Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: L6refUuViqdk72r/y/LY+9cUAd+waYeCHkLSBFQsOiY=
Subject key identifier: 9F:5F:2A:41:64:9C:9F:94:A7:BC:B2:FF:77:90:94:69:D5:E9:53:42
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019CAD5957286ECDC858B631780BC8AD8E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:00:39 +0000
Manifest this update: Mon 02 Mar 2026 07:00:39 +0000
Manifest next update: Tue 03 Mar 2026 07:00:39 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: NkJ9iYNq0hNCQud5fCPkIvYTCsXmEoEPnS7DHmk0Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:57:28:6e:cd:c8:58:b6:31:78:0b:c8:ad:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Mar 2 07:00:39 2026 GMT
Not After : Mar 3 07:00:39 2026 GMT
Subject: CN=9f5f2a41649c9f94a7bcb2ff77909469d5e95342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:77:b3:fa:d2:4f:43:4d:28:99:72:c6:82:
ea:bb:65:8b:a0:a1:44:2c:9e:ac:ae:61:03:e0:6a:
e6:67:eb:7e:ee:01:89:0c:cd:72:54:a4:2a:c7:31:
a8:70:0a:57:80:8a:84:bc:a8:a2:37:20:49:d2:d0:
c1:48:1c:bb:ba:30:db:5e:33:7b:8c:aa:1d:54:16:
87:cc:a0:6f:25:c2:fa:04:a7:0a:72:df:33:36:e4:
ac:dd:ec:9a:7f:00:03:98:91:4d:c3:f7:1d:8d:a8:
ee:f8:91:f3:d3:24:d3:d5:6d:5f:58:e9:68:59:c6:
9a:da:e6:c3:78:02:fe:f4:a6:be:94:be:77:25:81:
5c:18:7a:d9:12:6c:e9:34:5a:a6:7d:f3:c8:60:b5:
d4:45:c8:d6:0c:44:e4:48:cb:14:90:37:1a:fc:83:
7e:49:13:b3:76:15:39:08:fa:13:bd:7e:af:c6:76:
f0:0b:0e:8c:b6:cd:70:53:d9:d7:65:4d:fc:c6:97:
c5:1b:c4:ec:52:fb:33:b6:55:95:82:91:90:90:a6:
39:b5:24:51:2d:6c:45:26:ca:c3:6a:24:94:3a:ed:
cd:5b:a7:bf:31:71:aa:5d:42:ac:95:55:36:9e:e5:
a7:39:df:70:09:41:d0:a0:d7:89:12:48:f7:8a:4e:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:2A:41:64:9C:9F:94:A7:BC:B2:FF:77:90:94:69:D5:E9:53:42
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:55:2c:25:f4:0a:32:2a:c1:f0:47:3b:9c:b9:96:13:06:da:
3b:e5:8a:39:46:f5:2f:59:f8:1a:e3:bb:b7:9f:cc:bc:4c:34:
c6:24:26:bb:dc:b8:4f:06:2c:72:43:bd:60:ad:01:81:00:8b:
9e:e4:a3:8b:84:77:62:f2:dd:02:76:2c:68:76:73:6b:19:cb:
18:bc:9f:49:59:dd:20:4b:0b:ed:4b:1e:0b:bd:53:1e:1e:69:
38:20:87:db:9d:fc:31:06:ae:a3:20:7a:40:3d:22:ca:78:36:
b0:dc:0d:3c:15:de:3b:1e:05:17:08:c4:e8:ae:41:fa:7c:7d:
60:f6:3f:c1:97:5e:b8:59:69:93:bb:65:66:3d:fe:c4:a9:d1:
a5:a6:42:43:13:ce:d4:6b:71:2d:e3:bd:fb:3d:5e:58:e2:d7:
8f:73:92:25:49:60:53:f7:d4:cf:5e:a8:5d:b1:6c:7e:55:68:
2f:60:2b:01:73:a3:6a:ea:6b:a3:b7:18:43:1e:66:2f:9b:01:
f5:8a:f0:c9:4b:63:e7:1a:68:0c:4d:3e:5d:77:16:5d:5d:b3:
c8:34:16:2c:53:f6:5d:29:ee:ba:b6:cd:29:a1:8e:25:65:04:
df:1a:fc:2c:8e:9c:ba:07:ab:98:9e:f6:31:02:a7:d3:c1:35:
38:ed:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:26 2026 by rpki-client