Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: 2acvTkP7ouvyuq1p8tPDCgIZOL8ap0CUHWha36iWv28=
Subject key identifier: 41:3F:FB:11:0C:95:25:3A:95:03:59:CE:C6:F3:A9:6A:95:3D:5C:B4
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019CE11017676AEEE1BA8FB2EA95AB9CCBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: E7
Signing time: Thu 12 Mar 2026 08:00:53 +0000
Manifest this update: Thu 12 Mar 2026 08:00:53 +0000
Manifest next update: Fri 13 Mar 2026 08:00:53 +0000
Files and hashes: 1: 5JsNsuuUapw5fDgkbUkuWEzMsLk.asa (hash: RxL4Yv7FvjiasU1GewN7L6R6PTxiHwL1wYEDnRLK5b8=)
2: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
3: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: Fpgk5s0POrQ8+dJfEDAbMyjM6gUquwkPVSPYaoUnuFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:10:17:67:6a:ee:e1:ba:8f:b2:ea:95:ab:9c:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Mar 12 08:00:53 2026 GMT
Not After : Mar 13 08:00:53 2026 GMT
Subject: CN=413ffb110c95253a950359cec6f3a96a953d5cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:9b:dd:0a:b0:72:a3:fd:6b:de:86:11:f6:
d2:23:42:0e:43:a9:7d:ae:cd:46:6a:2c:bd:db:b3:
99:0b:fa:6d:46:b0:e6:43:b5:38:67:8c:e5:73:b8:
a2:2d:6a:c5:f9:c1:5b:a0:77:a8:e5:f2:bd:4c:69:
8f:5b:06:3b:fc:f3:bd:d1:61:24:37:ba:80:95:c0:
a9:cd:fc:63:38:b5:24:23:2b:12:c7:eb:3d:bf:b8:
53:32:20:4d:7c:70:eb:49:5e:41:14:c9:8c:d5:36:
79:44:db:05:c1:8e:b6:cd:8a:4d:e3:5f:6f:92:25:
74:27:49:b2:2b:cb:8e:5f:c3:f4:61:1f:6e:bf:ae:
6e:ed:0a:62:b7:98:05:0a:87:17:7e:54:0d:06:b6:
6a:d0:22:e5:7c:20:0c:e1:0a:28:73:b0:80:9c:01:
5b:e3:e8:58:e3:a8:b2:b1:6f:e5:40:ce:9c:66:2e:
69:bc:28:e0:5b:31:7f:64:52:09:38:0e:03:9d:42:
19:9a:cf:41:14:86:75:98:2d:66:7b:7b:91:86:7c:
b5:13:1e:43:ff:37:5d:e5:55:7e:5f:58:a0:63:4f:
a7:df:38:0c:51:24:82:6e:1c:1f:63:66:b7:df:6f:
5b:08:cd:f7:e4:e2:e2:fc:eb:8f:5d:f9:07:95:b5:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:FB:11:0C:95:25:3A:95:03:59:CE:C6:F3:A9:6A:95:3D:5C:B4
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:74:25:99:e7:37:8f:84:8e:8a:d7:e3:50:4b:49:b7:2c:3b:
f9:aa:6f:3a:7b:4e:30:51:b8:d6:70:11:38:57:80:6d:96:06:
22:c2:44:ae:5c:5c:7e:6e:e7:3b:99:72:58:e7:2b:76:95:1a:
7a:93:e5:9e:a5:f3:78:43:12:a0:c2:04:40:29:0b:43:b4:60:
a6:99:5b:51:f6:4f:6a:15:83:37:c1:78:53:37:2e:9f:fa:3f:
b7:4e:06:bb:12:f1:f5:78:f2:c9:59:09:fb:a5:b2:99:e7:bb:
da:e2:ad:fe:2e:66:15:dc:92:23:3a:8e:d0:b6:3c:89:b8:e3:
96:df:07:12:4e:e6:36:eb:d0:cd:25:e9:95:85:f9:e1:a1:2f:
c4:2b:04:21:e0:71:41:3d:be:73:ad:eb:bb:22:98:4f:4f:5c:
a3:99:66:34:51:a9:65:b0:85:ee:1d:7e:50:ee:ca:26:8b:13:
71:3d:28:8a:a3:0f:7b:e1:bd:94:90:9e:87:dd:55:6d:a8:9d:
d5:98:ba:7e:06:de:e9:1e:d3:a5:87:17:af:bd:59:ed:5d:21:
ed:52:2c:f5:a3:c3:ad:2b:7b:fc:3f:1c:15:b8:1d:78:8f:7a:
25:b6:74:f7:25:eb:cc:9f:1f:5b:7f:13:54:1a:e9:98:aa:4e:
d7:d8:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:52:37 2026 by rpki-client