Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: RzI4g5gnEAwIwzDwvzgSxDPHXxBNlgVL0Q9sAkAFFEM=
Subject key identifier: FD:E8:5F:B9:D3:E0:87:6F:D7:49:C4:C4:CE:53:D7:D0:29:30:6A:FB
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01A139500C29B6ADA48173FD8797B2210159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 07:28:29 +0000
Manifest this update: Wed 14 Oct 2026 07:28:29 +0000
Manifest next update: Thu 15 Oct 2026 07:28:29 +0000
Files and hashes: 1: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: XL/jAzs+Rh1c7Cip6ygyI+JXs4qvK3o+TkDnC03S+M8=)
2: IyEPa2Wo8-kP076L1HjykAM4k1I.roa (hash: e98pvgSClRZwcOYUVJYvqg5/jfbNk7qXW3cczc491nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:50:0c:29:b6:ad:a4:81:73:fd:87:97:b2:21:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Oct 14 07:28:29 2026 GMT
Not After : Oct 15 07:28:29 2026 GMT
Subject: CN=fde85fb9d3e0876fd749c4c4ce53d7d029306afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:bb:db:47:5a:e6:67:e2:5f:29:e1:56:96:
37:af:4b:f2:8f:9d:49:f4:40:f4:ae:30:1f:04:2b:
85:c1:09:4a:2c:74:f0:c3:bc:96:b6:57:7b:5d:a3:
e5:b3:fe:c7:4a:c4:2a:60:6c:7c:ae:d1:ff:af:1e:
71:ca:eb:06:5d:45:6e:4e:69:7e:72:00:5d:81:1e:
26:11:7d:13:12:85:ce:69:00:a3:eb:86:a2:18:bc:
aa:e3:a6:24:9b:25:21:85:8f:61:ef:91:bc:19:ee:
8b:80:c7:26:40:b0:81:92:68:47:49:6f:33:0e:22:
ae:04:6f:c0:58:e2:13:83:75:cb:b3:dc:a4:57:fe:
3a:32:f7:dd:40:3d:2c:eb:ee:30:aa:12:62:98:da:
7a:57:b5:93:03:71:91:da:87:4a:a5:f0:e4:d5:c0:
60:4e:28:86:5f:50:e1:a4:09:94:ba:dc:68:50:20:
ad:cc:e8:cb:15:36:00:17:f8:a6:cf:2f:0e:05:09:
4d:06:3a:75:ac:f6:23:01:1b:ca:69:3e:e9:9f:02:
d3:59:3e:c3:e6:3b:3e:7c:62:63:a1:a4:b0:2c:17:
7b:4b:41:e9:32:de:95:8d:0e:67:e8:2f:05:0b:23:
c2:bf:37:80:a5:c3:a4:dc:1c:f5:70:6e:bc:b1:6f:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:5F:B9:D3:E0:87:6F:D7:49:C4:C4:CE:53:D7:D0:29:30:6A:FB
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ae:bc:b3:59:05:88:ef:86:9b:ca:e2:09:39:85:cc:9a:89:
7f:97:8c:76:50:31:86:78:1b:97:ea:13:3b:95:ca:f7:7a:1a:
80:fb:33:6f:f6:0e:e3:31:fa:13:9d:80:0e:11:7a:2a:a8:a6:
2d:cd:86:30:2c:1b:87:52:a2:36:80:fd:b9:4f:07:a9:6c:02:
98:e3:37:eb:7a:42:88:89:db:4d:d3:84:d8:e2:3e:29:63:dd:
d3:5d:c9:1b:78:56:4a:98:af:e4:11:8f:8d:d6:c3:13:2b:2c:
2c:7f:33:66:5a:e1:ca:b5:79:8c:36:6b:9f:9c:af:65:22:f6:
a1:b3:7c:b2:d5:ab:a8:69:e1:6c:80:ef:c5:31:17:ea:0b:3e:
4e:db:4b:3e:79:9b:25:20:58:a5:7a:d0:fc:77:f2:6c:ac:4d:
f2:78:c4:f7:a7:46:35:cb:41:a9:13:3f:a6:b8:b7:23:9f:8f:
83:07:75:5c:2c:74:5a:c0:47:19:28:94:ba:79:d2:38:0f:eb:
0c:ea:f8:84:a8:25:ff:6b:b7:aa:77:42:31:9e:2d:a5:56:09:
1a:71:61:8c:9f:ba:bf:db:89:0a:13:ae:06:88:97:ba:b2:4e:
c0:e6:11:45:c6:92:e0:cf:90:ab:b4:40:90:68:6c:83:05:74:
21:78:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:22:34 2026 by rpki-client