Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: zMO0sMbornGM4Sl39nIVmbn3LCQXUrkTG/4NFowBpeU=
Subject key identifier: AE:FA:2E:E6:FA:12:E5:F4:A4:63:2B:F6:C6:46:F6:13:DE:3C:E8:55
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 11E2C648DA2A0817B7F54C3B331E6D26FA869C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 0141
Signing time: Sun 19 Apr 2026 07:09:04 +0000
Manifest this update: Sun 19 Apr 2026 07:04:04 +0000
Manifest next update: Mon 20 Apr 2026 08:42:04 +0000
Files and hashes: 1: AS207529.asa (hash: pWR1EnATQfsKxwaJLPQdoGZ4J3aSL+bBG05AecOQxWE=)
2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: uWA3beouNzyGqjZ4UdZE1u46NZkPIEfS6s8+2R8QliQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e2:c6:48:da:2a:08:17:b7:f5:4c:3b:33:1e:6d:26:fa:86:9c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Apr 19 07:04:04 2026 GMT
Not After : Apr 20 08:42:04 2026 GMT
Subject: CN=AEFA2EE6FA12E5F4A4632BF6C646F613DE3CE855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:49:19:25:c9:77:bc:8a:a1:32:2b:e0:54:
65:b6:60:48:43:a1:7e:8f:8c:a1:f1:02:fb:14:28:
c7:d9:e0:f3:ee:85:89:93:d5:1d:3c:7f:99:c6:34:
2c:57:65:cb:7a:50:36:6a:b6:5d:f7:b4:21:a1:5f:
19:87:9b:8f:61:d6:fd:d4:ae:9c:2e:bc:b1:cd:9e:
60:c0:32:00:fa:41:f3:01:fb:cf:9e:b3:7c:78:47:
1c:fd:d9:dd:eb:f5:82:47:cb:de:29:82:7d:83:e1:
6e:6a:cf:b5:c4:1c:3e:e0:6a:d0:07:46:99:f1:81:
37:32:ff:95:9b:3e:cc:34:7e:b2:38:a7:48:90:3d:
f5:6c:9b:f2:a5:a8:42:df:71:b8:6e:96:88:44:ed:
27:3f:83:c3:5e:3c:23:d2:6d:5b:83:fe:ca:b4:f6:
86:51:be:00:bb:c0:16:7b:5d:6d:07:86:d4:79:cd:
60:5c:9a:a8:2e:61:82:aa:88:3a:4b:1f:18:ef:29:
20:37:a2:ba:9b:40:a7:b7:69:a8:35:f3:b9:dc:00:
e2:4f:d5:58:63:be:97:1c:cf:a2:f5:08:71:37:d3:
90:4e:45:70:af:60:11:89:68:be:fa:ae:2f:29:0b:
86:35:77:1f:ef:18:3c:cf:86:01:79:bd:eb:ae:22:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:2E:E6:FA:12:E5:F4:A4:63:2B:F6:C6:46:F6:13:DE:3C:E8:55
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:52:f8:0e:69:0b:26:94:9c:c5:9d:60:e7:e5:a6:97:d9:
ba:7c:72:2a:6d:4a:e5:d7:b7:34:63:89:9f:b2:72:37:8c:f4:
f7:74:b0:5b:fe:46:53:0e:eb:2c:4d:8a:a2:d3:59:73:10:59:
61:b1:ea:7a:40:45:38:34:76:46:17:1b:c1:ab:f9:ff:82:dc:
7d:fa:d9:7a:fa:e1:ac:5e:12:40:e2:83:ef:f4:08:8f:e0:4e:
38:aa:8b:fe:e2:aa:41:34:e5:ee:8f:5c:1b:fe:44:60:fd:03:
be:f2:28:a7:90:36:eb:30:0e:82:99:a8:9c:71:86:6b:0e:45:
75:d4:be:70:af:e8:fc:b2:38:d9:96:63:2f:c5:43:43:b6:b1:
71:48:09:0e:26:aa:3f:65:f4:18:ca:48:6c:e9:a5:c9:2c:13:
65:46:be:dc:c5:d0:19:ea:02:e0:6b:24:ce:27:a6:50:e7:c6:
73:6c:3a:f4:dc:0c:92:86:78:07:e8:6a:0c:4c:8a:15:d0:c6:
40:73:e5:1d:d5:1b:f9:a7:6d:16:83:f5:8d:7a:ed:66:0b:f4:
45:30:0e:f0:51:e3:43:a4:3d:ea:99:00:1e:d1:2c:c2:66:91:
2e:7f:e7:91:0f:d4:a5:0b:ce:e6:1d:66:fd:d9:6d:64:2a:72:
5e:bb:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:19:27 2026 by rpki-client