Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: e8NFLCxfhvCmF1zrwopIkp1LEafa/g0HaOiqHtfRG0o=
Subject key identifier: 18:D8:A6:F1:83:50:3B:EE:13:24:8D:E5:13:B8:EE:D0:2D:30:0C:FE
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019CADFE4FEA72414AE65384B5D3F06B2F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 08AE
Signing time: Mon 02 Mar 2026 10:00:50 +0000
Manifest this update: Mon 02 Mar 2026 10:00:50 +0000
Manifest next update: Tue 03 Mar 2026 10:00:50 +0000
Files and hashes: 1: LwoLT1S5IZ3GJENrbIOLiJKkrxM.roa (hash: ANC1phdFKuJYTnQOKa5Ojw1nbMCT2ZAJrnTkKz9AGrk=)
2: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: g99MMek3YVGxcOrS9uRUUDnFJSdIa/Nvhamq/T0n/7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4f:ea:72:41:4a:e6:53:84:b5:d3:f0:6b:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Mar 2 10:00:50 2026 GMT
Not After : Mar 3 10:00:50 2026 GMT
Subject: CN=18d8a6f183503bee13248de513b8eed02d300cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:54:cb:7f:da:e9:0a:1f:e0:06:16:7c:48:6b:
e7:70:96:f7:69:17:35:69:0c:3f:85:91:1b:c8:b7:
29:ef:e6:c5:27:cf:f3:e0:49:f9:e7:6f:a6:c8:cb:
3b:a8:72:b3:13:1f:91:68:64:6e:2e:00:bb:ab:87:
ac:29:45:37:88:46:f1:23:a5:9a:e3:b0:7b:fb:8e:
8f:90:31:92:d9:bb:5b:d1:bc:2c:ec:60:60:de:68:
18:32:76:c6:03:17:eb:42:37:15:26:eb:3e:7c:7f:
75:e3:09:e3:92:d3:71:de:57:e2:2f:3d:ad:90:e4:
8a:0a:78:12:e2:88:ab:48:c9:b1:3a:56:4d:7a:32:
86:2b:2c:bb:06:bc:3f:51:14:26:56:ff:d2:25:5d:
ab:4a:f1:c3:c5:9d:cb:64:00:29:0f:cf:20:2e:eb:
c0:8d:89:42:25:b5:82:57:cd:51:d8:86:32:5c:ac:
0b:62:09:7d:8a:e0:45:c1:80:2b:ae:97:8c:98:45:
61:ca:35:48:2f:06:ee:6e:fd:4a:0b:fa:bf:9c:55:
4a:79:d0:96:44:a8:63:f8:75:ed:b0:4c:d6:76:3c:
5c:1c:3f:2a:a0:94:cc:15:50:24:69:b7:84:40:5f:
b0:0d:23:40:34:b8:c3:c3:43:ed:8f:04:ee:15:b1:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:A6:F1:83:50:3B:EE:13:24:8D:E5:13:B8:EE:D0:2D:30:0C:FE
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6b:f8:b8:0a:8a:b3:b4:76:8c:74:46:6b:f0:b5:51:3e:4e:
90:be:21:b0:f2:89:83:fa:21:49:ca:27:0d:a2:8d:0b:0c:ce:
b9:e9:8e:ad:6c:ee:a5:4d:98:dd:18:38:74:a4:27:bf:16:8f:
dc:5f:37:9b:80:bb:76:fd:76:62:31:8b:9b:df:06:94:f3:9e:
bf:86:36:bc:e1:56:c7:20:37:9d:f4:ea:b9:94:4e:72:36:c4:
6a:f8:10:79:83:e7:41:4c:29:ea:ed:51:98:a6:ef:9e:81:d0:
ea:79:8f:66:a0:06:b5:75:c3:48:52:b1:f9:10:dc:12:f7:ef:
a4:e7:9e:20:05:2f:68:96:85:a8:f9:ca:35:fe:02:aa:d1:d2:
b7:8f:a0:b8:f9:08:42:8d:d2:5a:2d:6d:09:3c:62:29:a5:43:
0f:c5:d4:12:37:89:ea:b0:2f:fc:bc:04:61:ae:99:e4:c1:85:
be:f3:af:3b:b8:9e:c2:01:f5:86:ea:eb:2f:62:75:6c:99:d5:
80:42:45:87:78:a3:b0:de:d2:84:c4:43:97:a3:d2:7c:79:c6:
51:2f:31:70:d9:15:a8:7f:fb:08:43:f4:1a:b1:a6:74:f2:95:
b5:0c:b3:08:07:18:83:c8:c7:e4:b8:7b:76:40:6e:4e:57:de:
fb:31:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:06 2026 by rpki-client