Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: j6mrP7OgXxF18IAt2qmL257noyhrvVvRdL87WO9YCXU=
Subject key identifier: E2:6A:7D:BB:C5:E5:0C:8B:CC:21:4E:13:14:3E:48:7E:D4:E7:B5:F5
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019CAA591C8F34D912C0DA436038F7CCE727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0DF3
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: FU2v3EXuzht2j2Qp+2mvr8x5nvaq607R3eSp6MVVTC4=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1c:8f:34:d9:12:c0:da:43:60:38:f7:cc:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=e26a7dbbc5e50c8bcc214e13143e487ed4e7b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:f7:88:6a:8d:d0:5e:a8:36:ec:a9:5b:d4:
57:8e:80:72:52:20:2d:b6:93:f6:95:d1:10:71:cc:
eb:e4:c7:6e:f2:23:58:fe:cd:37:7d:41:ac:58:41:
95:04:4c:1c:e4:f4:15:b7:e6:91:72:61:99:a9:09:
ed:44:a0:8f:ad:95:b7:d1:d5:66:b9:be:79:db:26:
4e:79:cc:5f:eb:25:3b:8b:e1:f9:60:3a:c6:cc:5c:
5f:0b:96:64:53:8b:95:5b:53:2f:1a:d7:24:fa:51:
ef:7e:a9:8e:f5:0e:c1:5f:0e:68:4f:84:60:58:63:
9f:25:66:7d:0e:f1:48:69:27:20:24:b7:11:a2:01:
4d:4f:60:b6:a0:86:69:2a:cd:bc:52:e6:a7:80:3b:
47:93:0e:59:f1:46:b5:ea:3d:ef:cf:75:47:88:16:
90:2c:4a:5a:c8:f6:a0:9c:66:68:8e:ec:83:c9:da:
d6:01:5a:4e:3f:02:c1:ea:35:3f:14:b8:94:aa:05:
a5:73:05:15:62:d8:f2:eb:6a:5a:8f:c8:72:48:52:
d6:a9:96:3b:20:f0:3a:c1:58:e7:30:2f:54:6c:6d:
13:4b:f8:2e:f7:8f:dd:b0:34:80:bc:de:8f:73:b1:
bf:50:c2:dc:d5:12:38:e1:b1:2b:13:1d:1f:56:91:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:7D:BB:C5:E5:0C:8B:CC:21:4E:13:14:3E:48:7E:D4:E7:B5:F5
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3a:13:15:49:5a:d8:38:dc:78:49:1b:f3:12:74:22:ce:b3:
1a:bb:02:1a:05:17:9a:e2:fe:ff:a7:d0:24:51:85:ed:59:15:
6a:a4:cf:8e:09:e0:f8:d7:b0:2f:5d:a2:b5:a3:e7:08:be:bc:
d5:f3:a7:cb:18:1d:f9:dd:84:f3:67:06:78:b8:9f:d5:3b:23:
02:4a:a0:c2:ce:6c:30:cd:a3:16:c6:05:56:a2:cd:73:fb:dd:
26:b1:98:6b:69:a5:ba:c6:b5:0b:bb:b2:d9:29:16:1f:af:9f:
a8:86:be:84:66:ac:92:b9:21:05:27:88:b8:d0:a2:ab:7e:69:
5e:cd:64:8d:cd:51:d1:9e:c9:d0:b2:fd:5e:61:a8:d5:87:8d:
9b:8a:0b:87:ee:1c:77:62:7a:91:1c:14:e4:72:43:89:2f:dc:
1f:7b:f1:50:27:a0:23:87:eb:7d:da:b5:79:57:59:3e:01:ea:
9d:3f:25:f6:71:77:b6:6f:41:fc:c1:98:d2:48:49:ed:e2:a0:
61:5d:77:4e:56:81:8d:9c:d3:86:cc:5d:73:9f:ee:14:52:77:
6f:fb:40:1b:d1:cd:43:50:55:74:4c:64:80:85:f9:ef:ed:fa:
a2:7c:70:9d:0f:93:3d:aa:a4:e7:77:a3:2a:19:ba:33:d4:7d:
2c:5b:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:49 2026 by rpki-client