Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: qaEwZH2Vbaffqx7S05HOQ0t4LNVZRGyIIHHqjT6jK+w=
Subject key identifier: BD:6E:09:64:62:9B:03:43:0C:76:6F:B5:D6:28:4F:27:0F:CD:64:E8
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019D9A3DEAA5897162860E8A5D1BEF4C6037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 077C
Signing time: Fri 17 Apr 2026 07:00:42 +0000
Manifest this update: Fri 17 Apr 2026 07:00:42 +0000
Manifest next update: Sat 18 Apr 2026 07:00:42 +0000
Files and hashes: 1: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (hash: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A=)
2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: rYEIf78O69dPl3znCS+Mfz5leVbfr3NFgIoyuS3udco=)
3: g9ua57B68Th2qHv-LwwTCs4_D70.roa (hash: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ea:a5:89:71:62:86:0e:8a:5d:1b:ef:4c:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Apr 17 07:00:42 2026 GMT
Not After : Apr 18 07:00:42 2026 GMT
Subject: CN=bd6e0964629b03430c766fb5d6284f270fcd64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:33:dd:58:04:61:ee:82:ed:3d:aa:7e:f7:
5e:59:9b:96:21:6b:c8:e3:db:89:de:d7:23:ee:fb:
d5:eb:32:6c:8e:72:66:db:b6:f1:9c:47:f0:ad:d6:
85:03:58:ad:84:8e:49:a6:31:36:cf:35:76:81:8b:
10:f1:a3:60:bc:e6:a4:7b:ca:a0:8a:d3:38:8a:2e:
11:05:66:67:d5:aa:e5:83:c5:ec:8e:4a:cf:69:60:
0c:01:7f:a9:c0:5f:5d:f3:6e:06:29:40:28:fe:4c:
fd:a5:88:66:73:57:6d:fd:8a:b8:de:6c:71:98:df:
a2:fa:d3:78:77:39:2a:05:8c:79:61:58:b5:a0:97:
4a:60:d9:98:7c:50:9f:c4:19:1d:50:c8:70:90:63:
1c:8d:7d:e4:98:69:7f:7d:93:c2:87:24:69:69:81:
76:c2:2d:73:67:ea:51:d4:ac:b9:a3:32:98:73:02:
8a:18:d2:d8:5d:db:da:65:cd:f2:37:b0:54:3f:48:
e2:a9:6a:37:fb:6e:f1:5c:dd:99:89:c9:44:c1:13:
3a:f1:f5:a1:aa:d5:30:99:71:e6:05:4b:21:10:3e:
f8:67:55:ac:49:7e:91:4f:0f:75:f4:7f:04:7d:fd:
05:1d:a9:fd:ba:20:5c:09:53:52:be:d7:fa:96:e1:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:09:64:62:9B:03:43:0C:76:6F:B5:D6:28:4F:27:0F:CD:64:E8
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:e0:49:60:e3:7b:75:3c:6c:d9:7f:ec:a9:59:ad:ed:b1:
74:ec:56:7a:2b:96:a1:7e:55:9b:8c:fb:89:73:f2:3c:48:1d:
b5:92:27:7b:6f:0c:98:93:25:be:8d:1a:7e:b2:54:6d:3f:5d:
76:74:01:1a:af:5e:a5:c3:6b:1c:df:cd:c1:78:f6:25:3c:55:
90:17:c3:c7:e9:33:d5:02:fd:82:bd:0e:6c:6f:82:b6:fb:e8:
e4:8c:ea:bc:04:66:e7:92:75:f9:e3:14:e1:10:48:aa:39:3c:
04:3e:4c:45:3c:19:98:8e:2b:75:30:81:40:fd:2c:3a:fe:78:
97:6d:4d:bb:61:b3:48:7f:34:36:50:9e:f9:36:e8:10:7d:9d:
ff:26:a2:4c:9b:16:66:30:29:89:9e:7d:e6:59:5c:b0:2b:4d:
ee:09:2c:8d:d7:a2:37:ba:38:62:e8:d6:e4:ff:eb:dc:61:91:
1a:1e:dd:b3:10:38:a2:a3:8d:ab:ae:f8:54:c4:75:c6:84:04:
2c:2e:78:a3:8d:a5:69:63:9a:de:64:c5:af:65:a9:25:3a:46:
38:f0:1a:13:8d:93:54:88:24:c2:2e:4e:8a:c6:ac:c5:dc:a7:
be:d5:d3:f9:13:0e:14:c3:54:5f:68:ab:c4:60:7c:c1:eb:55:
c5:39:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:00 2026 by rpki-client