Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: bLUk4YK2++THt1FKqS+K+j0wzgN6lt33ZX83TMeNW3I=
Subject key identifier: 97:B5:0F:86:7F:16:B5:AC:2A:A3:3D:87:03:4F:7A:82:9B:B5:97:28
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019D371BA2DFCDCD16F11EF6C3C204E742C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0F24
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: 0XiewDj2fPp2qz/WmCsD1tB1qydnCYWAmYy0LUdcIJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a2:df:cd:cd:16:f1:1e:f6:c3:c2:04:e7:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=97b50f867f16b5ac2aa33d87034f7a829bb59728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:62:39:af:87:17:8b:04:25:54:5b:7c:08:
1e:ff:49:04:d1:99:22:1a:02:25:ea:c5:b1:fc:72:
20:73:0f:16:17:fe:c7:da:ae:cd:b7:b9:42:21:3a:
c0:e0:66:b0:28:f0:d1:98:df:66:87:4e:84:2e:ec:
a9:b1:12:03:43:f0:24:34:a6:ff:a8:52:93:9a:af:
ac:75:a0:42:9e:dd:7d:90:62:3e:f9:72:9f:56:e8:
5a:ea:cf:d8:f6:11:48:1a:b8:16:78:5d:04:f6:1a:
70:93:87:83:74:58:3d:16:d4:5b:36:f3:2a:1d:74:
67:71:2a:e1:85:00:d0:f3:2c:ad:b6:94:89:c0:1b:
d9:d2:68:61:2f:cb:f0:cf:1b:8b:bf:c9:63:fa:4c:
60:c5:8f:83:f9:a0:5c:5b:d3:46:0c:a5:8d:38:ed:
66:1c:cb:49:af:ff:fc:7d:81:de:8e:d0:29:87:6c:
3b:ca:ca:12:7b:08:be:6d:9f:f5:4e:55:4c:f7:e2:
ca:4a:53:8c:27:97:00:b9:97:e9:f1:24:55:35:7e:
48:76:a6:0d:04:c3:9a:9d:cb:39:a4:61:42:90:fb:
38:49:de:bf:ae:bc:7d:da:89:44:d4:eb:1a:11:57:
fe:43:32:8e:c2:5d:b5:40:bc:e2:97:13:fc:5b:1e:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:0F:86:7F:16:B5:AC:2A:A3:3D:87:03:4F:7A:82:9B:B5:97:28
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:85:ac:9a:07:e0:8f:43:96:b8:c2:dd:5e:09:bb:9c:43:c9:
a8:71:f6:ce:e0:38:e1:ea:54:d9:7f:c4:3e:fe:a8:7c:9b:26:
ff:03:9b:1d:e0:67:68:fc:d1:b0:f7:da:d6:f6:b9:da:9c:9a:
42:b7:fe:cd:7d:6e:6a:87:5e:50:0c:5f:b3:3f:09:a4:08:aa:
0b:e1:45:57:5b:2e:62:ce:e8:02:0b:2a:19:30:a2:5a:71:15:
12:df:43:53:04:44:38:89:ec:45:b7:3e:80:60:0c:f9:dc:c2:
60:42:99:5e:3c:a7:81:4e:12:02:55:3f:8a:9b:85:cb:f5:87:
f8:c1:a0:e2:c3:05:43:17:70:3c:72:fc:48:b0:bc:55:88:99:
ea:5d:9d:32:38:89:17:57:49:93:31:5d:a6:96:07:0b:9f:a9:
5c:3c:53:2b:4f:c3:e4:8a:95:cb:26:5f:ed:ff:fd:82:e9:9a:
9b:9c:ae:9e:ef:3d:dc:ab:ff:d7:b2:55:a8:db:87:b0:8b:b8:
d2:f6:32:19:73:20:74:70:26:46:dd:f2:73:cc:d5:22:c9:19:
d5:78:35:aa:05:d9:4f:93:f8:f4:9d:3d:ce:05:e0:d4:b5:5d:
97:2f:21:cb:81:99:d2:9f:51:35:b4:a6:6e:79:dc:c4:40:54:
bf:35:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client