Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: pqbnih1YFAspgj9os0VU+a3uam+uG9SA0LiOuzQj26U=
Subject key identifier: 28:37:E3:CD:E8:9E:E1:05:A0:B8:11:84:FB:52:83:C5:69:30:A1:02
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 019CAAC66836B6354A6185CEBCEC19E9ECB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 10A6
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 9Zj08Nsu2ULVP8gIHp68zr62hmY.roa (hash: nO29O+Uk8juTUNEEagfxAVpw9Sl4csffNTrx+Oc64nY=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: HGQYmBmI4yBdb5591ukhrvMJpssOd5+rqhrGY0Tvw+o=)
3: MwCkZw46V56EbDdpsFrBOWOZkt4.roa (hash: 3J3DHw+6tojy7fNaTLRG180mDndrsXFRPZKmpNmiMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:68:36:b6:35:4a:61:85:ce:bc:ec:19:e9:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=2837e3cde89ee105a0b81184fb5283c56930a102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:42:6e:b4:af:9a:0b:ff:ea:5b:21:f7:e4:
b8:c2:a9:f0:67:43:d5:a9:ab:96:9b:dd:dd:0d:7e:
31:25:e1:75:30:96:5c:64:55:91:0e:06:1a:10:b6:
69:e7:d7:fc:e5:11:f1:a3:69:79:0f:33:99:65:15:
87:2b:0c:73:68:cc:78:e3:a3:92:b2:11:44:be:93:
77:c7:4e:8f:78:0f:e8:16:bf:65:7d:30:22:e8:53:
5a:66:fe:86:41:17:61:a0:4d:02:47:38:70:b6:4c:
9d:42:91:67:f1:57:fa:75:ab:ab:d5:6b:06:1d:28:
de:9d:30:10:77:79:d3:6b:74:2c:9a:69:0a:58:88:
ef:1e:58:cf:f4:4b:78:1f:8e:d0:f8:a5:5a:4d:d3:
a9:bd:73:f8:72:7c:eb:0a:11:c5:5a:c2:00:95:b5:
7c:5b:fd:2f:54:40:a2:d3:ed:df:44:46:43:a8:0b:
61:a3:1a:a7:a4:0e:a4:1a:a7:f7:20:f7:7d:a3:2e:
b0:cb:36:ab:1e:9c:6d:44:7c:32:31:4c:dc:36:51:
a6:18:4a:fe:14:31:6b:50:ff:0e:ab:71:13:8a:2d:
27:d2:24:2e:aa:5e:a1:cc:0e:d4:76:c6:0e:e2:60:
a6:19:73:1e:4d:a4:37:18:6d:b1:71:7d:4e:ab:b7:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:37:E3:CD:E8:9E:E1:05:A0:B8:11:84:FB:52:83:C5:69:30:A1:02
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0b:ad:59:7d:da:d9:74:c1:69:b3:49:08:e2:69:57:79:f6:
56:51:82:b4:a1:a3:14:af:7e:67:20:c7:46:d8:45:d3:40:fb:
eb:c6:69:c0:55:ff:92:96:b5:da:65:10:06:45:54:5a:e0:62:
e4:62:2f:28:2c:0b:3b:07:52:e8:9c:94:62:44:51:7b:c6:5f:
36:e9:63:21:50:cd:e4:b7:d1:0d:66:9d:a3:dc:bb:10:cf:d5:
99:1f:69:a5:53:47:a2:70:4f:ae:63:fd:62:d2:f0:49:63:a5:
ab:d7:10:12:8d:a9:62:d4:cd:7e:a8:6f:fe:ab:a0:a4:09:e3:
85:ad:dc:fc:37:f6:56:e8:8d:ff:f6:de:30:3a:9b:35:59:e7:
d6:27:24:b4:9e:35:0d:38:67:a0:d0:fd:f4:d1:8d:6c:7d:41:
6a:5a:c1:07:5a:6b:7d:6c:92:b0:b2:95:fb:b0:96:a2:ee:5c:
d7:dc:ad:b5:58:0d:61:6f:d6:b7:f1:3d:59:28:bb:57:9d:66:
68:3d:3e:37:01:d4:87:a5:18:1f:2d:6e:15:fa:ce:05:8c:0d:
b1:25:92:4a:fb:cc:14:29:cd:99:45:bc:67:e9:22:b9:b3:83:
ea:81:b9:18:51:7e:30:8b:82:f3:86:f2:3f:6b:77:26:3e:01:
1c:8f:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:23 2026 by rpki-client