
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: ghANHE3GA1Ko8s+GAs5+cYFrclYws9Ou3TRKVanGvZk=
Subject key identifier: 9A:CA:12:E4:2C:91:7D:33:E8:8E:6F:90:D5:E2:F9:62:33:15:5F:D9
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 019D37F6F9975AE723CC957664F1A508AB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: rOLCHUzYON8UDf3g/y5tzAcvx+CORnGYLqvuvgrkioo=)
2: m_4G_0Oxit4jN9Mi8en63Te59ko.roa (hash: NR2mOcFmt971BLwl94JPSXCXHeE7+txzuM2W8JbnNaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f9:97:5a:e7:23:cc:95:76:64:f1:a5:08:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=9aca12e42c917d33e88e6f90d5e2f96233155fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:be:84:5e:a5:e2:85:21:2a:29:bd:09:cd:
27:f9:70:91:94:25:38:54:6e:d7:d6:39:90:32:b1:
d6:cd:59:70:72:da:db:2a:50:40:a0:55:3d:fc:e6:
77:b2:a5:29:f7:4b:cb:6e:72:47:c3:c1:d8:ad:71:
94:40:94:b8:fe:01:0f:ea:7e:c1:31:d1:76:f4:e2:
c8:79:50:d3:7f:de:7f:54:b3:ac:bb:2a:7f:28:bb:
86:b7:d4:55:c1:97:a5:4c:6d:25:d1:35:82:55:3a:
b1:63:7c:67:23:99:1d:67:03:5d:ef:95:35:96:05:
f4:52:70:27:40:bc:aa:22:fe:86:db:56:85:71:b6:
5f:b2:9f:ba:5d:ca:e9:07:0e:c4:28:35:8a:b7:28:
19:f4:90:1a:38:f3:79:a8:d5:a7:85:8f:80:04:f5:
3e:81:a7:3f:50:ee:fc:bc:22:e8:88:72:c8:27:d0:
01:f6:5a:41:a1:45:b4:62:d0:4c:8c:81:67:56:9b:
71:70:83:d9:dc:93:de:f3:38:cf:41:ff:c9:e6:6d:
4a:39:fa:80:85:b9:00:9d:f8:7f:0a:31:e6:e7:f4:
a1:40:3f:45:45:a5:19:d4:f9:fc:3b:b3:1b:0a:4e:
e9:e5:01:8d:96:74:d6:5f:f3:9e:86:99:00:58:f2:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:12:E4:2C:91:7D:33:E8:8E:6F:90:D5:E2:F9:62:33:15:5F:D9
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:16:e3:9e:99:fd:23:49:46:50:8b:12:2e:e5:ba:e9:b3:
1b:70:4e:ce:b3:be:ae:39:eb:e8:08:66:37:62:43:84:c2:24:
23:af:fa:a3:bb:b3:65:ae:d2:9d:ec:29:13:5b:12:ba:62:cd:
56:69:d6:38:64:c2:1a:01:86:c0:9f:55:00:5a:af:46:21:f6:
ab:96:94:d5:b4:10:4f:ec:a1:bd:d2:0f:06:86:e5:72:4b:0d:
0f:fb:89:a6:22:22:ae:c8:52:f7:9e:f0:8a:64:bc:38:1a:9b:
c2:9c:80:4e:1f:ee:a4:57:bb:b9:a1:6f:47:26:d0:fd:69:d3:
69:20:73:1a:13:8c:98:cd:95:e0:cd:98:c9:26:4c:28:f7:54:
f2:e1:94:08:70:f8:0c:bf:fa:0a:2b:dc:94:88:fe:85:db:ea:
83:24:ba:c0:d6:97:05:04:56:4f:75:ab:4a:16:0a:53:33:5d:
ce:11:48:41:b2:17:ce:8f:31:73:07:06:d6:01:24:aa:76:5d:
54:73:31:fe:5c:0b:6a:b6:7b:db:0f:3d:96:ee:57:ca:97:c8:
a3:f8:87:ec:e1:c2:8e:4a:bb:d9:7f:5b:7c:34:91:0e:cf:1b:
bc:72:b2:24:98:45:90:be:ad:db:49:74:f3:04:fb:85:0f:fc:
84:6b:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:53 2026 by rpki-client