Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: bjABbXcuJxR4VKz7S5mKJpnjluHrvFqal/McfF8Y85M=
Subject key identifier: 97:1E:94:03:9D:09:9A:DD:51:CD:E0:19:FA:C3:C7:6B:9E:55:FB:6D
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 019D9A3DF0AA583987F36CBDE377A3E6DE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 1122
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: 9Zj08Nsu2ULVP8gIHp68zr62hmY.roa (hash: nO29O+Uk8juTUNEEagfxAVpw9Sl4csffNTrx+Oc64nY=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: HiDZss1mdL9acpbjucwlv8pke+nioDj42BiRyHtAoYk=)
3: MwCkZw46V56EbDdpsFrBOWOZkt4.roa (hash: 3J3DHw+6tojy7fNaTLRG180mDndrsXFRPZKmpNmiMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f0:aa:58:39:87:f3:6c:bd:e3:77:a3:e6:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=971e94039d099add51cde019fac3c76b9e55fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:0a:fb:47:54:1b:f7:0d:a9:98:f1:0d:00:
b0:01:7c:ff:5b:af:aa:3a:da:f5:ce:c9:1c:df:da:
27:5d:e1:18:1b:06:3c:d7:bd:c5:92:96:50:b0:59:
b4:09:21:23:37:cf:45:ce:c2:04:93:43:89:91:02:
00:97:af:e9:18:31:64:93:ad:56:32:87:e3:df:76:
8e:e8:15:66:5a:d9:69:f4:61:40:fc:bc:17:98:3c:
55:2a:b9:b5:7c:7a:9f:f6:71:03:75:fc:3a:7b:15:
65:27:37:70:53:73:74:c4:8a:66:9a:88:4f:b3:3c:
11:c2:dc:ef:18:0c:36:54:da:34:4e:06:74:5f:fa:
45:f2:a2:4d:9d:df:10:c8:73:72:77:a9:b6:0d:ec:
71:81:33:8e:d7:91:b7:24:2e:f9:7b:c7:00:0e:92:
62:4c:fa:74:22:f7:9b:cf:55:c5:65:58:f2:2a:84:
a0:fd:ba:d5:36:dc:4f:a1:1a:a4:c4:ad:f9:c6:e4:
ed:6e:a4:6e:4c:0a:43:b1:6b:23:83:59:9a:48:79:
0e:8d:45:25:4b:48:1b:98:33:9a:0a:17:f8:b1:b5:
cd:a2:97:ba:2b:dd:51:98:83:ec:1e:04:94:49:b3:
1f:50:a2:44:c1:67:50:4e:58:e5:91:94:e1:fb:57:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:94:03:9D:09:9A:DD:51:CD:E0:19:FA:C3:C7:6B:9E:55:FB:6D
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:17:f5:62:72:b2:d6:40:3d:96:23:6e:a1:6c:64:76:0b:
54:89:ec:c2:bc:e1:8d:24:e0:8b:24:49:09:51:19:45:af:14:
f4:a3:b3:36:64:f2:74:51:53:a8:9a:72:31:27:17:7e:58:ed:
4e:7d:bf:9d:fc:f8:d0:68:b9:6b:69:bd:2b:b8:a7:ce:a2:dc:
09:54:75:5f:79:68:de:db:b1:31:80:b7:b4:04:aa:2b:b4:5a:
40:b9:a3:d8:fe:82:27:25:78:e9:d0:60:97:2b:d2:7e:89:53:
d9:65:b7:91:97:e8:9f:df:53:49:32:2b:13:c6:40:bd:c5:ea:
66:f7:95:68:b0:02:f9:65:70:d1:9c:9f:ae:fc:c8:18:bc:89:
b6:c7:1b:23:f1:a9:40:35:b2:f6:ab:b5:89:9f:8f:93:fa:79:
f1:08:b6:3b:69:a6:c3:bc:f0:1c:69:4d:83:1d:d0:3d:29:1c:
01:40:11:cd:41:2b:16:9f:bb:26:3e:6f:65:46:d9:b7:ba:36:
f3:0c:cd:29:9d:5a:96:27:81:f2:ee:24:d0:98:c7:b6:d0:e4:
54:c8:60:ee:fb:52:05:48:b4:33:20:eb:36:d9:aa:98:03:c3:
ef:d2:bd:15:b1:16:86:ba:90:a5:24:d5:f4:75:e0:2c:26:c8:
40:da:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:45 2026 by rpki-client