Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 45QBwbUDL5ujjdvsJ3i7fAG1s7obZHlDlmnt58cpJPQ=
Subject key identifier: 45:AC:18:9C:D9:3A:A9:59:00:1D:4E:86:AE:C8:56:9A:78:53:FC:61
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019FA304CC8DA5634BB6F9D8228EE6746000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 1065
Signing time: Mon 27 Jul 2026 10:00:28 +0000
Manifest this update: Mon 27 Jul 2026 10:00:28 +0000
Manifest next update: Tue 28 Jul 2026 10:00:28 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: b1E1M8M/DUrJmHVZLVKsQFnPM1YPMGb7r6BL3G+EYdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:cc:8d:a5:63:4b:b6:f9:d8:22:8e:e6:74:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jul 27 10:00:28 2026 GMT
Not After : Jul 28 10:00:28 2026 GMT
Subject: CN=45ac189cd93aa959001d4e86aec8569a7853fc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:26:c1:93:20:54:47:04:45:b6:41:97:1a:8b:
f0:53:e7:f1:b7:93:d2:f0:a6:a4:f7:88:a3:6e:3e:
25:a9:e9:4d:5c:96:1f:20:23:c7:dd:81:9d:64:9e:
bb:12:11:29:88:9d:d6:67:df:26:99:bc:98:e7:b6:
9e:27:54:a7:8c:9d:da:d0:28:4c:3f:77:43:8c:47:
50:fd:8f:5e:55:d1:e5:53:5b:ec:41:51:c9:ec:22:
50:64:58:eb:3e:4a:81:da:14:6d:06:97:7b:9d:f1:
20:19:0c:f7:25:2e:de:b0:69:f8:5f:02:72:13:97:
84:9f:b0:06:09:51:ec:7d:df:71:ae:6e:17:7c:f0:
ae:44:ed:d4:e7:ef:2e:a6:1f:0a:80:d5:04:4b:5f:
95:e6:da:27:02:70:44:f6:eb:85:c4:d6:38:a2:49:
24:a7:7c:8c:41:68:ff:69:82:79:31:44:4e:93:e8:
08:a7:b9:77:b2:bd:bc:1f:66:f2:3a:53:8b:44:37:
f0:cb:31:6c:fc:cc:16:f7:43:30:44:aa:86:cb:f8:
39:e4:15:22:e4:86:15:94:cb:16:22:65:cb:38:3e:
0c:de:a5:20:ed:87:a2:cd:b4:3b:84:59:4c:99:4e:
f6:e7:75:09:4b:ad:ab:94:6b:da:06:12:36:3f:ea:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:18:9C:D9:3A:A9:59:00:1D:4E:86:AE:C8:56:9A:78:53:FC:61
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:7b:6d:cb:3b:99:62:bf:08:cf:71:14:70:2c:44:c2:1e:
ec:f3:fb:90:de:a0:02:2b:89:ac:15:f8:33:7c:88:5d:3c:c7:
de:43:80:7b:61:41:ac:c1:7c:fc:a8:13:9f:17:e9:87:ca:08:
78:83:65:71:e6:a0:e0:05:84:3c:f8:2e:25:6d:62:95:fd:e0:
c0:c1:54:31:76:87:65:b4:90:29:3c:e5:83:8d:dd:47:b3:65:
2e:b6:64:7a:7f:c7:b2:07:51:ec:d3:29:10:3f:59:b3:70:84:
1d:6b:c1:11:7f:e0:c9:59:36:01:5e:22:7f:20:de:0b:12:a7:
75:7f:22:46:db:b7:93:bf:19:94:11:03:3a:81:ee:e1:cf:60:
eb:97:72:64:9e:7b:f1:f4:9b:d1:d4:e8:f7:ee:69:a7:84:8a:
d4:0c:1a:d1:2a:a8:dc:4d:4e:6b:eb:7c:f8:2a:30:af:2c:7f:
f7:50:f9:6a:fe:4d:be:e8:c9:8e:8c:45:52:b1:bc:9b:31:a8:
59:ec:3b:6e:e3:b0:9d:a6:5a:b6:1a:91:a4:5d:39:8a:5c:de:
a4:c0:dd:59:27:db:4e:c2:0c:09:7a:fe:d0:1f:fa:a4:c2:c4:
04:0a:73:6f:b1:32:ab:4c:ba:47:41:3a:f1:a5:ca:05:04:36:
4e:7c:1d:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBMyNpWNLtvnYIo7mdGAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1
OGUyOTYwHhcNMjYwNzI3MTAwMDI4WhcNMjYwNzI4MTAwMDI4WjAzMTEwLwYDVQQD
Eyg0NWFjMTg5Y2Q5M2FhOTU5MDAxZDRlODZhZWM4NTY5YTc4NTNmYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SbBkyBURwRFtkGXGovwU+fxt5PS
8Kak94ijbj4lqelNXJYfICPH3YGdZJ67EhEpiJ3WZ98mmbyY57aeJ1SnjJ3a0ChM
P3dDjEdQ/Y9eVdHlU1vsQVHJ7CJQZFjrPkqB2hRtBpd7nfEgGQz3JS7esGn4XwJy
E5eEn7AGCVHsfd9xrm4XfPCuRO3U5+8uph8KgNUES1+V5tonAnBE9uuFxNY4okkk
p3yMQWj/aYJ5MUROk+gIp7l3sr28H2byOlOLRDfwyzFs/MwW90MwRKqGy/g55BUi
5IYVlMsWImXLOD4M3qUg7YeizbQ7hFlMmU7253UJS62rlGvaBhI2P+pNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWsGJzZOqlZAB1Ohq7IVpp4U/xhMB8GA1UdIwQY
MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It
NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi
LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSh7bcs7
mWK/CM9xFHAsRMIe7PP7kN6gAiuJrBX4M3yIXTzH3kOAe2FBrMF8/KgTnxfph8oI
eINlceag4AWEPPguJW1ilf3gwMFUMXaHZbSQKTzlg43dR7NlLrZken/HsgdR7NMp
ED9Zs3CEHWvBEX/gyVk2AV4ifyDeCxKndX8iRtu3k78ZlBEDOoHu4c9g65dyZJ57
8fSb0dTo9+5pp4SK1Awa0Sqo3E1Oa+t8+Cowryx/91D5av5NvujJjoxFUrG8mzGo
Wew7buOwnaZathqRpF05ilzepMDdWSfbTsIMCXr+0B/6pMLEBApzb7Eyq0y6R0E6
8aXKBQQ2TnwdzA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:09 2026 by rpki-client