Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: oyQ7fo0OGMZ53WFMz/vrkoeKe1Nmu9u3vodncO52/pg=
Subject key identifier: 1A:DC:36:67:E9:AF:7B:BE:78:E6:F5:40:32:9B:BD:95:13:63:C4:DF
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 019CA83340C1BDCCA52FC1E67EDBABE328FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0C15
Signing time: Sun 01 Mar 2026 07:00:56 +0000
Manifest this update: Sun 01 Mar 2026 07:00:56 +0000
Manifest next update: Mon 02 Mar 2026 07:00:56 +0000
Files and hashes: 1: Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa (hash: X7ptSGD8hMEh9qW7Py0+45xWZLrj3NoOhUjyiTrtyQc=)
2: YjQiPePy4rwjqfIv0GNTyuHUVeE.roa (hash: FRyYxB8E0O7w8Ro16U8SMCHBItOvlxbO1vjadeMtAvo=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: BGo9ihctfW2oxLRj2W+aA6yJ+AJQgiglwyJTj0Dd4vo=)
4: ytUrE1yikUozgHVrWde_TAyxalY.asa (hash: cd7uv24NUxcddeM4R6jn2GTZOxo6970ut0T+FVbZ/XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:40:c1:bd:cc:a5:2f:c1:e6:7e:db:ab:e3:28:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Mar 1 07:00:56 2026 GMT
Not After : Mar 2 07:00:56 2026 GMT
Subject: CN=1adc3667e9af7bbe78e6f540329bbd951363c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:bd:e9:61:81:dd:b1:5f:ca:f1:93:36:d3:
9d:17:8b:5c:ea:c6:aa:22:1f:99:2d:91:bc:da:18:
48:5c:f2:96:c3:aa:81:e5:ea:eb:5d:bb:a1:e9:f4:
35:23:e0:33:fe:9c:ad:35:21:32:d2:e9:1b:04:a3:
df:7d:e6:e5:27:b0:f4:99:e7:ae:6d:a0:9e:cf:d1:
12:1d:a8:6c:b9:cf:8f:6f:01:d1:b8:d5:25:2b:ec:
23:e0:49:16:aa:8b:e9:fc:37:95:6f:56:91:05:42:
f2:5d:83:35:7d:e0:ce:5d:91:65:36:e4:c3:e9:35:
1a:d7:3f:cb:c9:67:3c:90:07:94:11:6c:8e:0f:cd:
7f:6a:c7:8e:02:09:05:b3:08:d7:6e:2b:20:f3:e4:
d3:5d:15:75:ce:e6:2d:2e:69:9a:90:56:92:ce:90:
ec:f4:92:3f:59:c9:37:b4:17:f5:21:4f:c8:a7:ff:
00:0b:1b:b7:15:d4:9d:b9:59:77:5e:fd:9d:21:15:
4f:34:e3:e2:41:11:17:07:a2:55:79:fd:80:73:5b:
7d:62:bb:06:9b:c8:83:ac:a8:9d:ca:85:9d:b7:80:
2c:21:28:8c:a0:f2:20:5f:22:cd:5a:b9:2a:b2:52:
1d:1e:09:49:fc:9b:c4:70:b6:a6:51:57:5c:e3:f0:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:36:67:E9:AF:7B:BE:78:E6:F5:40:32:9B:BD:95:13:63:C4:DF
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:d2:7b:ff:ba:8c:76:c7:6e:e1:6b:e8:c1:e5:77:1f:08:
04:57:55:41:88:68:a5:12:74:e5:9b:61:4f:0e:fa:de:35:ae:
35:80:31:d0:e6:63:55:47:cf:68:e3:c8:e1:e4:90:ec:31:6a:
b7:63:14:11:3b:f4:b8:27:d6:05:53:87:aa:57:05:67:21:41:
47:77:b1:87:96:75:be:f3:29:04:fe:58:eb:4e:84:b0:aa:33:
99:0c:a6:7c:8a:09:cd:57:22:74:7b:6c:85:81:fa:a2:ae:42:
45:0a:00:b4:59:f1:f9:2c:87:e5:6b:9d:5b:4f:35:fc:c2:60:
93:01:e8:9d:ee:28:1e:5e:b0:73:5e:65:cb:eb:79:77:8a:2e:
57:91:35:fc:66:b3:8c:1c:69:9f:6f:4c:1b:ff:74:d0:b4:1c:
2e:ae:01:6d:e9:b9:46:7f:d5:61:32:45:13:49:34:7a:69:9d:
c9:5b:a1:3a:58:00:aa:f9:6f:59:e9:80:75:c8:30:03:11:f4:
87:fc:95:33:a1:e3:78:a1:a3:af:6c:c0:03:21:8f:f8:ec:1e:
c0:2c:3e:b8:7f:f3:c0:b3:17:38:88:56:bc:74:db:bc:07:7f:
60:35:69:e9:11:64:11:25:54:2f:00:4b:2a:e5:09:27:53:60:
21:3d:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:57 2026 by rpki-client