Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: kbTCJmfRC4mPCulpfjHweqyAkJDZEyX5JgLoYVTglX8=
Subject key identifier: E6:4A:D2:38:18:73:DD:14:D8:24:BF:DE:AD:5E:12:4E:94:6B:1D:8A
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019DA30A3A6F9C5F897C7795BEAAB7B11326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 10B4
Signing time: Sun 19 Apr 2026 00:00:49 +0000
Manifest this update: Sun 19 Apr 2026 00:00:49 +0000
Manifest next update: Mon 20 Apr 2026 00:00:49 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: RA/GG1oHRqnmhhCu8ACH3rxn/22Dpa0G7aqiFePX/zg=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:3a:6f:9c:5f:89:7c:77:95:be:aa:b7:b1:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Apr 19 00:00:49 2026 GMT
Not After : Apr 20 00:00:49 2026 GMT
Subject: CN=e64ad2381873dd14d824bfdead5e124e946b1d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:3d:c5:a0:73:dc:fb:30:28:fb:27:20:5a:
61:95:6a:be:5c:51:c4:0f:77:be:0f:35:4e:ff:3d:
32:23:35:7f:93:f4:e9:b5:93:3a:17:7b:28:dc:ec:
9a:8f:a8:53:33:97:ff:0e:4c:c3:26:28:0f:43:b8:
1a:5e:af:fb:2f:6d:66:a6:62:45:48:82:06:1f:b4:
b4:32:7b:3f:ed:ce:a8:ce:93:77:dc:ea:41:0f:ee:
2a:32:f6:0c:a8:46:3b:a1:15:1e:df:47:78:78:ba:
00:ba:07:b4:b3:c8:d9:a7:4e:09:49:6d:0d:37:bb:
a0:9a:e4:09:8b:fd:83:d7:b5:52:06:61:af:9d:66:
54:75:36:8f:0c:40:72:dc:b0:3a:a9:c0:26:87:e6:
d3:01:3a:c7:7c:58:3c:bf:39:10:d8:30:c7:70:0d:
16:ec:2e:05:05:9b:19:bd:16:17:08:c1:2b:f6:c1:
7d:66:78:32:da:ea:13:8b:25:63:43:c4:d8:51:1f:
fa:3f:15:8e:fa:32:8b:14:77:62:00:13:a8:da:fd:
5a:92:5d:61:b2:66:c0:f7:76:24:8c:29:62:18:88:
fb:cb:33:17:89:ea:91:c4:bc:fd:a7:41:0b:01:33:
0b:ca:b7:a8:63:17:42:0e:08:40:c3:81:39:68:59:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:D2:38:18:73:DD:14:D8:24:BF:DE:AD:5E:12:4E:94:6B:1D:8A
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:f9:14:34:10:2d:16:69:6f:fe:cf:83:0b:35:1e:02:49:
72:e3:c7:e4:84:1d:71:3b:a4:27:fc:73:99:57:0b:e6:92:5e:
2f:2a:af:3e:6b:dc:a3:13:2a:ed:24:01:10:b5:67:37:20:41:
df:9d:d2:53:99:2a:1f:fe:48:d2:7a:8b:7b:e8:32:54:e2:db:
67:50:2a:0f:47:e7:92:f8:3f:4c:3b:63:f7:fd:94:b8:d6:72:
2a:67:94:f7:1a:1c:52:a3:e4:a6:d0:4d:cf:83:eb:a5:64:b6:
7c:a5:54:72:24:54:ed:95:d4:f5:38:81:b1:f7:b3:86:db:e6:
5c:41:73:a6:db:6d:22:a8:34:8d:1e:ba:a5:53:62:ab:80:34:
f9:38:b5:84:b2:14:1b:1d:a4:6a:14:27:90:35:37:82:87:2d:
16:15:08:e2:9b:36:b7:64:65:3d:ed:51:00:5c:07:22:fb:2c:
d3:ec:ad:d8:2f:fe:78:4a:bc:dd:ba:1a:39:4d:b6:d8:1b:de:
a8:32:ba:95:c7:e6:cd:86:ec:7a:1e:07:4a:22:01:6e:84:d7:
28:54:7d:44:97:4b:fc:6a:7e:e7:6e:dc:31:c5:d0:2c:f8:8e:
db:b8:67:bd:c8:4c:06:e3:02:61:c2:95:7d:34:89:a7:4c:47:
4d:89:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:19 2026 by rpki-client