Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
File: EjBb1f3nCLx3of0Ber46iDSOeAk.mft (raw, json)
Hash identifier: I5A0PHXMkQ5/WaNkFXzsNDCLRGM19wTc5AR2/HQrdes=
Subject key identifier: 04:B9:6D:97:21:3B:DD:3A:2C:09:D6:EB:86:96:D3:74:D2:CD:04:3E
Authority key identifier: 12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
Certificate issuer: /CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Certificate serial: 01A0E8F6851183F9E9D1F3BAF490BC91DF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
Manifest number: 33
Signing time: Mon 28 Sep 2026 17:01:05 +0000
Manifest this update: Mon 28 Sep 2026 17:01:05 +0000
Manifest next update: Tue 29 Sep 2026 17:01:05 +0000
Files and hashes: 1: EjBb1f3nCLx3of0Ber46iDSOeAk.crl (hash: fn+TAsPZUcxS6rtFp8sipl8J7czANJ5qqGnM/1WrM3k=)
2: wOllorR3IEPsKMbcbB7blz6CaGs.roa (hash: 98dgbOx+V8DXxNAjtoueFdBj41vqBbkPousD5UNldes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:85:11:83:f9:e9:d1:f3:ba:f4:90:bc:91:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Validity
Not Before: Sep 28 17:01:05 2026 GMT
Not After : Sep 29 17:01:05 2026 GMT
Subject: CN=04b96d97213bdd3a2c09d6eb8696d374d2cd043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:1e:5b:38:c0:60:87:31:91:54:aa:27:c6:
20:d7:76:eb:79:60:23:30:b6:98:f0:4c:97:4b:a4:
48:b7:69:60:8d:e6:0e:bf:45:59:cb:8c:f2:2a:bc:
1d:3b:00:ae:ba:f4:13:f4:f4:c5:96:3c:59:2a:66:
68:8e:8a:3a:83:55:7e:da:d6:26:6c:cc:14:11:29:
50:89:dd:42:50:56:62:de:08:f0:ff:3e:06:9b:13:
0c:d8:11:5d:f1:d2:ba:76:c6:06:90:4d:42:7e:cc:
60:4b:a3:99:84:56:19:5c:7a:29:68:ce:3b:fb:1c:
63:0c:f9:3c:8b:4a:c1:0b:4e:4b:c7:5f:bd:6c:1c:
3a:b3:71:99:32:00:60:72:7d:33:41:df:eb:a5:76:
d0:ce:98:ea:cc:20:25:6c:83:af:73:27:ca:d6:cd:
a9:d8:a6:3a:06:0c:1b:12:e3:e2:b4:fc:05:a8:2d:
1d:e3:1f:ca:58:1e:e8:f7:12:eb:64:9c:a6:a4:53:
b0:cf:50:9b:66:ed:e7:1e:14:09:9e:f6:1a:d4:c4:
f9:3b:72:ac:16:e2:cd:08:87:22:fd:1f:4f:31:d6:
02:ed:5b:13:e5:ce:fd:41:89:7a:67:42:a1:ea:91:
83:01:cb:cd:cb:30:ab:ac:3a:2b:93:5a:58:07:f1:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:6D:97:21:3B:DD:3A:2C:09:D6:EB:86:96:D3:74:D2:CD:04:3E
X509v3 Authority Key Identifier:
keyid:12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:16:c1:c6:65:1e:0a:86:db:83:17:55:e0:79:cf:2a:68:58:
5c:d6:3f:93:d8:51:0c:c3:21:d6:7f:aa:3e:b7:b1:27:4f:cc:
ee:7c:4a:c7:ca:17:4c:a3:93:27:c5:a5:7a:27:8b:a6:19:d0:
18:68:cb:b4:b8:dd:0e:ad:93:bf:3c:3f:4e:37:bf:de:75:11:
ee:69:64:7e:52:bf:30:d6:3c:29:9a:f2:eb:e8:83:af:4b:61:
ac:03:aa:83:d3:3c:50:a6:5c:99:17:b2:f5:c2:01:bd:73:58:
1d:ad:15:4b:ab:fa:b9:a5:a4:80:85:7d:ba:da:a2:67:17:df:
2c:00:ab:6e:03:25:7e:26:29:19:b1:84:aa:c5:45:2a:1f:0a:
0d:6e:03:b9:c1:17:ec:00:63:fe:6f:30:ea:90:f6:35:f5:f2:
e4:ec:42:c5:64:b1:bf:1c:91:3c:13:81:37:5f:03:47:cf:69:
32:9e:0d:2d:9f:9c:eb:fa:2c:11:68:68:1f:63:16:d5:88:40:
97:52:d3:71:a8:aa:15:fe:cd:08:7f:3f:c7:1f:38:58:47:ab:
b3:ad:1d:0e:60:57:59:b7:37:19:c9:d2:f8:28:7e:19:bf:54:
0e:3e:62:37:6b:33:b3:09:0c:da:22:c1:a7:e9:dd:a8:a4:2f:
06:01:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:25:05 2026 by rpki-client