Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: uCrU3y4Vn7ybrGMwJVec+gUQKAUJ7FJQGaz9sgD+H/M=
Subject key identifier: 0B:2A:2F:EE:8C:C4:58:A2:F2:69:EC:65:7D:AC:E0:B5:3F:F3:47:72
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01A1377FA1F42F7F170F5F32FB7D6E4B46F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 23:01:13 +0000
Manifest this update: Tue 13 Oct 2026 23:01:13 +0000
Manifest next update: Wed 14 Oct 2026 23:01:13 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: YPEbN+e3DnCl/F6dgRqrVmQP9blvsA3LjkG7J8qy59c=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:a1:f4:2f:7f:17:0f:5f:32:fb:7d:6e:4b:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Oct 13 23:01:13 2026 GMT
Not After : Oct 14 23:01:13 2026 GMT
Subject: CN=0b2a2fee8cc458a2f269ec657dace0b53ff34772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:03:e7:31:88:9e:c7:f2:26:ca:5c:97:c6:
a1:48:ad:de:ad:3e:d4:38:68:9f:76:a4:6f:d5:ac:
8e:10:22:57:1c:02:48:d3:57:2b:65:63:f8:17:bd:
19:a9:72:65:ee:48:88:88:7e:57:13:9f:23:1d:90:
bf:71:65:44:81:ca:76:4f:b9:8b:ed:82:8e:25:ac:
38:7e:b3:1b:f9:d5:79:1f:ae:28:87:2d:28:53:ad:
91:35:b7:64:52:20:fa:62:a8:0f:4b:e4:ae:e0:e5:
86:b1:65:63:3a:95:aa:9e:18:67:60:77:f5:42:e2:
f6:8f:05:b2:2f:aa:4a:3b:3b:96:64:4b:a9:26:45:
2a:1b:33:9b:9e:a2:b6:ae:14:16:1b:69:8f:a0:41:
73:bb:38:22:cb:28:36:67:9d:bf:52:5f:97:6c:a3:
9a:aa:58:f1:69:db:79:32:17:3c:1c:df:02:a3:eb:
0b:73:27:74:16:c0:c2:0d:94:ed:e6:53:59:f8:3f:
94:53:6e:d5:19:60:b5:32:d9:1e:16:a4:ed:06:a6:
5d:bb:3f:c7:6d:f9:99:28:99:58:76:f4:28:17:12:
2f:26:e0:82:a2:db:51:06:4b:da:56:f2:c8:de:2e:
a3:eb:e3:c0:04:42:87:28:58:31:21:cf:15:d7:d6:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:2F:EE:8C:C4:58:A2:F2:69:EC:65:7D:AC:E0:B5:3F:F3:47:72
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2c:f4:7c:f6:c7:d1:6f:21:d4:60:e4:56:ac:a5:d6:a7:00:
2e:fa:58:2e:b3:2d:d7:8b:84:9c:9d:72:bf:61:e9:af:e9:f7:
ff:ea:8b:8d:2c:4d:61:01:b1:59:33:18:3e:56:bb:51:ac:d0:
c9:ef:ed:ad:bd:1f:f8:2f:85:d6:96:28:84:4e:96:02:7e:e2:
14:7a:e6:74:c9:0e:d9:6e:52:cc:a9:be:77:bf:f1:95:cb:50:
3c:b8:87:2e:c8:a5:73:5f:9a:1d:5f:41:a6:2b:97:be:f0:f9:
d0:09:30:75:25:75:0e:94:e7:17:da:3b:f7:d7:66:7e:10:6d:
91:02:d2:81:b0:cb:ea:03:0d:c9:e2:86:d7:11:30:bb:f0:37:
ce:22:4d:fd:71:bc:2d:ef:6d:ea:bd:4a:9c:d8:e3:9f:aa:e3:
a1:25:41:34:27:49:1b:57:9e:2e:c7:5f:91:1e:79:08:d7:9b:
26:2a:b9:8b:31:05:e6:b3:1d:fc:c7:f0:27:1d:ca:c9:1f:cb:
74:cc:68:f8:d0:d1:19:6d:0a:40:24:7d:24:c7:77:35:60:0a:
7d:69:e2:24:88:44:a7:6c:59:19:8b:96:8e:11:83:13:0d:f9:
e2:1e:85:0e:e7:67:7c:1c:83:29:44:4a:0a:5f:a9:91:c3:ce:
a3:f2:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:59:57 2026 by rpki-client