Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: NYhJ4UXCaCAB8Q2BdsRBgrwuDLOAhNJsBqGVy+rt8lo=
Subject key identifier: D0:94:58:DD:61:5A:C2:6B:98:45:9C:0B:C0:36:8C:9D:86:DE:EA:5F
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019F378468A1944881A54D558E855740C17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 0852
Signing time: Mon 06 Jul 2026 13:00:52 +0000
Manifest this update: Mon 06 Jul 2026 13:00:52 +0000
Manifest next update: Tue 07 Jul 2026 13:00:52 +0000
Files and hashes: 1: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (hash: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A=)
2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: p8X5oCG69Q5iwgAu6/w1MN6FFXdSWUljEgIA/SMQ8J0=)
3: g9ua57B68Th2qHv-LwwTCs4_D70.roa (hash: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:68:a1:94:48:81:a5:4d:55:8e:85:57:40:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jul 6 13:00:52 2026 GMT
Not After : Jul 7 13:00:52 2026 GMT
Subject: CN=d09458dd615ac26b98459c0bc0368c9d86deea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:54:8a:dd:2f:e4:e7:d5:83:51:38:88:d0:
11:70:4f:cc:8d:72:b2:69:fe:22:02:e6:e1:96:70:
8e:63:2d:dc:09:c8:4b:36:45:89:f9:63:e3:84:68:
a9:86:a0:d1:0e:9e:8e:2c:aa:ac:be:66:0d:b1:fe:
1b:46:d1:45:36:a4:69:fd:f7:c5:a0:5f:7d:ae:56:
aa:32:b7:64:49:8f:fe:21:71:ba:ed:cf:90:91:8c:
d8:d8:c6:d8:61:54:bc:5d:38:dd:b7:66:19:e7:a7:
9a:48:67:4e:bc:0c:05:4a:d1:66:4d:39:ad:19:61:
fe:26:de:62:03:32:0a:ad:1b:1f:5f:f8:19:5f:3e:
ba:19:51:67:48:be:92:e8:78:3b:ba:bb:88:d2:dd:
78:6e:8d:f1:9d:47:ad:b0:9d:8e:a4:dc:41:02:1c:
a2:03:27:89:4d:94:85:60:c0:f3:3a:33:54:9c:82:
73:c0:86:d2:e5:c0:03:1b:24:2a:74:8d:e2:58:a3:
7a:7e:27:c3:30:01:bc:0e:4f:a8:8a:63:f4:b0:5b:
91:25:d0:6c:1f:2e:11:87:71:d4:9f:e9:e8:8c:41:
3b:dd:4a:d1:0a:9f:7c:e4:0c:dc:03:0e:f0:4e:ac:
46:75:ab:62:70:9d:d0:9e:a4:af:0a:17:90:d4:85:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:58:DD:61:5A:C2:6B:98:45:9C:0B:C0:36:8C:9D:86:DE:EA:5F
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e5:26:ee:65:c9:1a:ca:34:20:76:09:8f:45:ad:92:16:ed:
b0:0c:d3:e7:80:9b:cf:31:1f:c6:f5:ae:44:e0:99:38:e2:12:
de:65:f1:61:42:69:52:a1:f7:f1:1a:0a:e9:f8:d2:6a:50:44:
22:2a:2d:f7:52:78:17:fb:41:43:89:5f:3d:a7:5e:a4:74:4d:
fc:16:15:2f:20:1d:f7:29:08:53:39:43:7c:9a:95:3e:a7:20:
e5:8c:c3:b6:fb:5d:ef:a6:69:62:1d:a9:97:b4:ee:c8:26:a4:
55:4f:89:cb:d4:d6:e2:50:91:35:d4:62:ee:e5:50:26:70:54:
14:c0:06:c0:47:89:25:bf:37:ec:3f:ad:d4:ec:e0:d3:bf:9e:
f2:82:f8:f3:c7:bc:73:85:12:ad:01:51:3d:98:1f:38:ed:d3:
57:7c:2f:bf:33:2e:1b:b2:02:f6:dd:cb:53:a6:2e:a0:f5:24:
34:30:b7:33:b1:0a:ff:13:19:3b:03:71:b6:31:77:b0:bb:41:
a8:20:82:3b:ec:36:17:78:82:d5:84:df:32:12:1e:02:78:92:
24:89:dc:49:7b:aa:ef:c4:c3:99:1c:4f:ba:66:67:3e:3e:49:
25:c1:50:ed:f9:8a:c3:ad:7f:36:62:3e:ec:f7:c2:54:83:10:
96:27:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:19:34 2026 by rpki-client