Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File: EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier: okSZrzZYUxUbIQNGPR6KWVmYAUEnbJfHa6FJInN5Vzc=
Subject key identifier: D9:B4:CA:20:D1:14:8A:0F:9A:72:C4:A0:52:67:31:97:A0:F1:1F:23
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 019CAB3484CE4FFCD2C9115C3DCA611E1C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number: 1590
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: WEih9sLucuNeQdeKACM7VTTg2wP9ukTLW4Y16Y+ZfC8=)
2: Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa (hash: A9JkF2YIBDsb9U5w0rInQubmdVk1rDCgtqhI9Yk4Xps=)
3: XT9M4nz7U78zyaKpNd8OOHO8Qog.roa (hash: SiIj+CtkRszsmzTVR/Ptsuqx6GVfhtUG2CmisEl+iio=)
4: eh4veodx92qLlbRds_FdhFYGXUY.roa (hash: Lu4cjet76Xm54FMH5x8nZEK5D9qX3aYtuOYuw1rQxqE=)
5: qloA7aGwDDMf0Ro9CGFQNJI5uVs.roa (hash: GNTNvRk+NISvdL5uVY3h8ds7WhRg+ACYEl8vBkQaLDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:84:ce:4f:fc:d2:c9:11:5c:3d:ca:61:1e:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=d9b4ca20d1148a0f9a72c4a052673197a0f11f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:2d:76:17:46:c9:b9:34:ee:a6:00:86:f6:
d7:5e:75:eb:4e:71:16:43:db:44:5f:37:92:a4:b8:
9b:62:e6:3e:02:ad:ef:25:f2:26:8c:cb:f0:e3:6b:
59:26:7a:7c:b2:40:69:da:8d:f9:92:12:d7:c0:8d:
75:d7:12:85:fd:04:11:87:8f:9c:02:c7:5e:39:8c:
0b:79:1b:98:76:c0:b0:f1:2c:84:41:3d:6f:2a:ee:
92:c1:5b:5e:29:d9:e8:9a:9e:8d:69:d6:15:ab:e5:
c6:fe:fe:98:ac:55:04:7b:a2:df:e0:38:17:a0:d5:
60:d0:2d:9d:e5:05:63:ae:b4:f5:a3:ad:83:bc:b2:
1c:d9:4b:41:a7:b5:eb:8d:ba:a3:77:45:2d:fb:6a:
55:60:f2:fd:69:c2:49:07:37:5f:8e:3d:00:02:44:
2e:6f:61:35:a9:cf:c7:89:5b:5a:e3:1f:ba:58:6e:
e4:0a:38:dc:7d:10:0d:45:f1:58:a6:c4:8e:a4:bf:
e0:18:b9:f5:96:d2:ae:8e:ce:50:26:a8:0f:b9:1d:
3f:0d:15:26:eb:73:76:53:4d:4c:e1:7a:de:b5:58:
35:bc:12:1c:25:e6:b2:1b:16:60:14:47:7e:d4:7d:
a6:27:24:5a:04:97:8d:ba:77:75:03:7d:f2:2f:de:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:CA:20:D1:14:8A:0F:9A:72:C4:A0:52:67:31:97:A0:F1:1F:23
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:a2:7d:97:6b:93:36:71:fc:ac:33:57:f8:d3:24:78:b7:
a6:42:40:b8:3f:60:53:a8:86:fa:05:74:a6:51:2f:4d:db:8b:
4c:3c:9a:2a:7c:c6:7f:5a:43:1d:b7:df:7c:7d:3c:d8:cb:bf:
36:be:47:8b:66:51:e0:d5:b7:5a:24:fb:7c:94:d2:53:25:3e:
7d:f0:50:08:9f:00:bf:b9:ea:4e:26:ad:13:32:89:e0:ec:92:
39:e1:68:db:6c:44:ed:ad:21:1f:71:37:37:cb:6a:f0:ed:ad:
09:e6:97:da:65:87:eb:dc:bd:a0:6f:46:2b:50:e9:2e:60:90:
4b:91:f5:a9:29:74:9d:28:23:82:8a:93:40:68:65:fc:a6:f9:
56:71:b9:f4:40:01:5e:0d:47:83:43:3a:27:93:a2:33:34:15:
91:7c:49:62:a9:54:7a:c8:89:ae:55:86:fe:e3:8f:65:40:c0:
fb:5d:c7:a1:70:65:fb:40:f0:23:dc:06:95:b5:74:86:1e:2e:
ef:81:ad:7b:14:53:a1:6a:6f:b0:a5:1c:2a:16:9b:b1:f2:77:
b4:db:e1:43:62:8a:3e:28:43:7d:dd:29:e3:4c:78:45:2b:6c:
18:57:70:96:85:f8:24:5a:58:06:34:53:37:9f:5c:20:58:78:
c2:c4:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:32 2026 by rpki-client