Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File: ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier: Yi1+AY8eUjwpT/lRiQmIPPMXvlJuzL9DtSIqqVIsk8A=
Subject key identifier: A8:9A:4E:6C:B9:44:19:30:37:FE:88:2E:09:97:90:74:CC:AF:F1:FD
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer: /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial: 019CAA58FE551DCA78C69F9F7E80E91963BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number: 0A5D
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 5uyvZB91zhJOMBC5875SJA_KD2A.roa (hash: QG9dXb6mMEcHNSfXXxHtSMsMhufNAZUod41sUexDDqE=)
2: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: Y+dyB5Ksr+DDXHS9jiT1Zp0ZK3qI69pv7/Qmzy1QqX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fe:55:1d:ca:78:c6:9f:9f:7e:80:e9:19:63:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=a89a4e6cb944193037fe882e09979074ccaff1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:eb:63:2d:ff:7c:76:55:6e:03:55:6f:aa:
7c:f8:7d:c2:a0:c7:f1:66:96:af:31:b5:2b:73:0d:
78:13:0d:b6:47:61:b1:df:0b:b9:c3:eb:87:0e:84:
4d:6c:ad:31:d9:f2:28:04:67:0c:90:d0:06:9a:a2:
dd:d1:2a:e1:86:64:18:25:a3:eb:b2:d0:b8:82:59:
7e:f8:2e:70:c3:12:7d:fe:3b:b1:06:28:b3:c7:9d:
75:ca:7b:56:e2:a7:91:30:ef:51:41:e0:a7:5f:f7:
3d:04:ac:7d:3e:93:af:82:0b:d1:12:bf:85:64:5e:
8f:30:b4:0d:b5:0d:1c:8a:54:31:59:63:9e:c3:0f:
7e:72:0e:39:4a:75:34:c0:9b:1a:fc:98:df:d0:48:
df:01:42:a1:62:66:28:84:6d:ed:60:b4:fb:dd:bb:
10:7d:f2:78:4c:d0:63:ff:2c:56:0b:da:dc:7d:73:
04:d2:e1:ee:2b:b4:78:a0:e4:f3:d7:36:0a:c5:84:
11:28:11:4b:6b:c5:a4:b4:bd:0c:0e:02:ce:7c:c2:
cd:07:94:ae:48:c0:27:d9:d2:ec:b1:d3:b1:aa:12:
fd:1f:1d:5f:77:4a:f4:2d:c5:15:e3:47:30:a2:85:
bb:94:29:12:35:fb:76:b2:7f:e0:a9:89:da:e7:f4:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:4E:6C:B9:44:19:30:37:FE:88:2E:09:97:90:74:CC:AF:F1:FD
X509v3 Authority Key Identifier:
keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:6d:f2:3a:92:23:45:ca:c3:85:2a:94:c1:9e:bf:c2:16:
53:69:af:fc:2c:87:ea:4d:61:08:f5:f9:75:27:e8:42:7f:39:
55:ac:71:b0:82:61:da:a2:03:43:81:e7:c8:e9:40:9f:29:4d:
3d:78:1e:26:32:61:6d:3d:dd:bf:82:d9:c8:c3:3b:77:6b:d5:
e7:6b:88:c4:d2:25:c2:e4:21:9f:7a:b1:52:9a:e1:27:74:36:
02:56:f2:c6:aa:32:2f:d1:e6:38:12:78:82:a2:75:cb:d1:e9:
6f:4f:89:0b:f1:ce:1a:da:8a:83:0b:c8:8a:61:a3:ff:40:68:
5d:87:cd:82:66:e4:cb:ff:9f:cd:81:cc:3c:81:8f:ec:5e:8f:
2d:d7:09:3c:d2:2c:53:f0:99:b1:e0:72:5c:31:ae:1e:d5:37:
9b:4f:b6:9e:e1:7a:8f:dc:2f:d8:c8:61:4e:f1:91:51:c4:15:
98:68:cf:2d:b2:22:c3:af:d1:9e:65:bc:8d:1f:be:4b:dc:f7:
80:61:54:d0:1c:3f:de:49:58:dc:d9:d7:bb:8e:24:f1:8a:63:
83:de:4c:4e:58:34:bd:57:de:b7:6c:1b:ec:11:2d:3b:cb:bd:
b5:8f:16:f4:d6:d2:f9:95:e8:e1:33:0f:e7:3c:d3:21:54:be:
74:ef:1c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWP5VHcp4xp+ffoDpGWO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2JjYjQwYTFjOGM4ZjlmNzU4ZGNkZTFjMjkwNzkzOGQ4
Njg1MmYwHhcNMjYwMzAxMTcwMTI0WhcNMjYwMzAyMTcwMTI0WjAzMTEwLwYDVQQD
EyhhODlhNGU2Y2I5NDQxOTMwMzdmZTg4MmUwOTk3OTA3NGNjYWZmMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ULrYy3/fHZVbgNVb6p8+H3CoMfx
ZpavMbUrcw14Ew22R2Gx3wu5w+uHDoRNbK0x2fIoBGcMkNAGmqLd0SrhhmQYJaPr
stC4gll++C5wwxJ9/juxBiizx511yntW4qeRMO9RQeCnX/c9BKx9PpOvggvREr+F
ZF6PMLQNtQ0cilQxWWOeww9+cg45SnU0wJsa/Jjf0EjfAUKhYmYohG3tYLT73bsQ
ffJ4TNBj/yxWC9rcfXME0uHuK7R4oOTz1zYKxYQRKBFLa8WktL0MDgLOfMLNB5Su
SMAn2dLssdOxqhL9Hx1fd0r0LcUV40cwooW7lCkSNft2sn/gqYna5/TZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiaTmy5RBkwN/6ILgmXkHTMr/H9MB8GA1UdIwQY
MBaAFHo7y0ChyMj591jc3hwpB5ONhoUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgt
MDE2NTI1NzZmNWEyLzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgtMDE2NTI1NzZmNWEy
LzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3Rt8jqS
I0XKw4UqlMGev8IWU2mv/CyH6k1hCPX5dSfoQn85VaxxsIJh2qIDQ4HnyOlAnylN
PXgeJjJhbT3dv4LZyMM7d2vV52uIxNIlwuQhn3qxUprhJ3Q2AlbyxqoyL9HmOBJ4
gqJ1y9Hpb0+JC/HOGtqKgwvIimGj/0BoXYfNgmbky/+fzYHMPIGP7F6PLdcJPNIs
U/CZseByXDGuHtU3m0+2nuF6j9wv2MhhTvGRUcQVmGjPLbIiw6/RnmW8jR++S9z3
gGFU0Bw/3klY3NnXu44k8Ypjg95MTlg0vVfet2wb7BEtO8u9tY8W9NbS+ZXo4TMP
5zzTIVS+dO8cQA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:36 2026 by rpki-client