Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: mOvqeudyvTRYdt6JvWg1rfXVw8UX0ti6Wfb6FBCDZFM=
Subject key identifier: 3B:F3:D6:EE:FF:07:FA:F7:FA:4B:8D:17:7D:AC:FF:D5:B1:05:E3:70
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019DA4542D8A1945534105236359ABDD2401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 0221
Signing time: Sun 19 Apr 2026 06:01:13 +0000
Manifest this update: Sun 19 Apr 2026 06:01:13 +0000
Manifest next update: Mon 20 Apr 2026 06:01:13 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: vjNWzymZE4WLE3qcOUt/AJPIK7k9omEkMTU9NQuqiCY=)
2: hjHmhKUkMq2huO3HMGHtinUbmu0.roa (hash: qnr8V99TDGg77oRKiMRfR1bkws1Uoea8b25llDz2SOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:2d:8a:19:45:53:41:05:23:63:59:ab:dd:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Apr 19 06:01:13 2026 GMT
Not After : Apr 20 06:01:13 2026 GMT
Subject: CN=3bf3d6eeff07faf7fa4b8d177dacffd5b105e370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:91:1e:9c:65:08:85:7b:16:df:fb:7f:d1:
bd:fd:dd:7b:37:32:c9:2c:e7:f2:f3:a0:3c:e8:89:
56:1c:18:a3:5a:a1:6c:4d:20:7c:e1:9d:fe:b6:fb:
0c:c7:cd:a4:84:f9:d7:f0:2c:eb:d1:96:91:c5:be:
b3:cf:d5:d7:c1:49:d9:39:f5:d2:a7:44:d6:37:46:
23:af:96:40:81:9b:b7:e6:ee:38:0e:85:19:f4:a9:
bc:3f:48:89:cf:9e:4e:fd:06:fa:da:b5:7e:de:ac:
7f:5d:bc:6b:dc:e5:6b:bd:e1:59:e3:c1:8a:bf:6a:
75:60:1b:8a:93:e4:ea:38:42:5d:cd:e1:1c:2c:88:
7a:1b:be:6a:92:08:8c:eb:e5:12:0f:68:db:1e:cc:
8c:01:52:5a:3c:7d:88:c4:29:18:2c:f0:42:3d:b4:
1e:7a:d0:78:77:1e:98:c9:d3:75:5a:76:d3:c6:dd:
75:d5:fe:0e:ee:1f:8d:f4:f7:6d:85:15:3e:66:7d:
db:ea:f2:71:a3:6a:9a:f4:7d:79:1d:89:09:4b:24:
30:f1:a0:8e:0f:8d:09:a7:70:20:8c:29:f1:f0:3b:
30:a6:62:6a:18:78:cb:98:0c:11:90:9f:e4:28:82:
93:6d:ba:45:50:61:a4:f1:e7:f3:02:2a:c3:e1:ba:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:D6:EE:FF:07:FA:F7:FA:4B:8D:17:7D:AC:FF:D5:B1:05:E3:70
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:45:d4:eb:3a:91:de:4a:1c:c0:78:f7:01:c4:85:89:33:e3:
37:23:51:62:2a:29:bf:cc:98:95:ba:bd:00:dd:84:c0:c9:f0:
02:69:0e:73:00:5d:d3:00:98:f5:6f:88:e4:2e:24:71:19:63:
d7:6d:f2:73:6a:7f:d2:f6:1f:34:47:1b:c9:c2:90:6f:82:f0:
29:35:12:90:45:53:b1:3b:4c:2c:5f:1c:82:7d:69:28:ff:b4:
02:6f:bd:f7:18:07:b4:8b:c4:eb:93:d7:f8:bd:0e:b2:4b:50:
32:32:3d:b8:99:a4:c7:8c:e7:e5:a4:5d:18:f7:a5:ba:29:40:
35:f5:0d:a8:5a:2e:c0:3e:34:37:5b:d3:d4:d5:2c:cf:a7:39:
53:87:9b:c1:60:c8:e7:49:2f:8e:92:5c:20:46:8d:07:a3:c3:
e5:48:91:ce:b4:a1:af:c3:3f:d5:c0:06:c8:42:ea:a9:a9:aa:
09:48:6f:04:b5:86:1c:88:a6:89:0b:c4:e6:39:aa:d0:f3:4a:
ad:6f:0a:78:d3:34:93:b7:3c:3b:19:0b:c4:a8:d2:84:2c:aa:
2b:84:4b:27:bd:ae:4e:e4:48:40:4b:52:c3:9b:07:68:4b:3e:
46:4c:17:bf:b8:fa:5a:5d:b6:99:0e:e7:92:f8:04:0a:0b:23:
c5:af:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:00:13 2026 by rpki-client