Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: Jtp65Vwnc3j4B27xBpRL5Z+yOrULb4REZOShbrw1Jck=
Subject key identifier: 40:D8:FD:6E:31:66:4F:8F:AF:3D:71:92:10:69:8F:FB:B4:25:8A:1D
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019D9A06EA98B0669FF1AC4FEA39CF12FAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 1227
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (hash: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8=)
2: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: qgU9O87fsai8Nf13pCEOlV7Zal4u1FRNd9CJMyS7Fuw=)
3: r4Hrg0bEs6gpKFTSd59isgxSeSk.roa (hash: /DPtXcMqR60C1x1kBS5/vOOh84pABE6/ZVLVmshPVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ea:98:b0:66:9f:f1:ac:4f:ea:39:cf:12:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=40d8fd6e31664f8faf3d719210698ffbb4258a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:81:82:50:9e:72:45:84:c3:9d:70:f0:43:
b2:aa:78:9f:ea:e7:45:17:df:b6:1e:26:69:e1:d9:
66:02:55:09:00:2e:12:91:76:b4:6a:74:eb:4a:4f:
5e:ad:d7:da:1e:36:1b:f6:77:4b:9f:a5:9c:bd:e8:
16:cc:6d:26:82:61:25:07:41:18:6a:fb:a4:d7:5d:
6e:bc:89:a5:2a:55:7e:ed:21:bc:97:bb:72:fc:5e:
ed:a3:1d:46:53:c9:9b:f2:68:73:2f:47:0e:f8:dc:
cb:ac:14:c7:ff:2b:59:3e:2d:0c:77:04:0e:52:67:
e0:b1:8a:72:c3:af:59:e8:d2:c7:78:24:39:1a:88:
b6:c1:dc:b8:ca:69:b9:35:1f:6b:31:ee:43:e3:b5:
c3:a3:37:c7:05:f6:62:60:cc:cb:f4:a8:2f:6d:2b:
f6:2f:5c:22:c3:06:3c:56:9b:33:67:de:c5:53:7f:
c4:4f:e9:e0:f0:99:a4:e1:40:49:ca:32:80:9f:83:
a0:24:bb:3c:90:25:bf:d4:93:e4:61:92:26:27:7b:
45:5b:22:81:bb:0a:c6:30:fb:57:85:53:ff:b1:d4:
f3:bc:ec:22:d7:c3:6b:5d:83:d5:08:af:fe:59:d2:
61:55:ef:e6:8c:5c:d2:24:3e:08:56:d4:ce:cf:5d:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:FD:6E:31:66:4F:8F:AF:3D:71:92:10:69:8F:FB:B4:25:8A:1D
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:09:c1:4f:59:12:fb:43:98:8d:f0:55:ac:9d:12:dd:a4:
db:27:d5:9a:91:a2:f4:63:d5:b8:00:08:ac:b1:60:54:d2:ca:
bd:87:dd:17:4d:14:d6:81:74:4b:c3:ea:f0:41:e5:cb:4b:3e:
97:21:08:e4:db:17:e5:b7:65:4b:cf:06:b1:b8:ab:ad:d8:e6:
75:e6:ca:a5:a2:0c:2f:64:a6:bd:be:55:e3:99:67:7d:6a:7d:
da:ed:23:99:98:93:49:9d:31:21:86:eb:8e:ed:60:d9:f7:49:
2a:c7:ed:38:31:84:9e:c7:09:69:23:1d:44:3b:42:b5:83:64:
ac:94:04:31:75:0e:38:d7:95:9a:c8:70:d5:a1:62:ec:e8:4b:
5c:69:69:e8:37:9d:e2:65:01:cf:37:cc:0d:ff:84:c5:9e:07:
c4:4a:85:85:a2:eb:4a:ce:1e:4c:d5:bc:42:83:d1:de:2c:1f:
26:cc:f6:51:fc:91:c0:a9:69:20:0e:62:1c:c7:40:fe:e5:0d:
29:31:79:c3:da:5c:7a:42:56:a9:90:f3:de:c4:95:e0:fe:08:
05:3d:8c:98:c3:45:c5:93:de:0b:c4:3a:cb:10:8d:2c:eb:aa:
9f:43:79:4d:0e:26:55:3e:94:04:4e:18:d2:f4:6d:63:e1:83:
f8:cb:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:02 2026 by rpki-client