Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: gBNVV/q4JIxzoMjTp2D0LCLWDzUHsIsZ5G8AcEF9HCM=
Subject key identifier: 23:D2:19:C0:5D:55:7C:7E:1C:75:1E:58:21:EC:C4:20:50:67:E8:5E
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 019EB7A19BE3DB78DE23218245AD62C29F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: A9
Signing time: Thu 11 Jun 2026 17:01:22 +0000
Manifest this update: Thu 11 Jun 2026 17:01:22 +0000
Manifest next update: Fri 12 Jun 2026 17:01:22 +0000
Files and hashes: 1: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (hash: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: tYwLHkk3nslk2tltN8+eK+5/711MehZiu0Rp64xd7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:9b:e3:db:78:de:23:21:82:45:ad:62:c2:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Jun 11 17:01:22 2026 GMT
Not After : Jun 12 17:01:22 2026 GMT
Subject: CN=23d219c05d557c7e1c751e5821ecc4205067e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:1c:28:c6:17:17:05:32:9a:98:24:41:c4:
14:6f:f4:7a:42:ab:5a:f2:fb:fb:d0:67:66:bc:8a:
c6:04:4d:40:d7:66:25:c5:7a:f8:0c:f5:f3:1d:d6:
15:b3:a0:87:aa:b5:6a:95:1c:dc:60:0e:89:bb:97:
c2:c9:26:54:df:d8:cc:18:55:e4:e2:79:c0:7c:e3:
70:ce:af:b1:73:48:41:dc:88:91:80:2f:fe:33:b4:
23:50:7f:39:cb:8a:18:81:36:dd:3f:2f:0b:fc:26:
7d:fd:8b:ba:b2:a4:a3:8b:3b:8a:7e:1a:11:b9:ce:
29:7a:e4:08:6c:d8:fd:e5:7d:48:07:dd:00:b9:c0:
4f:ee:97:10:50:95:23:80:46:0a:77:50:15:9f:0d:
82:a9:35:d0:d1:20:50:f6:ea:f3:8b:7f:a0:db:bf:
97:be:22:ec:39:ab:52:85:96:50:4e:c3:41:e9:f5:
78:11:59:d4:7c:5b:c0:4f:8e:06:32:12:63:09:d4:
ca:c4:7f:3f:60:c3:ca:ed:ed:3e:8e:b7:ce:e4:d1:
bc:98:7c:04:70:0a:71:73:fe:7b:26:49:2f:16:8c:
ba:23:d9:0a:01:a4:53:b2:4d:0b:84:89:a1:5b:a0:
d3:10:03:d9:ce:a3:ac:d2:d4:58:02:de:dc:ec:81:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D2:19:C0:5D:55:7C:7E:1C:75:1E:58:21:EC:C4:20:50:67:E8:5E
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:5e:c5:5c:e3:cc:ca:30:68:cb:ff:52:fd:ba:3f:73:80:
83:f8:13:f8:9b:2c:9b:5f:d6:0e:47:25:9a:2d:ae:6e:c6:56:
9f:bb:8e:0c:b8:e2:19:c9:72:47:33:7b:40:1c:fe:4e:63:8c:
ed:3c:ab:9e:9e:df:95:cc:ec:90:f5:7d:aa:04:fb:c5:2f:46:
90:f1:ec:73:98:24:9d:5e:e1:bb:80:67:a9:45:f5:ac:a3:e2:
4b:d7:e0:1a:b6:8f:9d:d1:e3:2d:e6:a2:ad:3d:d7:bd:1a:59:
9a:8f:d8:7b:83:71:50:14:b7:e3:4c:fd:6a:08:13:5b:05:8c:
55:49:e5:54:2d:3a:5d:cf:70:1b:45:f4:2a:86:d0:1d:32:9c:
59:08:82:5c:e9:b2:34:0c:45:1a:e9:6b:8c:f7:ce:ab:de:6c:
f8:ac:c6:f5:ae:9a:ce:27:9c:40:df:8d:aa:29:f3:9e:58:79:
33:6f:ea:d0:b2:e4:df:0a:1e:32:1d:20:a6:6b:8b:ec:67:75:
c8:30:37:7e:16:87:d0:a9:f7:0d:94:f7:55:9c:65:e0:7e:72:
9a:a0:f7:88:16:3a:f8:bb:8c:b0:1e:9f:a5:e7:be:85:0a:13:
20:53:59:8f:5f:f3:2b:f0:e7:a1:fb:02:8e:96:f7:71:68:16:
01:34:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:36:15 2026 by rpki-client