Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: KnWd854RJwZzfR/jvYUXAasieCBa14gsvQaojmWnvz8=
Subject key identifier: 31:E0:DC:2F:33:F5:24:A1:51:50:CF:AB:02:8F:30:59:6C:27:F9:77
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 01A0C0A00C0CF1131D7BA3AD39AD4B2AD112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 03C1
Signing time: Sun 20 Sep 2026 21:01:49 +0000
Manifest this update: Sun 20 Sep 2026 21:01:49 +0000
Manifest next update: Mon 21 Sep 2026 21:01:49 +0000
Files and hashes: 1: 4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa (hash: tVTEQ5EqgDdG6S5oFPG0kZJ9juKgZKh/vp79fStLNpo=)
2: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: X4mDDieK16IO4VxBqXqlFYVFmZ7KunLFTIJg8QJYt3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:a0:0c:0c:f1:13:1d:7b:a3:ad:39:ad:4b:2a:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Sep 20 21:01:49 2026 GMT
Not After : Sep 21 21:01:49 2026 GMT
Subject: CN=31e0dc2f33f524a15150cfab028f30596c27f977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:ef:b8:13:73:3a:09:8d:3c:0a:9b:54:49:
e3:fc:87:dd:45:38:4e:33:f5:c5:2d:ee:c5:16:c0:
fa:96:fb:8a:61:04:7a:c4:f8:05:e4:55:0b:91:de:
d3:cb:1c:0c:99:ba:9b:70:0f:82:79:eb:47:08:e5:
0c:e8:24:cb:d4:fa:a7:0a:47:36:27:87:b3:b0:ee:
ce:c6:7c:52:35:a7:fc:95:d1:d7:18:e7:f4:ba:66:
68:03:01:33:f6:91:2f:01:05:06:8b:8b:19:28:aa:
ee:05:86:6f:e4:93:98:93:bc:58:ac:ea:e1:f1:0a:
5d:f0:54:24:3a:50:1b:db:7e:1a:4c:b1:fa:c4:d4:
37:04:81:54:03:90:f5:11:42:0b:7b:0d:96:53:64:
da:f9:80:86:a7:f6:fc:58:20:29:83:c3:08:b0:b2:
d7:de:06:ea:92:c2:84:43:87:1c:f0:6d:93:b4:d1:
46:95:da:2f:5b:0c:f4:33:33:53:aa:6c:1a:8a:1d:
57:65:fa:10:1c:b2:bb:f7:f6:cf:72:2c:51:78:ba:
c4:3d:c5:e2:3b:55:d1:44:d4:42:72:22:6a:3b:1e:
fd:37:49:72:e0:d3:13:16:d0:d9:ba:0e:66:08:3c:
0c:79:bb:16:33:03:bd:80:2f:d8:68:17:51:9d:6d:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:DC:2F:33:F5:24:A1:51:50:CF:AB:02:8F:30:59:6C:27:F9:77
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8a:f0:5a:57:96:c7:8e:95:3a:4d:2b:a3:5f:fb:0e:a4:5b:
d1:f6:24:f7:4e:ef:01:05:0e:24:26:3e:92:67:98:b5:77:01:
51:84:68:68:68:5f:b2:a5:8f:aa:4d:f1:ae:d6:02:ba:16:eb:
22:f9:96:1d:66:6e:46:4f:25:db:4b:4f:a8:e8:1f:e3:ed:31:
ff:88:5e:56:da:7f:b9:0a:f6:8e:ca:44:0a:d6:0c:d3:15:53:
fa:93:ba:84:51:0c:07:90:9d:b3:06:4a:3f:49:f4:7f:e7:7e:
54:13:d3:53:a5:2a:31:0c:0a:c3:ac:73:ca:74:ed:bc:f7:b2:
82:84:4f:21:8c:c2:f2:0c:34:03:9e:a2:6f:36:68:f8:9f:d0:
ca:17:c7:c9:e6:5b:68:75:e0:75:b5:65:d8:a9:10:a7:4c:5b:
c4:56:4b:c8:05:f2:ab:70:e6:f7:86:38:7f:07:23:fc:13:17:
5f:d3:7b:88:0e:15:f8:d3:b0:03:58:6b:73:7d:d2:e8:3b:03:
7d:ee:98:fb:b6:37:4e:8a:19:87:7c:38:fa:20:cc:04:f9:3d:
c3:ad:b9:0e:58:39:19:eb:2f:45:d9:56:f0:97:5b:a2:f3:89:
02:1c:72:c1:cb:f2:5a:c4:6e:04:27:8b:f9:92:13:8b:79:c7:
10:60:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:30:18 2026 by rpki-client