Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: D7BwHsghy6N5GqUvzSCjh6+xy3CzKuouqcbhceMUB60=
Subject key identifier: 6F:BD:45:02:D5:B0:50:A4:CB:95:BA:14:6E:4B:44:53:2C:49:08:C2
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 019D2B4E6C141BCC1B7F2707A0B90270D4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0E2C
Signing time: Thu 26 Mar 2026 18:00:52 +0000
Manifest this update: Thu 26 Mar 2026 18:00:52 +0000
Manifest next update: Fri 27 Mar 2026 18:00:52 +0000
Files and hashes: 1: 2WBZQgOfYMFt8ZyhvXbEk4lZles.roa (hash: HeSOR/c+q0Axb5I8xMxzC3yDKx5vk56CmCKP+bGwJFw=)
2: _MJ8L0xXa8uELsCSSJBkL-Wf3SQ.roa (hash: M2SLYenCaom3wMvyLhDeiEjf9I3alZKI5no3LFe/Cgg=)
3: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: zjwIi9qwe9Xe6xSKzdRa91Nxbh1+e8ERQKYAP6JzzgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:6c:14:1b:cc:1b:7f:27:07:a0:b9:02:70:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Mar 26 18:00:52 2026 GMT
Not After : Mar 27 18:00:52 2026 GMT
Subject: CN=6fbd4502d5b050a4cb95ba146e4b44532c4908c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:e0:2d:80:7c:ef:8a:fc:fc:70:c8:97:dc:
8b:1d:e4:dd:ef:3a:8b:5d:e3:ca:e9:ca:cc:a5:05:
57:91:5e:e8:4f:e8:bc:e8:a3:e5:bb:e2:01:7a:4f:
ee:d1:e1:c2:92:58:c6:86:c1:b2:ea:41:99:92:39:
e7:f1:1d:67:64:aa:e6:93:fa:22:5e:47:fb:d9:99:
07:f3:0a:cb:0a:1c:99:45:d5:33:11:1c:ac:f1:79:
40:5a:7c:a0:88:e7:80:37:cc:40:7c:4b:31:1c:ba:
aa:f7:39:ba:06:19:20:ce:c0:0a:3b:05:12:b1:85:
00:36:4e:7f:15:0d:e6:cd:96:33:01:73:36:ae:a1:
b0:51:6f:da:8b:df:16:cd:c8:c4:32:e5:07:6d:62:
f1:6e:43:72:a0:d7:52:5e:c0:c8:80:a3:81:2c:c8:
74:1b:14:f3:8f:21:d4:3a:42:86:7d:a2:3a:7b:1d:
68:d4:fb:e3:40:46:ab:31:59:15:cb:db:9f:6b:f3:
96:33:ac:b8:4a:41:30:8f:41:c1:03:e8:c3:7a:6a:
73:b5:62:f6:4f:9c:0c:17:6c:d5:93:fd:5b:92:a9:
99:af:01:12:b4:6a:87:00:88:6a:17:09:f9:88:cb:
21:10:42:ca:a1:e4:9c:18:5c:ce:05:ca:94:46:03:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:45:02:D5:B0:50:A4:CB:95:BA:14:6E:4B:44:53:2C:49:08:C2
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:59:b1:6f:3e:c1:34:a6:fb:a6:0a:30:09:1d:92:c4:82:
30:90:7d:d8:b6:7e:79:0e:69:89:9c:b4:97:cb:a7:89:de:dd:
13:a6:5f:e4:b8:3c:a9:cc:21:8b:6c:e4:af:b3:ab:f5:fd:4a:
83:25:0d:a4:0a:1d:f9:9d:db:27:f5:1e:32:bb:1c:e3:6b:91:
0a:85:57:f7:51:af:02:ad:31:c5:0d:99:86:2a:4a:41:ac:06:
0b:b5:f8:1d:09:7b:e0:c6:3e:90:9d:24:d9:06:62:a5:aa:e9:
df:7e:98:b6:77:2a:94:25:d5:0d:1b:a6:38:02:e7:a7:4e:53:
3c:ce:b9:87:19:52:0c:42:11:51:ed:6a:30:8d:a6:a5:e8:32:
d0:3c:b2:29:80:af:49:f1:ba:c2:0d:89:6d:cd:81:94:d1:49:
c3:7c:10:d3:fe:fc:0b:6a:99:84:d5:e0:53:77:f2:c9:ad:87:
09:ee:40:84:db:19:a8:7d:00:b4:8a:f5:97:3c:c6:4d:b4:0b:
3c:5b:bd:4d:13:71:de:97:1a:71:52:60:3a:b8:e4:01:a7:32:
61:00:40:29:fa:11:b9:3e:c3:92:ea:61:89:87:c1:ad:1c:08:
73:bf:57:ee:16:64:47:6b:12:c3:1d:0a:fe:1a:fe:15:b5:17:
74:84:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:30 2026 by rpki-client