Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: zejVZTWgxc9QpoA7SgFXOxTI4dtn+7NJL7RD7MsPUJY=
Subject key identifier: A0:C8:63:F1:43:7B:22:C3:22:CA:6C:82:81:C1:38:A3:82:86:53:70
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019D2A72C42B9A26DB094108850DDD0917B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:57 +0000
Manifest this update: Thu 26 Mar 2026 14:00:57 +0000
Manifest next update: Fri 27 Mar 2026 14:00:57 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: RTXdOl0TXjpqdbL/jj5ohbS1+KC+ywC6/5R8q8svhCA=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c4:2b:9a:26:db:09:41:08:85:0d:dd:09:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Mar 26 14:00:57 2026 GMT
Not After : Mar 27 14:00:57 2026 GMT
Subject: CN=a0c863f1437b22c322ca6c8281c138a382865370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:26:71:f2:e6:2c:94:c8:cf:b4:14:f9:93:
8b:5b:27:26:25:b8:eb:c3:cc:17:32:77:ba:3a:91:
8e:09:10:9f:2b:1c:3f:bd:76:18:fc:8a:e1:e1:1c:
6a:0f:7d:7b:73:39:b8:82:1f:83:db:9b:d5:21:35:
e1:2f:49:c0:7d:47:d1:85:3e:13:8c:5a:03:1f:a2:
16:d5:e6:6f:ea:d2:07:21:61:0d:c3:ea:8e:e4:6d:
ef:80:79:13:8f:83:d9:40:4d:b4:8b:34:9e:69:15:
de:66:72:83:5e:f4:2f:d6:ea:fb:a1:eb:0b:50:21:
37:bc:07:08:6b:21:b9:59:f1:37:1d:47:52:4f:80:
7b:ca:89:fb:04:19:06:60:43:09:e0:8e:d6:28:69:
46:8c:0f:de:84:9b:e7:57:3d:95:45:0b:75:3d:31:
23:4a:78:21:f0:50:34:a7:a7:50:ed:3d:52:8d:04:
8d:f3:27:15:64:5b:2e:f7:c8:22:f9:da:50:48:4a:
16:80:22:fc:3e:bd:56:8e:fc:f9:de:7f:cf:11:87:
39:f4:3f:3b:b6:cd:77:e9:28:85:c8:0b:30:88:5d:
04:b3:06:33:48:0d:29:56:1b:44:ab:72:27:ef:35:
2e:7c:c8:f3:af:a7:94:b3:5c:a2:41:c8:4d:b0:b3:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:63:F1:43:7B:22:C3:22:CA:6C:82:81:C1:38:A3:82:86:53:70
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ab:d2:e6:10:28:f0:56:23:2a:f0:ce:6b:ed:3a:7a:f1:bb:
36:c6:14:22:a3:89:e1:82:9a:7c:db:8d:12:ff:18:a1:69:6f:
08:6c:26:df:16:90:22:c6:63:03:ed:0e:e3:39:33:e1:1c:3e:
cd:cd:70:ae:0e:1b:92:2c:4b:57:3c:ac:cd:62:73:7f:1e:93:
a9:99:6f:8b:d8:50:a8:db:44:f9:98:06:1b:29:cd:2c:c9:65:
84:7c:83:ae:55:bb:02:e0:e5:d2:a0:92:22:f0:d6:cf:0e:23:
0a:82:4c:e6:17:3f:9b:a6:35:d8:ff:e6:b5:c1:9e:c0:41:85:
20:c5:c0:f8:ca:2f:e0:47:f5:44:34:c7:1a:5d:74:d2:8e:43:
69:f4:29:04:4a:10:7e:da:ac:e8:96:1c:1a:aa:2c:89:bf:18:
99:61:0a:87:ca:54:81:9f:3b:cb:57:63:d8:1a:b8:ab:3c:94:
d9:47:23:cf:85:9a:08:bc:4e:52:fd:b9:66:d4:72:a0:3f:26:
33:cd:34:f7:f5:71:bd:c4:1f:74:85:08:d0:7b:93:d2:20:3a:
08:17:aa:fb:44:87:ee:c9:95:d6:d2:2e:5f:30:2c:4e:92:e2:
18:60:48:a8:4a:4b:9e:65:42:6a:b4:42:fc:76:5a:6f:83:e6:
54:2d:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:33 2026 by rpki-client