
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: qbzOQqDmT9sZsNpbrXhCNuWcPFaSJX18yzCzTY5KPG4=
Subject key identifier: BD:CE:6F:8A:BE:D2:DA:32:DA:9C:70:24:B1:09:EB:7E:75:47:46:F5
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019D9A7525E4D0B413DAA158A26A18686736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: lE+1+urh1l1phoTRFWTf9FzyGLbIeydtwoLxxI29LUc=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:25:e4:d0:b4:13:da:a1:58:a2:6a:18:68:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=bdce6f8abed2da32da9c7024b109eb7e754746f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:47:3b:6d:80:cd:32:82:d4:16:ef:f3:9d:
05:8b:b0:ed:3b:85:a2:ea:7b:9a:e8:b2:98:86:c9:
ca:cd:ba:52:9d:88:1a:0e:99:db:3c:be:78:3d:50:
0a:55:4b:d4:de:67:e9:e0:e6:27:04:a8:62:65:7d:
36:40:7a:cc:07:d9:da:2a:ea:94:31:d2:a0:ea:f2:
98:4c:21:a6:6a:37:4f:08:0c:3c:b9:04:ba:3c:c7:
e8:99:38:00:3f:01:cd:a5:38:7e:68:b7:7a:d6:f8:
09:ca:1b:a0:36:d6:50:04:59:db:38:1d:bd:41:cc:
b5:08:59:90:39:29:43:66:05:f6:c0:ce:91:40:a1:
43:fb:cb:11:b1:f9:c0:80:67:98:42:d5:77:35:bc:
98:46:c6:96:8e:ef:8e:b6:73:6d:01:40:c2:19:d5:
e6:e8:72:e7:91:93:2d:f3:e5:5c:97:44:9d:63:56:
5f:a0:2b:88:da:1a:c6:fa:1f:ac:44:08:84:88:71:
00:24:7c:da:40:68:5d:d5:e2:f9:ee:7f:3a:99:b7:
da:9d:2a:b6:c7:cf:34:8a:23:84:bc:d2:70:96:44:
f3:33:2a:35:e5:72:c6:97:7f:87:72:b3:c6:cf:3b:
8c:03:0b:27:a0:bc:ee:37:c1:25:38:be:b5:ef:11:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:6F:8A:BE:D2:DA:32:DA:9C:70:24:B1:09:EB:7E:75:47:46:F5
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a1:57:89:4e:c3:9c:8a:d3:3d:3e:9f:a7:a4:8f:9c:f4:2e:
c5:25:28:c6:dc:4f:c2:5c:64:d4:7e:63:e9:36:ae:ca:07:24:
92:0a:5b:71:21:ea:3c:c6:ca:ab:b1:17:97:67:f1:74:6f:89:
f1:ba:fb:8d:45:53:11:9a:96:05:14:89:8e:40:b5:d5:1b:c8:
c1:d5:b2:00:e9:9b:7d:6f:42:00:e7:5e:9f:3e:1d:bc:5c:8b:
1d:de:4f:43:23:e2:d1:0f:71:dc:8f:7d:1b:90:84:60:28:3e:
9f:3a:db:db:1c:9f:35:fa:2f:93:2c:93:a0:bf:eb:9d:d6:f4:
82:2f:44:a6:6f:92:45:2e:ce:0d:80:c0:cc:bb:91:cf:31:4d:
95:c6:bb:4b:3d:52:15:d7:65:72:67:de:b5:dd:9e:44:af:c5:
f7:30:c1:50:b4:eb:5c:8d:fa:0e:61:a7:1b:98:a8:27:64:e7:
4a:07:25:4d:72:31:b8:27:c8:94:53:c1:6b:6c:1b:06:62:e4:
5d:29:6d:74:0a:df:e8:f1:4c:3e:86:40:8e:79:13:a3:b5:33:
2f:0e:65:16:45:ef:78:ab:84:38:bb:05:2d:87:76:84:40:ae:
df:74:28:94:a6:11:ca:5b:1e:17:bb:fe:ff:2f:00:b7:43:43:
52:bc:69:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adSXk0LQT2qFYomoYaGc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjYwNDE3MDgwMTAxWhcNMjYwNDE4MDgwMTAxWjAzMTEwLwYDVQQD
EyhiZGNlNmY4YWJlZDJkYTMyZGE5YzcwMjRiMTA5ZWI3ZTc1NDc0NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuhHO22AzTKC1Bbv850Fi7DtO4Wi
6nua6LKYhsnKzbpSnYgaDpnbPL54PVAKVUvU3mfp4OYnBKhiZX02QHrMB9naKuqU
MdKg6vKYTCGmajdPCAw8uQS6PMfomTgAPwHNpTh+aLd61vgJyhugNtZQBFnbOB29
Qcy1CFmQOSlDZgX2wM6RQKFD+8sRsfnAgGeYQtV3NbyYRsaWju+OtnNtAUDCGdXm
6HLnkZMt8+Vcl0SdY1ZfoCuI2hrG+h+sRAiEiHEAJHzaQGhd1eL57n86mbfanSq2
x880iiOEvNJwlkTzMyo15XLGl3+HcrPGzzuMAwsnoLzuN8ElOL617xHG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3Ob4q+0toy2pxwJLEJ6351R0b1MB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKFXiU7D
nIrTPT6fp6SPnPQuxSUoxtxPwlxk1H5j6TauygckkgpbcSHqPMbKq7EXl2fxdG+J
8br7jUVTEZqWBRSJjkC11RvIwdWyAOmbfW9CAOdenz4dvFyLHd5PQyPi0Q9x3I99
G5CEYCg+nzrb2xyfNfovkyyToL/rndb0gi9Epm+SRS7ODYDAzLuRzzFNlca7Sz1S
Fddlcmfetd2eRK/F9zDBULTrXI36DmGnG5ioJ2TnSgclTXIxuCfIlFPBa2wbBmLk
XSltdArf6PFMPoZAjnkTo7UzLw5lFkXveKuEOLsFLYd2hECu33QolKYRylseF7v+
/y8At0NDUrxprA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:53 2026 by rpki-client