Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: cEBveJ87ih0MLsdDkaljISp/7G1belET9O3xMYIdKdQ=
Subject key identifier: 2D:2A:A9:42:87:11:35:0B:91:C3:83:19:21:C3:CB:C8:92:73:65:D0
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019FA89A2E236D84ED5848CEAB4DDCAE60D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 11C0
Signing time: Tue 28 Jul 2026 12:01:44 +0000
Manifest this update: Tue 28 Jul 2026 12:01:44 +0000
Manifest next update: Wed 29 Jul 2026 12:01:44 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: PMW0VU3OIEDO48ynf1ghgDNyAlcdE2CaSJeaOaPlR3c=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:2e:23:6d:84:ed:58:48:ce:ab:4d:dc:ae:60:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Jul 28 12:01:44 2026 GMT
Not After : Jul 29 12:01:44 2026 GMT
Subject: CN=2d2aa9428711350b91c3831921c3cbc8927365d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:66:d0:ed:a3:85:ee:72:42:00:ef:44:d1:
3d:b0:36:99:b0:87:3a:bb:25:44:8b:f3:a7:6f:ff:
0e:26:fc:6b:7c:69:4d:49:21:86:b2:8d:74:58:7b:
c9:e9:e7:a7:8a:65:85:85:40:3b:13:03:d5:03:61:
23:cb:b3:7f:c9:4c:86:e4:f7:c5:35:87:6f:ec:32:
bd:71:88:70:2e:cd:b4:2f:ee:bd:00:6d:fe:0c:de:
95:0e:07:0b:23:a4:a8:82:d9:05:86:7d:fd:e8:83:
18:ea:a8:68:16:03:ed:df:7e:51:82:52:4b:c4:ba:
8a:94:99:ed:a0:0b:18:1b:74:82:f6:bf:de:90:5b:
2f:ec:71:5c:15:96:05:3e:b5:19:40:de:22:ec:09:
0e:a2:7c:d8:2a:91:77:da:fc:f7:6d:a0:9e:f8:73:
24:7a:75:d9:9e:19:0b:ab:3f:c2:48:28:30:82:e3:
be:05:32:63:63:4c:51:92:df:34:60:e4:b0:1d:2d:
41:88:e7:fd:7d:ef:de:9b:fe:80:93:17:ff:bc:1c:
f9:79:03:b6:ec:6e:fa:23:56:2f:d9:b9:04:39:99:
0a:c6:e3:62:99:83:52:cc:ff:0d:6c:e3:62:8d:fa:
d6:b3:04:3d:b7:da:ae:9f:1d:a8:c8:3d:b9:d1:a9:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:A9:42:87:11:35:0B:91:C3:83:19:21:C3:CB:C8:92:73:65:D0
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:82:92:b9:c7:51:c8:92:b1:44:ba:e9:11:ac:af:3e:57:
04:51:c8:64:92:7b:c4:23:c8:b0:62:a5:98:58:5e:54:af:ec:
81:ec:7f:16:ef:ef:e0:c6:67:b0:6d:f5:9f:eb:dd:d6:05:f2:
24:80:35:c9:db:31:73:7f:af:fc:ef:19:93:f5:05:ba:4e:db:
ca:08:be:50:38:5f:cd:7a:16:a9:77:ae:95:bc:5f:23:8f:87:
b5:ab:a1:a4:26:a0:40:e6:60:ee:48:f4:ae:f4:ab:66:c6:0f:
dd:18:66:53:4a:b9:91:3b:7b:a0:1d:eb:a0:ca:e5:b3:e7:f0:
71:b4:59:4b:ae:9e:f9:af:9b:dd:53:b6:31:cc:61:d6:4d:83:
a6:6f:9f:20:aa:9c:7e:b5:41:c1:55:ac:96:e0:dd:08:87:0e:
7b:6a:10:79:ce:e5:95:df:2e:ed:2c:16:1d:d4:1e:e6:d5:7d:
42:ef:81:6a:ac:01:43:98:ad:01:5a:ae:81:ca:24:42:85:83:
e5:ed:13:4d:be:c8:df:b1:c4:77:4e:55:26:e2:c8:94:dc:43:
0f:9d:55:dd:10:c1:84:3f:0d:69:8e:65:02:f4:97:41:87:c7:
b2:1c:4a:5b:4c:57:52:f9:42:d2:11:78:2f:6d:14:43:8f:73:
87:41:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:53 2026 by rpki-client