Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 8RlEf7bmASWPHEoxGWHgKIKlgBrzLUsh9xnrxUlDeMo=
Subject key identifier: 4D:FA:B3:91:B4:4D:40:5E:EF:71:78:68:C9:4D:4F:D4:4E:41:33:BA
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019EB958DE6D48EE08B20EF226C269D835D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0FEC
Signing time: Fri 12 Jun 2026 01:01:09 +0000
Manifest this update: Fri 12 Jun 2026 01:01:09 +0000
Manifest next update: Sat 13 Jun 2026 01:01:09 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: 2VLvEk8bJEHNcihsV56/GD+byqZnQOw4m2fdY5aXwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:de:6d:48:ee:08:b2:0e:f2:26:c2:69:d8:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jun 12 01:01:09 2026 GMT
Not After : Jun 13 01:01:09 2026 GMT
Subject: CN=4dfab391b44d405eef717868c94d4fd44e4133ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:e6:fc:0b:c7:cb:fc:d5:ef:b4:07:f9:93:
ff:d2:1e:72:98:11:53:ac:35:f3:96:99:51:19:20:
22:c0:a3:a5:99:c1:21:57:7f:24:12:a0:c5:f5:c4:
b5:d7:52:9f:c9:87:c2:54:3d:0f:3d:64:66:71:2b:
f8:f9:79:26:44:fc:ee:27:59:6e:94:e7:31:f7:e7:
0f:9c:e9:24:ce:9f:eb:6c:20:d9:75:c3:1d:b2:a8:
5c:ad:e0:7d:7e:71:37:1f:48:3e:a0:0d:99:5f:32:
af:38:84:e5:ac:c4:49:9a:cc:c2:6e:75:2d:ad:2c:
14:28:7c:1c:e5:51:ee:ee:0f:f2:d5:05:0c:c5:19:
2b:1a:78:4b:fb:cb:60:42:45:ea:b9:c5:03:c0:ae:
bd:33:7e:62:0d:2d:05:78:30:d0:9d:de:27:05:de:
7c:f1:6e:cc:4b:5c:1b:20:e0:d1:c3:04:bc:fd:12:
cd:2a:8d:4b:39:2b:7c:b1:3d:6a:32:59:bc:a9:fd:
d7:b8:6b:ca:c9:8e:fb:c8:4e:49:00:c8:20:09:bc:
5d:9a:76:99:31:04:7d:ba:8e:fe:05:c9:f6:84:a4:
ac:ab:56:94:3e:59:b9:52:58:e9:c7:e0:32:c3:05:
07:da:6b:af:5e:f3:2f:bf:7c:6a:09:4a:e8:c1:d2:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:B3:91:B4:4D:40:5E:EF:71:78:68:C9:4D:4F:D4:4E:41:33:BA
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:a2:38:a6:7a:38:c9:4b:a4:eb:04:42:de:61:e8:0c:3e:
df:84:bf:58:a3:f5:ec:80:2d:7a:07:c1:91:f1:7e:db:c1:a5:
c0:14:8b:f2:c8:84:20:df:bd:1a:0c:72:33:9e:17:2a:f7:69:
04:45:1e:17:2b:f6:62:00:ae:d4:61:ae:2c:21:97:d1:e5:1a:
1d:bf:95:17:cf:f0:65:02:ee:2f:6b:3b:65:0e:5c:c2:ab:a5:
f3:35:a1:35:31:22:ed:ee:6f:d6:9a:94:1a:88:94:09:15:17:
04:ed:17:f2:7c:d7:1b:30:da:ee:51:3f:70:f8:43:b6:34:0c:
94:d1:22:1c:b9:21:14:c5:96:a5:75:0b:74:b7:59:5e:9f:30:
a6:07:84:8f:3c:90:23:21:fb:22:83:97:ad:08:a9:25:ff:c1:
7c:e5:96:05:e7:8b:06:0f:13:95:1e:4c:c0:fc:94:f5:fe:79:
b4:32:56:45:d9:57:53:96:9e:67:f8:82:46:bc:9e:fb:cf:df:
23:df:55:a1:58:70:2c:7b:df:e4:5c:c3:f7:ed:51:21:92:bc:
a9:d9:4c:3f:f2:17:17:1b:13:6b:a9:5f:ef:96:5f:c5:ed:fd:
a0:c1:ed:d6:c5:4b:1f:ed:31:2d:64:f0:25:ae:a7:b1:64:40:
6a:d7:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:10:51 2026 by rpki-client