d1:3f:44:6f:af:ac:ae:01:20:
69:9d:67:9b:91:d6:48:66:a4:59:0a:dc:77:a4:80:c5:59:46:
36:23:c2:00:e9:c0:62:40:a4:05:77:eb:14:bc:36:2f:82:5a:
9d:4e:56:ad:33:29:2b:24:90:3f:98:1a:49:c2:6d:52:81:3f:
9f:38:ce:6d:4d:b4:af:00:32:d1:43:11:59:39:cc:9e:3b:ad:
d8:d7:92:57:ca:d0:49:46:d9:b6:34:c3:53:e4:f8:8c:3c:6e:
7b:74:80:b6:b3:1f:37:09:a8:aa:bd:f6:cd:28:4e:91:97:eb:
aa:a3:71:84:ed:cd:f8:33:d4:73:58:6f:9d:e5:77:d0:2f:0e:
38:9c:dc:26:85:38:fa:e7:28:cb:42:14:15:32:fa:12:ee:1e:
b9:20:f3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:57 2026 by rpki-client