Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: P8YCHeigC3kO/Nu/Rd1/oFkLaBzJ2BSW7trZ04/Pewc=
Subject key identifier: 3B:7E:4A:8E:13:AA:B0:11:6B:14:68:B0:4B:A8:57:C1:32:7F:7B:AF
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019CAC0FFEAD57D1B4F602DA6F95C3A37D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0EDC
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: VnsczAarxqb5mF8rcrCBZ/Ri+ywK/BbcJfhNPNNl20Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fe:ad:57:d1:b4:f6:02:da:6f:95:c3:a3:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=3b7e4a8e13aab0116b1468b04ba857c1327f7baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:0d:5f:05:e6:32:98:0f:c3:5b:9b:94:8f:
72:3c:2d:c1:b5:95:3e:d9:b4:79:46:60:b3:5a:52:
bc:ee:f1:94:bd:a5:5c:f4:2f:69:a1:a2:0b:05:c2:
f5:da:50:a2:d4:33:ae:a1:52:e7:a2:43:be:88:7b:
78:bc:c7:e1:2e:63:72:b0:15:bf:e4:bb:2e:e4:2e:
6c:42:4b:3d:9e:e9:89:8f:d6:42:e1:91:81:68:84:
ad:82:e5:0f:29:cf:0f:14:76:c2:2f:10:f9:fc:7f:
43:8f:c0:e7:8a:ab:17:bf:bc:1b:e9:da:ba:2a:8b:
b0:70:f0:3b:ae:4c:01:00:8b:fb:a7:40:e9:89:e1:
5b:b8:67:9a:ff:5e:2d:0d:02:e3:50:28:3e:fb:81:
67:7b:53:e9:e8:63:4e:77:bc:da:5f:20:17:81:e8:
f3:66:06:d4:85:85:fc:b6:18:db:8a:b6:10:39:72:
54:27:85:de:8c:b3:84:35:3d:2f:7e:95:da:49:78:
9f:bd:00:4a:6d:57:68:6c:23:a6:1d:7f:35:1e:7e:
ae:cc:d8:04:ef:7b:f5:38:48:c2:de:6f:d1:dd:63:
47:d6:80:57:1f:cb:59:d8:1b:94:f3:62:91:89:46:
a7:4c:f5:bb:f4:3c:35:2d:f4:11:3a:77:93:94:fc:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:4A:8E:13:AA:B0:11:6B:14:68:B0:4B:A8:57:C1:32:7F:7B:AF
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:78:0f:ed:fe:25:47:75:6b:c2:42:ca:ab:f5:a7:a8:33:
ef:99:37:f4:07:95:07:99:ec:e6:69:35:64:39:9a:d8:c5:84:
3b:d2:84:a8:64:79:25:cc:67:a1:d2:2f:f2:6b:29:43:f9:86:
3a:4f:a3:27:29:b8:05:75:4e:65:e9:89:82:86:51:97:41:67:
01:fb:32:34:f8:91:7a:cc:82:2b:fc:6b:49:c3:d2:f7:76:b0:
49:66:40:a2:aa:66:a6:7c:02:83:a5:16:1a:b6:af:25:ae:b0:
f4:82:01:63:e5:80:43:48:57:67:82:73:b0:de:58:ac:37:45:
47:56:66:2b:7b:61:10:2d:b8:56:29:a5:84:b1:90:99:36:c5:
25:b6:c2:6c:d5:fb:0e:0d:f3:93:66:d8:89:dc:95:50:04:59:
9e:1f:2b:fa:90:58:34:d7:f4:3b:11:99:3d:7e:66:f9:14:0f:
7b:47:cc:35:2c:97:93:91:21:89:cd:f2:51:9e:fe:9f:53:e6:
37:d2:0f:d8:fa:c3:fc:32:27:8f:20:2e:e0:f3:65:05:50:8d:
d1:bb:bd:f7:ea:7a:5f:98:5d:27:9c:52:e7:c6:14:52:d6:33:
72:fa:81:15:da:bd:3c:52:c8:ac:b3:f7:d7:c1:b9:4b:60:9a:
ec:07:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:33 2026 by rpki-client