Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: 9D1rmM7COGDf8ZEW+U+T2HezwJBADbI30Skv7ZqV8hw=
Subject key identifier: BC:59:52:9E:EA:8A:B5:F8:EA:48:9E:8E:46:24:E0:D9:89:82:90:8E
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 79FBD36C8FEF57E20953E885C534BA990D3C0FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: FE
Signing time: Sun 01 Mar 2026 11:02:57 +0000
Manifest this update: Sun 01 Mar 2026 10:57:57 +0000
Manifest next update: Mon 02 Mar 2026 11:31:57 +0000
Files and hashes: 1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: tpiJ8L+1dBbUG9Fts1kyCmMDSWj/wRhisV3Ocw4A1Qs=)
2: AS207529.asa (hash: WJefrQG9jYfFgi+h6I7ifnwzueVo1DrEwVXU/kxbyaA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fb:d3:6c:8f:ef:57:e2:09:53:e8:85:c5:34:ba:99:0d:3c:0f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Mar 1 10:57:57 2026 GMT
Not After : Mar 2 11:31:57 2026 GMT
Subject: CN=BC59529EEA8AB5F8EA489E8E4624E0D98982908E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:a8:58:c2:95:8a:7b:ab:00:a9:9c:48:fd:
b4:20:56:fe:4f:5c:06:4c:ed:cd:b8:55:18:ca:91:
c8:30:27:14:2e:80:8a:82:3b:eb:8d:1d:c2:66:17:
ba:60:4b:65:63:2a:2a:4f:cf:32:ec:7f:22:20:f4:
20:f7:a0:13:5c:23:12:2e:78:ee:fc:c1:ec:68:d9:
ce:bd:d8:35:e1:75:86:4f:3c:a5:e6:aa:e6:5d:f0:
38:ca:19:62:00:3a:c2:c8:59:d0:07:ab:55:a6:1d:
43:66:1c:72:d3:eb:54:b9:46:c0:6c:ec:6f:9f:b4:
11:bf:99:f5:ec:b4:5d:f5:78:64:8b:b9:8e:c5:80:
64:c8:27:85:33:7d:0f:cd:ea:70:1b:20:dc:dc:bb:
80:81:10:17:50:16:81:e6:f2:80:c9:81:71:3f:8f:
62:19:6c:cc:3c:f5:d7:e4:6f:31:73:c5:c7:96:89:
53:c1:23:cb:ec:21:a9:fd:24:08:9e:6f:b1:ff:38:
9f:d4:1c:b8:00:ef:30:f2:66:6e:2f:c2:31:56:24:
7c:17:7d:bd:11:71:da:94:d9:83:fd:4f:1d:ea:21:
dc:ed:79:06:96:d8:ca:8e:db:74:8a:39:e6:a1:47:
ee:bb:7b:c2:8f:7e:12:82:52:1a:33:14:6f:65:84:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:52:9E:EA:8A:B5:F8:EA:48:9E:8E:46:24:E0:D9:89:82:90:8E
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:16:79:99:86:b0:e0:ee:91:b6:3f:e3:a8:1a:82:a9:c9:
d7:f9:91:4a:90:4f:2b:65:7b:da:bd:ab:c3:c4:58:b6:d3:ed:
10:4d:36:d0:ad:fa:f1:f0:5f:be:24:f5:3a:ff:fc:52:50:93:
c8:d0:cb:75:e0:52:be:a5:5c:c0:25:70:97:9f:63:9e:7a:e4:
f9:9f:41:9b:40:44:5e:f1:7b:b0:7d:ff:90:12:78:ff:22:4d:
20:04:eb:22:dc:b7:e2:72:00:be:d9:78:54:3c:22:2b:95:55:
0b:46:76:56:30:37:e1:34:b4:1f:4c:2b:89:08:7d:99:1b:86:
33:a3:c8:3f:d4:9d:1b:12:e1:58:01:e7:30:5b:cc:f0:6b:4a:
5c:53:fb:08:3c:0e:ea:14:f5:e0:2c:b8:ac:ba:e1:e7:0a:a2:
be:47:30:48:ef:c8:d5:b5:40:d5:ee:57:a2:91:82:be:b0:50:
3c:ea:3c:fe:ba:2c:55:16:73:b3:cc:ed:7a:07:60:72:41:51:
58:c4:73:58:81:a1:88:27:6c:53:1c:11:f5:49:f8:d3:ae:45:
80:a2:86:9a:65:af:0a:17:d4:99:5c:93:a6:94:04:d3:c5:66:
e2:7a:76:e2:98:da:53:95:53:47:c1:3e:6b:c3:cd:83:0e:8e:
c0:79:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:49 2026 by rpki-client