Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier: jCqwtfNTxVSZOBqJtIroMhMP+6Arg3lME5EtEvY2eMU=
Subject key identifier: C7:6A:1D:FC:C5:EC:52:24:33:19:A7:CC:96:A9:9F:F7:56:A1:BE:ED
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial: 019D98F4117111971A0F5A43154DFD587349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number: 17FB
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: FMUnW5rLYCKSJNSHuFMWB6ZaiqhXsGp3tgIElTQL01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:11:71:11:97:1a:0f:5a:43:15:4d:fd:58:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=c76a1dfcc5ec52243319a7cc96a99ff756a1beed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:8a:10:b2:32:98:33:2f:31:82:82:7c:71:
64:11:5f:04:6f:d4:4c:35:f1:05:b4:72:89:16:4f:
6a:9c:f6:15:a5:8e:b7:1a:13:ee:3a:c8:b0:4c:1e:
af:97:e6:b2:7a:58:a1:5b:eb:07:b0:ac:9e:01:e8:
38:d3:6f:b6:a8:90:df:a3:b6:e0:33:d8:c4:aa:18:
98:5e:fa:24:e2:07:68:97:6d:2c:ae:7b:f7:7f:e6:
b2:fc:a8:4d:1a:69:52:e3:cd:dc:53:40:5d:43:79:
2e:ce:72:2f:8f:a5:16:4b:c7:8f:f3:c4:b3:d3:4c:
a9:fe:f3:63:ee:d2:02:61:72:2b:af:37:e3:48:85:
93:ed:d1:57:e2:76:12:7e:79:87:bf:88:58:87:c8:
5c:e9:19:40:2a:c5:a5:6c:44:2a:6c:ed:2b:6e:e3:
bf:6b:97:b8:cf:ff:50:1a:76:f7:91:c1:e0:cd:55:
da:c4:29:01:23:39:f7:70:7c:6e:3b:b3:e8:d9:82:
5c:0a:89:99:cb:c8:63:00:cd:e7:cf:e2:e9:75:24:
98:b3:20:08:98:52:fc:e2:7e:d3:c5:9c:8a:71:9f:
3a:ab:e4:80:99:24:54:6e:b1:f3:12:13:ba:db:c6:
8b:9c:66:67:ad:ca:d8:aa:12:0a:9f:a0:e3:50:75:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:1D:FC:C5:EC:52:24:33:19:A7:CC:96:A9:9F:F7:56:A1:BE:ED
X509v3 Authority Key Identifier:
keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:82:aa:bc:69:2a:2a:26:e4:42:c6:d8:63:dc:92:db:85:7e:
85:aa:ba:b2:22:2f:4e:f0:f3:de:72:22:3f:83:c2:97:a3:35:
b5:8d:d6:06:d5:74:80:75:f6:b2:f1:3e:57:59:7d:0f:8d:fa:
d9:5c:f4:75:c6:d0:77:12:be:d4:62:3a:2d:0d:61:a3:f4:6f:
97:a2:b5:5f:5e:e4:5c:7b:36:65:f7:15:26:ca:11:88:20:db:
f8:52:e6:69:f2:d5:cf:02:10:38:fa:c9:b6:8d:15:b5:a7:0f:
33:74:bb:49:4a:65:08:17:88:ad:09:0f:26:c2:b4:b7:5f:60:
19:fa:5c:e7:3c:99:78:7f:40:91:4e:5c:2b:6d:34:38:09:00:
96:5c:86:02:bd:58:01:a7:af:07:1d:0f:60:22:42:1c:26:dc:
3b:cb:a8:df:c7:0d:fe:c5:8c:d1:d6:20:0e:59:3e:fa:89:43:
f7:6c:37:72:a8:83:7d:b8:5e:b6:f5:52:44:09:21:ba:f2:c3:
12:76:6a:85:25:0b:05:62:22:36:d4:81:29:c2:cb:0a:91:4b:
52:86:b4:1a:e0:4b:98:cb:92:95:a1:30:31:64:db:4f:4f:a6:
64:13:23:10:76:7a:0a:5d:96:ba:cd:d7:8d:e4:d0:70:35:6f:
fa:a3:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:34 2026 by rpki-client