Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: jny9Tm1OlknBdgMsoDOVEScR/l1Z1KGHe3M8v7zphgs=
Subject key identifier: 02:41:A2:46:52:A9:5D:0F:DA:C1:47:5E:A2:51:4A:A9:28:8C:91:FB
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019FA3051164F0EBB5ECE472054DA59E359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 032C
Signing time: Mon 27 Jul 2026 10:00:46 +0000
Manifest this update: Mon 27 Jul 2026 10:00:46 +0000
Manifest next update: Tue 28 Jul 2026 10:00:46 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: GaPybgu6EJP0Ib7EujXcHQeUU99AiB+kstB7tgFoUL4=)
2: ex3V8jEPHC15OeyVNhlPf888Muk.roa (hash: lL8rDUO+fDpEtiUvL1L8BlBnX7C9eguwrFBzGsL8ZPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:11:64:f0:eb:b5:ec:e4:72:05:4d:a5:9e:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Jul 27 10:00:46 2026 GMT
Not After : Jul 28 10:00:46 2026 GMT
Subject: CN=0241a24652a95d0fdac1475ea2514aa9288c91fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:9c:35:a8:5c:ac:38:b5:e4:24:59:f9:b8:
a7:8c:1b:f3:00:09:13:13:6c:52:22:bb:45:ba:6c:
ea:1a:ec:d4:ae:c2:a8:16:78:94:93:88:fb:82:a8:
cc:e8:cc:a5:4a:14:e5:c4:60:a0:25:e7:a4:a4:c2:
9c:80:56:e9:2a:09:2d:60:fd:f3:8e:8c:0d:9a:75:
ac:24:06:2c:34:63:72:22:52:65:9f:a1:fa:e0:65:
0c:eb:4d:b8:51:80:92:54:4b:0c:d8:88:30:9c:7d:
81:0d:38:1c:23:2c:fa:0e:92:4d:cf:ec:30:48:4d:
10:42:11:c2:d4:77:a7:d0:4f:17:d2:1d:14:22:2b:
f0:58:a3:e1:f1:86:af:f5:1a:5c:ef:15:80:00:b3:
ac:af:e0:63:d9:45:3a:92:f1:e1:46:0a:15:ee:d5:
11:4c:ee:01:82:4d:f1:2e:af:9e:6c:3c:cd:b1:2c:
c7:c1:9f:d7:47:36:12:19:18:b9:d8:11:c5:7b:5e:
d9:b1:d7:64:35:de:30:3c:9d:86:fa:17:77:bd:78:
d7:22:5e:5a:65:14:46:df:d4:13:cb:6f:5c:04:10:
98:41:e8:3c:72:ab:b5:93:ee:27:40:b3:93:33:28:
98:aa:68:7b:8b:ae:5c:23:90:7d:b1:1f:25:ad:6d:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:A2:46:52:A9:5D:0F:DA:C1:47:5E:A2:51:4A:A9:28:8C:91:FB
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:c7:4f:80:0f:8b:1e:62:75:12:b1:8c:b2:a3:d5:16:87:
35:10:2e:88:f5:3f:08:53:e8:09:59:ed:4b:71:03:32:7f:1b:
e4:f8:5b:0d:89:e1:6d:c6:5d:e4:43:41:28:c5:b2:3a:88:4e:
af:5e:d9:7d:c7:ee:95:8f:cb:d0:23:77:b9:b8:51:47:e3:08:
74:5c:8a:37:ff:13:7e:c5:4b:8f:bf:63:a7:48:db:ea:55:44:
11:b1:f6:cd:e2:b5:0a:27:15:f7:69:47:28:9a:91:e8:91:db:
73:ba:e3:af:4a:bb:87:b0:3b:03:bb:83:88:f9:45:eb:58:5b:
2c:d6:b4:0c:50:13:81:5a:b0:27:0f:4c:65:81:d1:66:c6:90:
84:de:4e:7d:86:a4:f1:83:07:d5:c5:80:ec:8f:1b:4b:72:82:
2b:2c:e8:67:b1:35:2d:f1:e4:da:b1:9f:81:9f:26:f7:cc:a7:
8c:5f:e3:f5:14:89:a8:d4:1f:28:19:cf:41:e7:e6:c1:67:c7:
97:55:5a:b3:1d:63:8f:5b:f6:a6:7c:e3:26:42:3e:b0:6b:4e:
ce:6a:0c:f0:7d:b7:53:db:28:4a:86:64:5c:5a:d9:27:01:5b:
20:cf:a8:bd:0a:23:7c:dc:4c:27:13:eb:33:93:05:50:fd:51:
29:c5:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:12:43 2026 by rpki-client