Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: iQhhZyRFjP4OPYoZAGBFWU/xbZEgCZUkReR/jtQS/to=
Subject key identifier: A7:37:6C:31:EA:8E:25:E9:55:01:E2:EE:2A:6B:75:BC:DE:F4:1C:C2
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 019D3752A165C90FBB9B82DED0150C38FEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 1093
Signing time: Sun 29 Mar 2026 02:00:55 +0000
Manifest this update: Sun 29 Mar 2026 02:00:55 +0000
Manifest next update: Mon 30 Mar 2026 02:00:55 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: B2gFUVpJb3UI2wmyZvApAws9R1GK+foWMpkUcf6bSCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a1:65:c9:0f:bb:9b:82:de:d0:15:0c:38:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Mar 29 02:00:55 2026 GMT
Not After : Mar 30 02:00:55 2026 GMT
Subject: CN=a7376c31ea8e25e95501e2ee2a6b75bcdef41cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:5e:b9:c8:87:48:98:35:18:ed:37:f9:27:
d2:92:08:36:a9:ad:d5:f7:7e:e6:96:95:7e:6e:7c:
08:2c:6c:be:ff:dd:cd:fd:85:05:d7:4c:a6:3a:b4:
24:c2:de:17:59:3e:45:20:8d:12:01:6e:6d:2d:f0:
c7:ea:1e:60:d5:0a:c7:85:63:35:8c:be:90:9a:94:
d6:c3:46:d6:0b:28:52:ce:be:da:03:81:17:17:6b:
3b:a8:cc:2c:7a:15:b0:f4:dc:c8:bf:18:95:fa:7c:
b8:72:16:6a:89:fa:09:f2:64:7c:56:50:7c:8b:a9:
9a:89:38:18:36:0d:37:01:ee:63:05:88:37:44:e5:
43:01:d6:39:8a:48:4b:49:fa:0f:eb:92:fa:2c:c1:
f4:50:56:11:b4:e4:04:20:ef:b8:00:69:4d:07:54:
6f:8b:9e:23:00:fa:fa:40:46:d5:6d:b7:57:65:a2:
20:1c:6d:40:dc:5b:a8:b2:e3:7f:1d:f6:cd:b5:5c:
97:34:75:21:48:1d:cb:93:f5:41:84:72:10:a8:3a:
88:65:b0:1c:25:e1:9e:da:7e:60:9c:7d:1c:32:fd:
dc:e0:67:70:fd:49:9f:9b:ed:4a:6f:a0:0f:d7:58:
2a:fb:1c:e5:4b:19:51:51:bf:f7:2e:d9:b9:72:fe:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:6C:31:EA:8E:25:E9:55:01:E2:EE:2A:6B:75:BC:DE:F4:1C:C2
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:07:19:f0:86:7a:00:37:c3:cd:50:2c:be:ba:56:5f:fb:2c:
a2:5b:6d:26:3f:ef:3e:71:f1:bc:2f:a4:c8:6c:b9:e5:f4:b7:
4d:27:ed:34:11:9a:e0:52:62:84:0e:b8:6d:4a:af:8a:aa:1f:
e8:a1:10:15:4d:25:0b:61:14:b5:33:f3:aa:79:32:ed:0b:36:
2a:b1:a5:f1:77:4b:7d:85:0e:35:01:0a:28:b8:0a:a4:fd:78:
e9:f9:77:28:3b:3b:59:29:d9:5f:b3:91:41:9d:12:3b:2d:d0:
46:ef:21:20:3e:40:ae:fb:21:46:78:d2:02:85:3e:f8:72:da:
b6:ed:33:f6:f1:33:29:ec:bd:16:66:4d:56:59:78:09:89:a5:
4f:1d:68:17:65:53:00:13:23:61:43:5f:62:29:31:74:bc:1c:
e7:b1:c9:42:46:d7:14:53:8e:d9:cd:1c:61:8b:08:c9:c7:c8:
e1:66:17:83:b5:10:5f:60:7c:6d:37:4d:0c:61:7c:7f:db:3f:
96:3b:e3:64:b1:8d:cd:4d:76:74:57:b8:06:c7:d9:00:ef:e9:
49:f9:bf:6a:10:41:9a:4d:87:12:bd:94:b2:b5:de:de:3b:f0:
75:ed:f1:e3:cb:dc:98:56:bc:50:80:92:cf:d9:e7:15:78:ba:
3c:70:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client