
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: cPM/Do64RRizGJCL3v1lLHfOB07uz01EjiuGoF1k7ik=
Subject key identifier: B8:FC:2A:6A:2E:CB:E9:74:93:16:80:61:FB:E7:9A:55:79:FD:DD:44
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019D9A3EF063B9E2D564C92747A30A1D7264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0F05
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: GousI3XT19BABmta9Nllh/Evz+DZMzmEJoPEPcs9YNA=)
2: EodnXNpOUyBjNjY3K3YWA2EuVcI.roa (hash: TKxk7LeBChJbYfrZKELWl7rVNYFHoj3ofoNl/a0KdQU=)
3: WOkIHZ_QXuDVffIDeDyURK804aE.roa (hash: XuXaE0/bL4SMN9Fmdr4I3pvWojHD0UjSff7wtZuLd18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f0:63:b9:e2:d5:64:c9:27:47:a3:0a:1d:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=b8fc2a6a2ecbe97493168061fbe79a5579fddd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:52:a1:2a:ef:89:e1:a4:6f:6e:00:25:cf:
da:64:f9:c0:ab:ad:bc:a1:c2:0f:b5:f0:e8:63:90:
16:26:7b:60:d6:a9:ac:d8:ec:22:23:10:ef:91:20:
ca:df:16:df:12:bb:54:57:14:d1:7b:1b:b5:92:4b:
8c:08:88:a3:f3:6e:de:3c:3e:36:5e:9c:5a:2e:34:
83:9d:6a:34:7c:da:90:fc:0c:5a:4f:fa:41:e2:d0:
78:54:a9:b1:12:e7:c8:c2:a1:ea:9f:44:2f:89:d8:
2a:ba:03:10:14:f9:f5:ce:ad:23:f9:17:41:c0:77:
02:bb:0c:c6:05:25:cc:21:a5:dd:d7:6d:c7:cc:a7:
50:5f:4e:f2:7c:d3:2f:bf:cf:9c:dc:b7:eb:7b:07:
87:cd:e7:bc:55:c3:3a:0d:8a:30:de:ec:37:19:9b:
2e:e1:9c:c8:98:76:43:97:4c:16:63:62:15:8f:8b:
8e:cb:62:02:fa:df:df:8e:67:0d:1d:44:ff:7c:8a:
86:b3:23:be:3b:87:43:ec:c2:b6:e9:c9:8e:ad:ac:
bc:f4:2e:fb:41:03:96:3d:cd:a0:f7:b6:b5:99:7e:
6b:8d:d6:44:bb:5f:10:57:ff:23:5d:bd:18:4a:1f:
e3:4c:2f:7f:05:ac:0b:69:ad:cf:92:41:ca:88:d1:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:2A:6A:2E:CB:E9:74:93:16:80:61:FB:E7:9A:55:79:FD:DD:44
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:14:99:f2:34:3e:34:f4:34:e8:55:49:88:40:be:67:d4:
0f:ed:94:d1:bd:c7:0d:49:e7:0b:f4:fa:c1:16:d4:6c:e7:be:
f6:b8:e8:47:7f:c0:ae:d4:da:b7:b2:fd:27:dd:ab:52:64:11:
a0:32:0e:a6:34:76:91:0e:c0:14:f5:97:f3:06:c4:a2:43:6b:
eb:a4:50:12:2c:e4:88:6a:ed:d5:66:23:4e:16:a2:3d:f9:3d:
7f:5f:c4:b1:9a:ab:3e:14:bf:0a:16:07:c8:46:b7:39:52:68:
3c:aa:02:ed:94:fc:78:c9:52:06:d1:e3:c6:c9:a5:4f:f9:02:
19:68:95:99:72:72:8f:a5:06:c7:d5:0e:57:c0:25:4b:d2:be:
2a:b7:d7:21:0e:52:35:4b:49:7e:7f:1b:6b:9b:4d:1a:0e:4c:
87:af:44:4a:6d:8d:2a:36:a6:52:02:9d:46:bd:58:d9:6d:0a:
3d:41:60:f1:f8:f3:0a:30:80:0e:44:bb:dd:30:d3:ce:1b:3e:
1c:dd:8c:c6:8b:35:73:51:fd:31:37:0f:23:73:61:3f:dc:ec:
27:d8:2a:99:b9:42:76:4f:5d:de:9a:c7:07:6b:c1:2f:92:03:
cb:46:3a:c4:52:b8:15:6a:8a:9d:2e:10:b9:1d:64:9b:8e:ad:
81:d9:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:11 2026 by rpki-client