Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: IrGquzEIr6lYiG2TDsKKuiQA0hn1z4BQ2aTsiIyakwI=
Subject key identifier: 36:F3:8C:3A:DA:03:21:C9:F3:B0:82:C8:B8:F2:59:D2:9F:64:A0:4A
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 01A0BD66FF9EF50BC85D26A09E2473F14ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 13C7
Signing time: Sun 20 Sep 2026 06:00:38 +0000
Manifest this update: Sun 20 Sep 2026 06:00:38 +0000
Manifest next update: Mon 21 Sep 2026 06:00:38 +0000
Files and hashes: 1: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (hash: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8=)
2: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: 6KTMXTsCqVYqp4dg2pPnuY88B+4XgAF4fhp+669GSQQ=)
3: r4Hrg0bEs6gpKFTSd59isgxSeSk.roa (hash: /DPtXcMqR60C1x1kBS5/vOOh84pABE6/ZVLVmshPVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:66:ff:9e:f5:0b:c8:5d:26:a0:9e:24:73:f1:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Sep 20 06:00:38 2026 GMT
Not After : Sep 21 06:00:38 2026 GMT
Subject: CN=36f38c3ada0321c9f3b082c8b8f259d29f64a04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:74:66:bd:dd:ed:71:53:82:4c:64:61:cd:
7d:7b:f9:80:46:86:a1:ce:96:97:32:87:89:e2:c5:
6c:41:d4:16:03:29:74:a4:c5:4d:39:b0:38:48:18:
be:2b:e2:22:73:5b:f4:29:0b:62:26:35:12:23:b2:
65:39:e0:ac:79:94:80:64:8b:8f:ba:28:e6:10:fc:
4b:d0:2a:49:49:6a:76:44:99:73:2b:93:e1:94:f0:
5c:b1:70:1c:77:e0:91:76:c0:25:68:65:c8:34:53:
eb:56:fd:a9:b2:da:26:e7:74:cb:6c:26:71:df:ed:
0a:45:3f:17:53:ec:c6:59:35:a4:51:c6:7e:62:ad:
08:26:00:04:41:90:46:ec:2b:48:26:3e:a1:37:61:
6a:b6:8d:e3:a0:21:6f:b7:5d:16:55:be:53:24:de:
df:94:85:99:cd:a9:92:5c:ac:c7:58:32:e5:14:6a:
13:3f:5d:cf:f6:13:9d:32:23:75:0d:38:b6:5d:82:
ad:00:30:52:ac:fd:09:b7:bf:c8:75:52:4a:72:38:
cc:bc:84:ce:bd:fb:98:7f:bd:94:7a:f9:f2:62:d2:
2a:80:18:30:1f:1a:38:36:93:5f:7e:72:c5:f6:db:
d7:99:ba:0c:b1:7a:99:cb:6d:8a:81:04:67:bf:3b:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:8C:3A:DA:03:21:C9:F3:B0:82:C8:B8:F2:59:D2:9F:64:A0:4A
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:05:ba:ce:f6:91:c6:cd:75:80:01:ea:8f:e3:18:4d:5e:b3:
d8:0f:56:c2:94:5c:f3:1e:f7:0d:5f:a3:61:70:d6:ef:b7:df:
53:c1:d5:cc:b8:6b:67:5f:cc:ba:54:91:20:6e:99:12:d2:ec:
7e:b8:d0:07:98:ae:e6:cd:c3:9b:3a:9f:9f:e3:f8:d4:22:45:
09:20:95:ed:19:f9:91:36:f8:55:34:49:10:a8:db:d7:3c:90:
d2:99:47:3b:9e:ce:2d:2a:b6:72:dd:43:1a:09:5a:87:3d:e8:
1d:fe:5b:34:af:a4:e7:8b:65:8c:c9:db:79:8f:c8:44:00:c5:
29:44:c6:1e:d9:27:33:56:f3:91:7f:7d:df:a9:bc:52:a8:1b:
85:28:d8:5a:84:85:12:31:83:3a:3e:17:62:95:41:24:ee:08:
33:49:67:35:1a:1c:85:13:65:6f:97:4a:27:83:e3:00:bd:fd:
a0:94:59:41:2a:33:5e:20:40:d5:93:e7:44:1c:d7:07:ee:0f:
90:f3:1c:8c:83:54:e4:6e:50:ef:a5:ca:8d:21:49:03:53:4b:
be:04:83:73:29:4c:13:7b:c0:65:54:cd:72:66:00:ee:57:c1:
64:ff:58:50:22:ff:4e:39:f6:2d:fb:fa:a2:42:d1:ab:27:5b:
df:e2:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:30:34 2026 by rpki-client