Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: TTpN3gsWz20ekPq1SUEw3gkS11osyaoEGgBIlXK9dsM=
Subject key identifier: 04:47:3A:AB:90:AA:77:04:1C:23:C7:0B:FE:D9:98:E5:74:92:A4:0B
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 6D31D81A9CFBA01C5060F014849E091C740FE357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 01CA
Signing time: Tue 28 Jul 2026 16:47:10 +0000
Manifest this update: Tue 28 Jul 2026 16:42:10 +0000
Manifest next update: Wed 29 Jul 2026 20:06:10 +0000
Files and hashes: 1: AS207529.asa (hash: NYU3unoez1PFPgI95FST2CQAF674DNyqEK/UcqTtk2s=)
2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: BxuX/eQVGUKXgGGd/ps/7CUkeRUiHTIAXWiUhX0aNtU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:31:d8:1a:9c:fb:a0:1c:50:60:f0:14:84:9e:09:1c:74:0f:e3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Jul 28 16:42:10 2026 GMT
Not After : Jul 29 20:06:10 2026 GMT
Subject: CN=04473AAB90AA77041C23C70BFED998E57492A40B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:2f:6b:10:c4:90:92:2e:0b:22:70:c3:b3:
5d:de:1e:f2:39:fc:71:d3:ae:d9:c6:98:4c:ec:1f:
f0:73:ac:2f:22:ae:27:41:9c:8c:85:d1:72:b5:b1:
23:01:02:4d:c5:5e:a6:8c:aa:8d:ad:b6:e1:3b:6b:
dc:7f:81:88:44:9f:50:a6:9b:14:d0:59:b8:ca:8f:
c8:99:c8:7d:f2:44:1b:fd:cb:bd:a6:6c:75:f6:d3:
72:ea:0b:50:7e:1d:8e:8b:11:a2:1f:d2:ea:58:62:
e2:0d:93:79:88:44:ec:6b:50:ee:ee:dc:f4:bf:e2:
2a:6b:0a:d9:fd:ed:06:99:64:b5:d9:f6:43:8a:cd:
b4:f1:27:55:3b:16:d2:b8:08:1b:27:68:e7:8a:69:
2a:8f:fc:f5:45:13:ce:df:b2:e5:13:63:03:fc:86:
b9:14:e5:fd:8d:0d:2f:31:c9:e4:7e:46:03:d7:b5:
9e:87:4c:e7:62:f3:27:16:c2:3c:38:99:c6:1a:6a:
be:7d:aa:89:4f:77:ab:82:9d:3d:a2:32:d8:fe:a7:
5e:fe:f7:31:3a:40:05:fa:34:fa:f7:f7:08:94:61:
19:69:8b:81:f5:7c:0f:e3:15:5f:8b:00:19:d8:05:
ff:c3:d9:4d:5c:b6:91:51:2b:a8:bd:90:f1:6f:eb:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:3A:AB:90:AA:77:04:1C:23:C7:0B:FE:D9:98:E5:74:92:A4:0B
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5e:1e:ae:bb:9c:2a:68:60:e7:27:8f:55:3a:8e:42:08:70:
30:8d:13:f8:f6:05:de:a1:58:9e:5f:9e:56:d1:52:64:6a:93:
6c:78:25:ab:ea:a7:48:7f:84:90:03:68:17:f7:1b:25:bf:2c:
9b:51:45:83:06:ab:55:f6:04:1c:52:6e:d6:a7:61:eb:8a:42:
37:e5:dc:b0:d1:22:7a:b3:65:8b:3c:3e:3d:48:eb:1f:41:ed:
fb:ea:c9:15:09:45:ca:e3:ca:f4:76:43:34:f3:fd:d6:9b:d1:
b5:2a:93:7b:00:c4:37:a2:bb:18:d1:04:a0:3a:16:1a:7a:2b:
50:4e:bd:41:22:a6:a3:dc:3e:8c:ab:4d:84:b3:57:f1:af:17:
a6:79:c4:f1:7e:1d:eb:6d:80:88:aa:a1:d9:85:90:25:12:4b:
bd:79:df:f8:74:5c:a9:d3:02:5e:ae:7d:41:a6:25:aa:ae:ee:
a1:7f:10:55:2b:4a:55:1d:66:6e:9e:08:b9:64:2e:42:2f:f0:
af:4d:ef:97:6a:25:b6:58:fb:63:a2:63:fe:e1:a8:a8:94:e2:
31:30:96:51:b8:10:23:ed:75:ce:55:0f:87:9d:b3:3a:62:a8:
5c:7d:0c:ee:bf:cc:9f:3d:1d:a3:e8:1e:81:36:1f:7d:cf:75:
6f:49:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:36 2026 by rpki-client