Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: KHpmzGaNqMavg9lt5bbmW4MxldcozYAwuPqawUXwp54=
Subject key identifier: 0A:68:E2:25:8C:7F:69:2F:D4:58:FD:D7:38:48:04:F5:BE:62:D4:CD
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 019CAA216CF749FCE9D6C797F63C2028A2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0EE8
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: MS1QQlwSMrge70KDVDfeJWT9RmCrrqEJ0/RWKmqdZxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6c:f7:49:fc:e9:d6:c7:97:f6:3c:20:28:a2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=0a68e2258c7f692fd458fdd7384804f5be62d4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:ad:20:c6:02:af:e4:ad:d3:ae:92:ba:da:
81:af:71:91:4f:e9:7d:80:9b:06:75:63:79:5d:9c:
9e:df:9f:bf:f0:10:52:ae:1d:9f:dc:f0:19:64:55:
3f:90:e6:59:85:a9:74:a8:18:9d:b4:b9:d3:6f:b6:
1c:aa:7b:64:6a:79:73:73:4c:a5:91:67:7f:50:cf:
75:6a:93:32:3e:24:4b:24:cc:4f:e1:2e:29:b3:0e:
30:e5:81:09:36:99:e8:92:3c:f8:5a:e4:55:ae:ae:
d0:02:e7:2e:41:1b:dc:94:a7:b7:48:d4:11:aa:40:
9a:0d:a9:ac:46:0a:3b:45:ed:1b:d5:79:70:d1:2f:
5d:4b:b2:ec:59:6a:ed:4c:ee:9f:ff:50:c2:7c:c3:
fb:a0:d7:88:d7:ba:26:16:b8:30:32:2f:1b:24:16:
6f:b8:79:68:8a:61:83:da:a2:74:bf:77:17:69:20:
fd:67:a4:8c:74:70:1c:25:5a:7e:ed:f8:a3:0c:ce:
72:90:e4:2e:7c:0e:aa:d7:8f:a2:a7:8d:d6:3b:9a:
54:76:22:f7:7e:a2:72:c2:d1:ad:c3:d7:3a:35:d1:
50:4c:8d:df:80:1f:a2:c7:b9:07:59:7a:ed:d9:12:
ed:a9:52:78:78:83:f0:29:b4:52:76:41:89:e8:0b:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:E2:25:8C:7F:69:2F:D4:58:FD:D7:38:48:04:F5:BE:62:D4:CD
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:20:fa:6d:da:17:cb:a0:2f:6e:d8:90:4a:42:c8:76:1c:
aa:db:10:4a:42:7f:86:2b:24:41:af:13:2c:cd:d6:22:a9:97:
88:03:53:6f:b9:4a:94:51:e2:1b:06:4a:91:5d:77:c3:8c:45:
8a:92:83:5d:33:0d:44:fa:b0:d4:15:60:91:94:6e:87:fc:30:
db:f3:96:14:02:5b:f9:5b:8c:e1:b1:0d:e3:60:96:a7:bf:a7:
1d:77:64:ec:5a:86:9d:16:5f:78:77:79:ce:5c:52:6f:7d:f2:
98:bb:0b:d4:c8:1d:1f:6e:f0:96:d7:df:1a:d0:29:3a:21:13:
f7:60:ad:b7:49:7a:99:0a:f3:48:c7:6a:9f:c8:44:1f:b6:8b:
d2:b0:dd:54:04:88:9c:93:3b:13:4a:ad:93:c6:ec:ef:a9:cd:
f0:4f:b6:56:ac:91:50:99:03:cf:83:d9:bb:c2:63:55:47:86:
02:21:bb:60:aa:7e:db:0b:ef:b4:22:1c:e1:b9:ff:bc:b0:07:
ca:dd:6a:e4:3f:01:59:ff:4a:1b:d5:d6:53:ad:9f:6d:d0:15:
be:81:48:e5:c4:07:57:df:3c:10:60:c1:26:d6:57:aa:a1:41:
ec:7f:07:20:93:a8:5e:cb:0e:03:b0:1d:68:0b:16:70:b0:3e:
83:69:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:16 2026 by rpki-client