
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: 1fT2mEA6p6MQkRumSNbhL9LpzYjmqdzpzQ+Bs7lTxJY=
Subject key identifier: 27:43:C7:8F:8D:DE:D7:FD:18:B0:DA:A8:F0:F6:E9:BD:07:EB:25:03
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019D9B875B723714B92EA38D56680DD4BB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 0929
Signing time: Fri 17 Apr 2026 13:00:31 +0000
Manifest this update: Fri 17 Apr 2026 13:00:31 +0000
Manifest next update: Sat 18 Apr 2026 13:00:31 +0000
Files and hashes: 1: LwoLT1S5IZ3GJENrbIOLiJKkrxM.roa (hash: ANC1phdFKuJYTnQOKa5Ojw1nbMCT2ZAJrnTkKz9AGrk=)
2: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: 8wFZIDaaQq/davzI8Nzo2vnrQGY1KP07jlQv+whsGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:5b:72:37:14:b9:2e:a3:8d:56:68:0d:d4:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Apr 17 13:00:31 2026 GMT
Not After : Apr 18 13:00:31 2026 GMT
Subject: CN=2743c78f8dded7fd18b0daa8f0f6e9bd07eb2503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:93:b3:5e:df:74:78:f6:af:82:37:1b:f3:
41:a7:ab:6e:06:43:6c:a9:89:2f:08:a5:a3:e4:fa:
49:87:25:77:e9:8d:cb:06:c9:61:ba:41:f3:0c:ce:
d6:ca:e2:aa:81:cd:9b:54:28:9a:c3:ae:3f:0c:2b:
c3:c6:3b:f4:18:d2:91:1b:c2:ff:0d:ab:a5:ba:71:
4f:f1:8a:40:4a:9f:b5:d7:19:7a:00:e8:92:cd:c6:
ff:4a:94:e0:b6:6b:f6:71:d6:a5:61:08:35:92:17:
12:10:38:c7:eb:38:f5:be:20:64:a7:5a:88:e2:e7:
9a:a9:c3:f2:01:15:3b:2d:19:f1:05:e5:43:5b:78:
58:96:6a:ad:cd:80:98:9e:f5:3d:22:a3:23:3d:35:
4e:71:8e:e8:72:a2:d6:83:73:43:e1:0c:2d:60:de:
01:37:c9:af:6c:b4:ef:c3:58:2a:2f:e3:73:62:00:
c3:f8:3b:67:52:50:b9:92:5f:fe:4d:ff:8e:54:08:
0d:bc:6a:c6:08:34:e4:97:7f:61:5d:ef:08:30:3f:
9a:19:c2:82:fa:be:17:62:5d:18:57:44:40:79:fb:
69:7b:33:15:4c:66:76:b1:be:4a:3f:23:da:5c:27:
0b:7c:3a:e7:f7:16:9b:cb:be:46:74:45:6a:c0:e1:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:C7:8F:8D:DE:D7:FD:18:B0:DA:A8:F0:F6:E9:BD:07:EB:25:03
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:0f:9a:f3:6e:21:1c:e3:3e:e5:31:e8:f4:8e:50:6b:af:
d2:cd:19:29:b1:5b:3a:11:a2:88:f0:66:3d:f7:a7:9e:94:e3:
d7:42:94:55:3f:93:4f:68:29:7a:86:3e:e7:70:6e:e2:2e:89:
16:4d:8b:e2:a3:e0:e6:c0:5d:34:71:57:f9:67:28:cd:18:73:
83:6b:70:cf:5d:15:33:da:62:a0:3d:79:21:91:a2:15:09:69:
6d:a8:62:f1:b1:c9:e4:3e:9b:2e:a3:fa:9a:53:fa:c3:c3:73:
df:57:7c:85:74:c4:35:08:03:bd:f8:c4:1f:86:27:12:0d:c0:
d2:39:ba:5f:bd:81:7f:e2:11:d4:66:6a:a8:38:02:c7:89:cf:
49:88:ce:0e:96:22:55:bb:67:47:82:f8:11:3b:a1:ef:12:d4:
3d:c8:c2:11:a2:2a:47:a3:8d:fe:ee:c0:44:6a:4b:95:c7:03:
bb:80:c1:c1:59:89:7b:06:a4:a7:f8:25:fd:8e:32:28:e7:18:
ea:42:83:ea:f2:cf:60:2a:b9:06:69:da:3f:bb:09:29:f5:7c:
0f:c4:39:ca:fd:f6:df:df:bc:1b:1a:f5:50:49:31:62:22:49:
c9:43:a8:fd:3a:51:ff:9d:39:b2:7f:a4:98:10:f2:df:47:66:
11:55:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:10 2026 by rpki-client