Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: NYBP2FW3FPzzjFc+n9bLSj2K4IsWW6x7k2myvYhikPg=
Subject key identifier: 09:A0:F0:8A:56:CC:21:AD:23:F2:ED:FF:CD:5A:0D:3E:98:31:9F:9E
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019D984FC337DAA9135210993A8EF8597A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:57 +0000
Manifest this update: Thu 16 Apr 2026 22:00:57 +0000
Manifest next update: Fri 17 Apr 2026 22:00:57 +0000
Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: BAUvWaFhd9fHWSrJA4tjeExM10hoTQKIk8t8SkXogF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c3:37:da:a9:13:52:10:99:3a:8e:f8:59:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Apr 16 22:00:57 2026 GMT
Not After : Apr 17 22:00:57 2026 GMT
Subject: CN=09a0f08a56cc21ad23f2edffcd5a0d3e98319f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:69:67:81:9d:f8:b3:28:1a:6e:74:7d:19:
b7:7f:a1:91:1c:7b:c5:59:a7:16:20:f8:ed:f6:a9:
49:69:45:8a:94:12:53:1b:bf:7a:f8:dc:54:09:2f:
78:a6:af:5f:34:0b:37:82:ba:ac:71:29:ae:53:2d:
5e:78:52:27:40:ff:7b:57:6c:c3:78:ff:d9:26:59:
fd:4f:13:9a:8c:54:08:9d:0a:7f:c4:ff:f3:80:01:
80:e4:0b:d4:9e:47:e0:7b:a3:0c:46:77:52:80:9d:
4b:1a:d2:d4:a4:5f:c3:a0:5f:7d:4e:b8:eb:5e:1c:
c8:55:d2:1b:41:e7:78:18:23:22:09:05:dd:dc:d0:
3b:b7:f0:50:eb:4e:89:0d:43:f9:6c:28:95:29:ef:
33:18:09:a5:2b:c8:b0:a9:b4:56:35:70:c8:4b:8b:
3c:ea:99:9a:ad:b2:43:e7:0a:89:d7:f5:47:47:d8:
16:51:d9:24:8b:5b:b8:12:e8:3b:b1:ec:fa:85:8f:
4f:99:32:1e:4f:69:57:e1:76:bf:86:14:36:c7:61:
a6:e8:43:99:f2:12:30:6e:c7:b2:28:45:ef:93:b4:
2d:be:d3:cc:e4:81:d9:33:7d:d0:e3:86:4e:d8:71:
57:d7:5a:72:81:56:1a:02:d3:d1:0d:0f:57:09:3e:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A0:F0:8A:56:CC:21:AD:23:F2:ED:FF:CD:5A:0D:3E:98:31:9F:9E
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:db:65:1d:d7:d8:33:6c:cb:17:0c:6c:b9:08:73:d4:c5:21:
62:0b:d7:dd:1a:0a:ef:08:04:ab:9a:74:38:bc:6a:fc:92:86:
a1:e5:0a:80:ee:02:ac:24:ed:0f:d5:fd:df:e9:53:af:7e:5f:
4b:55:b9:f3:dd:4c:24:6f:74:8f:d3:57:1c:2f:1a:af:b7:99:
b1:b0:59:a7:20:cb:3f:be:8c:0f:41:02:8e:05:40:76:d7:13:
74:4e:e7:64:e2:da:e2:f0:49:f6:6d:72:e0:4b:35:c6:ac:c7:
3a:ee:a9:cb:67:03:db:76:4e:54:20:bb:98:b2:a4:51:52:f1:
bf:43:4f:a6:b7:6e:f2:fc:85:93:15:bc:b2:d8:04:50:4b:29:
43:aa:40:91:60:3f:71:45:78:87:e1:b5:ca:15:16:df:ff:b7:
1e:b4:ef:59:9e:42:18:50:60:67:ed:8a:35:2d:0e:be:02:82:
9b:2a:bd:ad:1e:1d:74:e1:fb:63:d6:28:90:2c:36:dd:13:45:
d0:3b:02:80:38:02:e4:af:29:f6:fa:cb:27:ac:72:79:02:70:
38:0c:69:e1:f1:88:e9:ce:db:78:92:89:3a:b0:cb:a4:ec:41:
63:1a:a7:ed:67:b0:ee:66:b9:35:3f:a8:70:1e:91:c0:6d:88:
39:29:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:37 2026 by rpki-client