Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: uJppbEsqf07cy0l7psFKRs3B+KddQm0xY93A2TGYaOg=
Subject key identifier: 1C:52:6C:04:D9:51:AE:E9:97:17:5D:FE:E9:30:E3:83:34:C4:7B:9B
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 01A1C555406541B8858042E601FC54233A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 12D8
Signing time: Tue 10 Nov 2026 12:01:00 +0000
Manifest this update: Tue 10 Nov 2026 12:01:00 +0000
Manifest next update: Wed 11 Nov 2026 12:01:00 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ZktEvr+1bKgwm78yl5Q/C0b4gTf+V/qfd0Xlm5ddHp4=)
2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:55:40:65:41:b8:85:80:42:e6:01:fc:54:23:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Nov 10 12:01:00 2026 GMT
Not After : Nov 11 12:01:00 2026 GMT
Subject: CN=1c526c04d951aee997175dfee930e38334c47b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:27:4d:9a:03:fe:26:05:9f:e0:f8:6b:6f:
71:eb:79:c7:75:4c:be:b6:36:36:ac:80:24:3d:64:
15:c8:e1:d7:38:d3:21:50:a2:90:d6:88:90:f2:4b:
27:b5:69:59:b0:a0:5d:34:9b:3a:81:b9:6f:73:8f:
d0:64:e2:6d:f1:b7:79:5d:e7:2f:87:49:8a:37:7c:
42:a1:88:b3:c4:5b:a3:dc:26:98:e5:f6:bf:d1:c6:
85:0e:fe:0d:4e:83:44:46:eb:fa:dc:41:81:0e:8c:
96:1e:50:01:8f:63:08:78:d9:9c:c4:af:a1:28:38:
c1:59:7d:fd:99:1a:68:47:be:ce:17:b9:66:16:69:
01:14:0b:3d:23:8e:05:8f:3c:12:c9:0b:cf:fa:45:
cc:bb:f3:5b:17:c5:72:f5:14:16:de:a3:26:9c:d1:
6b:68:22:72:05:bc:84:2f:22:d2:4a:db:e7:79:e8:
1b:8e:3a:68:2c:9d:c1:d6:7b:30:db:e8:e1:dd:4e:
fb:4d:db:d3:70:80:4d:ec:92:e1:28:64:08:cc:b9:
6c:ea:8c:17:9f:29:4e:2d:c5:7a:f4:75:fa:cf:53:
c0:87:ff:32:ad:ce:0b:2d:3f:59:f5:6c:59:2e:ea:
3a:73:0d:b0:6d:32:35:53:45:22:8b:c3:f5:6f:b0:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:6C:04:D9:51:AE:E9:97:17:5D:FE:E9:30:E3:83:34:C4:7B:9B
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f3:c1:c1:da:e1:36:bd:1c:e7:f5:52:6e:57:8a:3b:c7:89:
5d:e8:a5:d8:3a:1e:68:db:03:79:1d:81:66:a3:51:c9:f8:16:
50:ce:e1:48:0d:3b:62:e5:1d:0d:e4:99:06:bf:0d:f8:09:da:
16:2c:22:da:34:b5:ba:20:44:69:c8:3c:91:ba:e8:c8:df:a3:
77:b0:83:e4:2f:c9:ba:8b:5c:db:aa:71:1e:42:90:92:3e:ae:
8a:24:c7:6a:ab:7d:af:91:7f:97:c5:8f:72:96:5b:f7:01:56:
84:41:af:02:80:f9:60:88:9f:22:65:4d:a7:ec:53:cd:69:14:
a9:d1:2a:29:62:4b:b6:90:a6:65:f6:2e:36:67:b7:19:f9:2d:
fb:32:97:cd:62:ec:a6:ac:aa:4a:3d:59:3a:e9:08:0c:4b:9c:
0a:e2:15:4c:98:f8:0d:c4:cb:5e:d6:83:af:e5:5a:7a:62:03:
de:5f:ac:61:c8:e1:3f:56:f7:12:6d:89:fe:cd:e4:40:3e:2b:
bd:fc:71:4f:3f:eb:39:63:9a:2c:63:dd:02:47:c1:c7:87:25:
fd:c1:39:09:db:9b:42:24:6b:9e:f9:75:dd:ca:82:79:bc:1e:
85:78:a4:05:c3:7a:49:0a:5f:68:d8:95:77:97:bb:e3:a0:c0:
59:8f:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:16:24 2026 by rpki-client