Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: OJXEhIz1hv2xc5zKW/PFTaWY1I9hbXfR6Vdu0SlZH1Y=
Subject key identifier: 7F:2A:D4:5B:D6:85:EB:A5:5A:92:ED:E2:13:73:6B:A2:C3:33:BB:80
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019CAAC66C4001B46A352C33E82D4CC31E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 0700
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (hash: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A=)
2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: eWfNk26aLXAX458pBdWe1d552gMFfbFkV9QU8zCGG6Y=)
3: g9ua57B68Th2qHv-LwwTCs4_D70.roa (hash: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6c:40:01:b4:6a:35:2c:33:e8:2d:4c:c3:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=7f2ad45bd685eba55a92ede213736ba2c333bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:d1:c8:44:6f:c5:83:0d:1a:ef:51:fb:df:
07:14:00:f7:e7:d3:5a:5c:37:b6:0e:38:ed:d6:b0:
04:28:a5:85:cc:20:27:58:3d:b1:a8:0d:26:f3:be:
9b:e6:a1:e3:97:dd:8c:c4:f2:fe:c6:8a:82:a2:2d:
db:bf:50:09:e4:15:f0:d7:97:3a:2e:35:44:dd:56:
c8:ad:24:46:13:c0:df:eb:bb:c1:75:be:72:e5:e9:
aa:ec:38:3c:77:ce:c2:37:e1:60:01:12:99:26:a9:
98:9f:96:fb:e4:4d:0e:f1:e9:61:ae:84:d5:9e:4e:
dd:e1:63:b4:a2:21:c5:ad:41:71:5b:05:4d:24:f7:
cb:93:9e:bb:ff:b7:59:29:37:05:f3:0e:6a:e9:eb:
bd:ce:2c:05:5f:df:80:3b:b9:53:1b:72:82:eb:4b:
52:41:fa:c6:06:75:92:16:fc:a9:af:13:43:d4:94:
91:04:0a:76:3b:fc:6c:0a:c6:c9:b0:02:53:d0:4b:
cf:3c:41:5a:55:19:60:c5:ee:8b:75:cd:d3:20:b4:
af:77:7d:93:45:5c:d2:87:79:51:ab:89:46:ff:fc:
ba:0b:4d:48:d7:dd:3a:0e:55:08:e2:de:6a:26:cb:
f0:38:18:a6:70:b3:7c:d1:30:f3:23:ad:8b:02:eb:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:D4:5B:D6:85:EB:A5:5A:92:ED:E2:13:73:6B:A2:C3:33:BB:80
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:ad:88:b3:82:a5:2b:3b:77:9b:c1:c8:a4:e1:cb:40:70:
87:a4:f5:90:fc:c2:83:26:02:7d:fb:38:d1:c2:fd:34:09:84:
5c:26:d2:25:53:1b:c1:88:79:41:44:aa:de:f3:ee:74:7e:04:
07:02:a9:25:37:30:d7:99:7c:3b:fc:29:62:b8:4f:f0:cd:17:
a5:82:d7:ab:3a:74:19:ee:c8:31:0c:0d:c8:47:46:12:a8:a1:
7a:8d:8d:9f:2a:01:9d:47:a4:32:76:16:e3:e4:c3:8a:4d:c2:
aa:42:4c:ed:b9:17:98:66:39:d3:5e:38:cb:3b:d1:dd:c3:a5:
1d:4f:f6:48:88:66:d3:8a:9c:d2:ac:38:51:cd:6c:c7:88:3c:
20:95:10:50:c4:dd:d6:e3:19:68:d0:ef:dd:d7:a7:10:e3:ee:
28:3e:ea:09:4d:8e:18:f5:e5:62:41:98:cc:9b:13:9b:32:ed:
31:5b:64:04:d5:a6:56:36:42:70:51:63:19:f6:fe:25:dd:ad:
4d:21:2e:c3:02:b8:eb:f7:15:1a:49:e7:dc:4d:12:e8:5d:a0:
40:1e:93:09:b2:3f:4a:fb:4f:bf:b4:40:01:a0:46:14:5c:8f:
8e:8a:66:c8:20:13:8e:63:f3:b3:9b:1f:e7:16:c4:d5:8a:63:
f3:8b:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:16 2026 by rpki-client