Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: 9ye5LTBl2YhlJJKBD6njKPePztT9z7DCTs5wE2oBomU=
Subject key identifier: 17:24:4C:C4:CD:01:F0:82:10:54:06:AB:C0:E1:58:CC:35:50:B0:45
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019D9CD12752927D2E8B70CC9B37493EDE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 19:00:45 +0000
Manifest this update: Fri 17 Apr 2026 19:00:45 +0000
Manifest next update: Sat 18 Apr 2026 19:00:45 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: S6eSMcumzjSBzj4hxcu49hSTx3iIT0SEiXaxFlumyv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:27:52:92:7d:2e:8b:70:cc:9b:37:49:3e:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Apr 17 19:00:45 2026 GMT
Not After : Apr 18 19:00:45 2026 GMT
Subject: CN=17244cc4cd01f082105406abc0e158cc3550b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:1a:57:ef:0e:03:6b:e7:80:d9:c1:bc:83:
29:53:69:28:cf:cf:11:27:f1:d9:60:b9:3c:e5:99:
98:e2:22:87:52:1b:90:f0:9f:79:38:b6:bd:51:40:
10:6f:81:c6:48:3f:f8:8e:2f:65:c2:b9:b3:ed:98:
ba:b3:8c:d7:52:32:25:20:a2:9a:cf:8e:00:d5:57:
a0:c9:c4:6b:eb:99:44:20:d2:60:1b:83:da:3a:35:
d8:a5:63:7f:d4:b2:88:eb:fe:40:a6:cd:53:38:c7:
59:1c:c4:0f:ec:79:1e:a7:f4:f2:7a:40:5f:96:74:
fb:82:da:cb:5d:49:9e:b3:be:d4:f0:59:d5:0f:ba:
cb:0c:55:31:8b:44:9e:aa:f4:bf:a1:46:bc:8c:ec:
f0:7c:24:3b:13:bc:69:d9:7d:2b:f6:82:d2:71:22:
34:b3:f6:b0:f0:69:25:5f:b8:ff:df:53:b1:1f:6f:
17:0a:89:d9:ac:05:d5:09:02:0c:47:9a:ad:7f:26:
19:7b:0a:3f:f0:c6:6e:16:be:89:c9:9d:c1:c0:73:
0c:42:5e:83:8e:8e:d6:64:6a:5f:29:1c:b2:73:6b:
4a:b7:ee:aa:bf:8e:ac:40:45:7c:2f:c7:64:db:5f:
aa:f8:55:80:8c:ec:49:60:b9:bf:a0:ea:a2:d8:88:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:4C:C4:CD:01:F0:82:10:54:06:AB:C0:E1:58:CC:35:50:B0:45
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:e4:55:8a:49:eb:29:6e:39:d6:4b:15:9a:74:cf:81:cd:
3c:de:7b:55:dd:be:67:fe:66:90:93:02:24:f5:9f:ef:d1:36:
e9:5c:85:2c:2e:8f:f6:3a:26:1e:bb:41:3d:6a:e5:e0:86:fa:
37:7b:09:28:e9:65:eb:85:a4:bd:6b:ce:c4:72:7b:d4:cc:af:
11:35:7a:94:e2:8b:84:35:75:11:b0:21:67:69:e2:30:ae:d2:
85:c3:fa:21:57:54:68:f3:aa:a5:96:7e:e2:3e:76:c6:85:24:
74:ef:66:ea:f1:31:9a:39:d5:3d:43:cd:1c:65:1c:f2:22:51:
8e:ff:a2:80:a3:18:9f:11:04:7f:cd:83:e1:00:3b:b8:37:58:
eb:ab:2b:e1:1c:47:f4:ef:a7:3e:ae:a5:f4:9f:70:c0:c8:68:
7b:3e:69:b3:35:89:b8:fe:0e:63:d4:aa:ea:ff:25:35:a0:63:
c3:8d:70:ed:3e:cb:79:fb:82:d2:20:0e:4a:be:f8:86:23:9c:
27:c2:2c:12:eb:38:91:44:40:4e:3b:fb:54:05:c4:b0:a0:00:
eb:26:7b:9a:31:1b:14:b9:51:b4:83:c4:5c:06:dd:6f:8f:f4:
84:c1:b5:b2:3f:66:3d:a4:13:d1:8e:d3:74:7e:64:10:12:10:
6a:ab:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:26 2026 by rpki-client