Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: O8iLoGpIDYpesbybssKYwefyh3jStgMitCt6al1fGxY=
Subject key identifier: 4E:CF:2B:3E:B9:04:81:1D:BC:95:FE:3F:3C:A5:95:CC:FD:7D:F8:C2
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01A0EC2E7AD1A9759EFCA44509806D44DB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 08:01:03 +0000
Manifest this update: Tue 29 Sep 2026 08:01:03 +0000
Manifest next update: Wed 30 Sep 2026 08:01:03 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: RtxrGAi9xjSP5vy0uspx72m4p+KZ9iKO1N9PQQqcwBw=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:7a:d1:a9:75:9e:fc:a4:45:09:80:6d:44:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Sep 29 08:01:03 2026 GMT
Not After : Sep 30 08:01:03 2026 GMT
Subject: CN=4ecf2b3eb904811dbc95fe3f3ca595ccfd7df8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:78:8b:ae:b7:03:45:9d:84:39:2e:fb:c7:
27:26:21:c0:34:e8:b8:35:f5:70:d7:b3:8d:2f:d3:
7a:7f:43:c3:e6:78:10:fb:aa:b4:c4:af:d8:89:36:
26:c1:d6:3d:5a:7f:e5:a3:52:64:6a:b7:ae:1b:e8:
89:f9:47:bc:fb:35:b8:16:0d:9c:5a:29:4c:86:2f:
31:d5:cd:9d:b4:fa:ab:cc:b6:bb:7d:d1:c3:e2:28:
1c:3d:44:ec:6d:e7:fe:e6:d9:0d:71:96:fe:ea:23:
73:82:28:a5:c7:15:9f:d6:c7:02:dd:09:5c:e7:29:
3d:74:0b:c6:64:d2:f0:87:38:32:d3:63:92:2c:e8:
0a:fb:03:f2:78:74:cb:68:4e:08:98:32:3f:5b:84:
77:a5:ae:2e:a5:78:73:fa:61:0b:8a:fe:39:0e:25:
08:56:a8:db:27:b2:7b:76:0c:66:79:48:bc:ef:92:
46:c2:fc:2d:fc:cd:bb:43:6b:e0:f3:47:cf:41:8c:
0e:e1:28:e9:68:8d:a8:1d:dd:c0:1b:e6:43:e8:c7:
4e:5c:12:a8:79:12:5b:bf:16:5a:63:9a:22:6a:be:
49:0f:be:b9:42:cc:ee:fd:e3:3a:7e:16:7d:e0:dd:
42:c5:fe:a4:88:e9:a0:a6:ac:3a:e7:5e:13:a2:83:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:2B:3E:B9:04:81:1D:BC:95:FE:3F:3C:A5:95:CC:FD:7D:F8:C2
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b0:ff:93:ae:e5:c7:24:5d:e7:c8:1f:41:ea:b0:20:ea:61:
af:13:e3:13:ac:8f:45:92:b7:f4:5f:d7:b7:27:2b:3c:8b:b5:
3d:99:23:e7:2c:25:d4:87:66:83:ca:6d:ef:a3:02:f6:e3:bf:
51:b8:dd:3a:e8:09:1d:52:82:49:06:52:a4:9f:4c:f7:69:7b:
b0:93:eb:88:1a:b8:66:c2:cd:4f:64:1f:79:65:fb:86:2a:43:
6e:3d:00:a3:f7:93:9a:8f:0c:85:1a:b2:9a:09:69:08:24:bc:
9e:57:15:f6:24:0f:ea:09:4e:37:c3:68:b5:9f:0f:ae:dd:09:
9a:55:30:95:89:3e:4f:ea:2f:4c:70:a7:54:8e:5f:30:4b:4d:
b6:e1:8f:23:42:0c:cd:19:c3:4f:7c:1c:4a:e9:10:34:11:7a:
0c:b5:94:85:fb:ed:d4:cf:54:f2:8f:85:44:54:cb:25:e7:f0:
7c:f9:40:a1:a0:ce:ce:4b:c5:bd:ad:c8:c0:8f:84:35:76:94:
2d:9f:5b:77:b9:ab:f7:f2:94:20:09:1f:b1:63:72:4c:83:e6:
3e:ed:51:81:76:f2:a6:dc:b4:08:cd:f6:71:5a:30:ad:2a:9a:
9b:3a:bf:8a:68:75:86:11:2b:8c:29:8d:d3:18:f7:1c:2a:11:
6a:ec:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:30:58 2026 by rpki-client