Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: BLDBpCLnPoYIGTlwxw4p45aVXb759kKZXsf9jnpb2Iw=
Subject key identifier: 28:96:EF:FA:85:AA:18:D2:D9:60:BD:25:CF:C7:86:0B:C3:E3:77:53
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 019D3752B097DE9EF579E6CBDE2A52A3037A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0DAE
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: d3qvh5TrUHY65qRWnJXVkds8gTL5QHdl649uKOcx18M=)
2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b0:97:de:9e:f5:79:e6:cb:de:2a:52:a3:03:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=2896effa85aa18d2d960bd25cfc7860bc3e37753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:fb:a1:01:ac:79:54:05:0b:e1:2d:44:6f:
2b:44:07:42:08:e8:2b:19:4c:33:8d:03:31:54:2f:
d9:fc:cb:b1:e0:02:bf:49:aa:06:23:e9:8a:30:da:
8a:a6:f4:60:7a:cd:f1:f2:06:49:d1:fe:62:1f:b0:
14:47:af:d0:c1:0c:d1:02:8c:a9:85:37:67:f0:fc:
90:8b:22:93:0e:50:47:6a:40:f1:b1:31:75:61:cb:
de:b3:da:28:ea:c7:88:61:41:08:73:0e:74:4d:78:
c9:5e:ad:ce:fc:b0:10:93:87:02:7e:b9:f3:b7:ee:
4e:27:70:0b:77:35:53:f9:85:bd:6b:a2:e5:fa:3e:
6f:f3:3c:2e:80:9d:74:41:d8:8c:b9:db:c9:7d:7c:
4b:d4:e0:ec:e4:39:e8:c7:83:ea:b1:5b:2f:5c:9b:
b7:d0:d0:62:d5:2b:cf:cf:4f:df:05:8b:0c:3b:83:
62:d3:ee:21:4b:e5:7d:c9:3b:28:6d:38:b1:9d:24:
6a:ec:a4:f9:a9:4e:5d:00:29:ec:72:8f:12:00:4c:
79:cb:44:8a:02:73:99:ab:b3:20:20:8c:67:b2:c0:
45:60:cd:7d:b2:ab:3b:ce:14:22:fb:ca:84:2d:23:
cd:34:5b:d1:45:21:ba:2e:fc:00:cf:e2:99:15:c2:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:EF:FA:85:AA:18:D2:D9:60:BD:25:CF:C7:86:0B:C3:E3:77:53
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:4f:a9:c9:ee:3f:8e:0d:47:a3:6e:52:98:08:97:0c:42:
d4:cf:9b:15:2c:8c:df:2f:c3:00:54:38:39:e7:38:ad:a9:b3:
8d:9b:db:16:ea:52:02:d4:cf:a9:ab:d7:45:e0:46:ad:53:7b:
62:ca:3d:e6:8e:af:23:00:40:db:03:41:88:03:cc:2b:db:cc:
11:ec:a3:86:58:f3:d2:8c:16:89:8d:02:b4:97:16:d3:07:bf:
8f:63:59:ef:31:12:78:0e:f2:87:50:ec:ed:c5:f3:6b:30:ec:
28:17:6f:4f:4f:14:c9:52:7d:6e:da:51:79:4b:25:e1:bf:ed:
df:da:ac:9e:7d:78:b2:da:ac:38:95:ab:27:9f:5b:c6:08:c2:
47:fc:84:65:0a:07:f8:80:64:cb:73:80:a4:45:68:d0:6e:e1:
7b:b2:4b:e0:5a:dd:cc:8f:e5:67:d4:86:a7:33:4d:9a:c9:87:
d1:f4:5f:c3:3b:91:30:76:17:cf:93:27:3a:20:c1:31:63:97:
f0:82:27:68:08:9a:24:29:86:bd:ab:11:70:5a:34:14:8b:02:
24:71:d2:17:2a:9c:2f:61:2d:c6:cb:a7:ae:a6:ad:56:51:33:
1a:1f:35:95:27:8f:e9:81:83:ca:8d:57:ab:62:ba:9c:69:c5:
4b:aa:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client