Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: ZHVASQFkfgWX01gEl2u13W303qzWaSV4DCxz8nKgKlw=
Subject key identifier: 02:3F:4B:92:E4:C4:A8:BE:C7:8C:05:7B:3F:1B:1E:B9:D2:8E:A6:1F
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019FA9AC271F97329857F5BCD2F8FCE83AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:59 +0000
Manifest this update: Tue 28 Jul 2026 17:00:59 +0000
Manifest next update: Wed 29 Jul 2026 17:00:59 +0000
Files and hashes: 1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: 4LrV8Ke6qzyyA1hYMRWxqYnTzOcTC/a55jwdh9Wgvp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:27:1f:97:32:98:57:f5:bc:d2:f8:fc:e8:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Jul 28 17:00:59 2026 GMT
Not After : Jul 29 17:00:59 2026 GMT
Subject: CN=023f4b92e4c4a8bec78c057b3f1b1eb9d28ea61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:1d:f2:8b:55:cc:eb:65:e2:07:ac:e7:79:
17:b3:f3:a2:79:44:3b:34:37:23:46:6a:ff:d3:27:
1e:5f:3f:81:63:16:49:c2:a0:e4:58:71:50:0b:0c:
ad:99:51:ba:da:c3:a7:15:84:89:0a:6b:9d:bd:ba:
e5:86:17:f4:41:31:05:60:f5:b7:12:a9:62:f4:b4:
aa:e8:62:d4:aa:d9:90:5e:57:f5:92:cc:86:f6:c6:
43:3a:82:ac:af:97:0f:42:c5:d6:4e:ab:09:d0:98:
26:2b:9c:27:72:00:f9:1d:81:d5:9e:81:c0:de:f9:
30:34:63:b6:65:02:b3:7f:b0:dd:5d:63:95:5f:eb:
e3:72:38:da:ca:93:09:c1:0c:3e:02:2d:ed:9a:82:
1d:d4:7e:72:3d:7f:5f:e4:9e:88:01:a6:16:25:9c:
64:6a:79:d0:9b:86:ca:f7:43:b8:03:fb:a5:58:ee:
a0:89:28:b8:c6:de:a1:92:65:07:8e:f8:a0:f7:52:
5a:1a:38:9e:d0:30:1d:97:01:fb:32:b4:3e:8b:81:
e7:79:09:ad:a7:65:f5:98:64:f9:cc:0b:d6:cb:cb:
38:d3:eb:25:52:ce:d2:6a:61:6e:c0:d3:74:cd:5d:
6d:a6:86:b0:12:c5:50:1e:cc:23:f2:9b:15:eb:79:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:4B:92:E4:C4:A8:BE:C7:8C:05:7B:3F:1B:1E:B9:D2:8E:A6:1F
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:73:9c:d6:4a:85:27:c9:28:67:f0:30:33:ff:7f:af:8d:
ca:ca:4e:c2:e9:e7:69:81:4d:1f:b0:53:29:6c:0a:fb:d8:d8:
ef:73:ce:7d:96:0c:95:8c:eb:3c:d3:2a:f9:68:ab:09:7d:53:
dd:7e:5b:57:7b:1b:4c:c8:b3:b2:05:aa:f5:9c:45:71:af:78:
df:d5:73:d5:a6:6a:87:21:67:0c:2f:f1:c1:a1:cd:43:24:1c:
29:74:46:69:2a:66:9f:d3:0a:3a:92:e8:aa:52:f2:d6:4a:45:
4f:25:c1:40:70:c9:63:c6:48:25:a2:a4:2b:f3:39:1f:92:d1:
c9:a1:21:59:bc:0b:f5:aa:32:6e:04:91:84:66:be:4a:98:fe:
e9:f5:d7:92:8e:8b:7d:59:1a:60:3d:18:e9:f0:15:31:b4:0f:
68:dc:fb:18:0e:8f:0d:22:d7:87:76:e9:fc:27:ca:c1:91:e8:
60:d9:aa:bf:f8:fb:ef:73:f1:5f:d3:7e:0b:65:88:f3:00:af:
6a:f1:ad:ef:ee:db:9a:75:47:ac:64:37:f1:c2:97:a4:a0:84:
b1:d4:7a:0f:bf:c9:5d:c8:2e:ba:d8:49:98:44:56:72:85:72:
3c:9f:6f:17:3a:54:93:77:0c:b6:93:89:e6:bb:de:fe:21:e9:
a5:81:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:27 2026 by rpki-client