Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: mxbbIcMoQWrrGpmpgX7KoRiPVyEsuHlGdbOrvfkn42E=
Subject key identifier: D0:68:08:66:BF:34:BE:AD:DC:93:FB:80:A2:0F:73:4F:E3:65:15:27
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019D26284F16809302FDCD2913AFF440181C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 11EB
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (hash: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8=)
2: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: N7sGIXG0xbjuYiod0bhJ17eWcSjERXJDF9w7d43Ic18=)
3: r4Hrg0bEs6gpKFTSd59isgxSeSk.roa (hash: /DPtXcMqR60C1x1kBS5/vOOh84pABE6/ZVLVmshPVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4f:16:80:93:02:fd:cd:29:13:af:f4:40:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=d0680866bf34beaddc93fb80a20f734fe3651527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:24:87:06:4b:58:fa:d7:cc:25:6a:f9:cb:
23:d0:14:62:e8:2b:13:f4:b6:8c:dc:9c:12:fd:74:
95:7e:96:2d:8f:56:71:d8:22:77:c9:7c:3d:34:b6:
43:84:0d:21:a9:87:b8:6f:c6:ca:77:23:29:e9:47:
13:8e:45:65:28:e0:b9:f7:a4:17:91:fa:9a:f0:3a:
bc:0f:bd:dd:f0:c0:a7:95:2f:8e:f2:df:e8:43:fa:
4c:4b:41:f3:ee:a3:32:de:36:8f:3d:23:6e:37:02:
03:3e:79:f7:8e:2e:0d:cc:1a:fa:91:07:aa:92:af:
c3:f1:84:1b:0b:7a:53:28:74:10:43:be:c9:a4:75:
b7:3f:c7:4d:7e:d5:28:51:ec:a4:eb:08:e4:7d:1c:
77:4c:57:61:b2:18:11:e4:ca:65:e4:43:53:fd:2f:
35:0b:18:ae:13:47:cb:19:9e:4b:ca:33:32:99:e8:
38:d4:90:d9:a3:71:d2:43:f0:6c:36:ce:90:41:48:
28:44:1f:3f:a2:0f:da:b2:5d:e1:54:31:f5:27:40:
9b:ab:d9:03:28:07:86:8b:e5:1b:fb:6b:a5:32:9d:
e2:d4:93:2a:3c:b2:68:ac:80:72:4f:9b:f9:f3:b7:
a4:2b:2e:3f:e6:b6:8d:bc:de:24:f6:6d:11:4c:db:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:08:66:BF:34:BE:AD:DC:93:FB:80:A2:0F:73:4F:E3:65:15:27
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:81:11:20:db:1d:67:91:83:25:2e:4e:90:4b:09:10:38:
27:46:7b:45:ce:90:91:20:31:ef:b4:b4:b2:be:d8:e0:db:8f:
22:f6:a5:47:61:6e:25:8c:4b:5d:32:72:fe:ba:e4:62:af:b4:
12:b0:8c:e0:f6:b7:05:22:c8:44:cb:a0:29:4b:89:87:9f:18:
e4:37:e6:5b:03:37:24:28:9f:1a:a6:69:27:6a:c5:b9:71:0f:
b9:39:ee:4f:56:ac:00:ea:78:7e:7d:c3:61:a7:08:59:2f:99:
4a:07:fa:87:d8:94:b1:79:99:6a:f8:73:f5:c6:05:0e:1f:26:
95:35:74:c5:b5:fe:a6:60:d6:7b:40:a4:2a:c6:90:b7:3a:7c:
49:be:0f:7c:42:7b:d7:dc:0b:8f:3c:f8:80:cf:d3:89:c2:f4:
64:93:b2:ab:c6:74:10:4a:e0:4b:15:23:6b:f5:fa:a8:c7:ab:
57:ce:85:3d:97:38:c7:a3:9b:d8:39:e7:2c:e3:40:bc:00:61:
ed:fc:14:5b:34:50:7d:a9:4a:89:98:67:c9:44:98:df:53:08:
c7:e9:db:27:27:e9:90:86:77:2a:db:be:84:fd:79:97:ca:e2:
4d:db:62:df:53:ff:a1:23:8b:01:40:6d:f2:9e:eb:5b:40:41:
53:c2:8d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKE8WgJMC/c0pE6/0QBgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOTE5MmMwNzM4NjJlNjIyMGM1ZjkxMDZkN2M1NWUzZmM2
YzVkNGIwHhcNMjYwMzI1MTgwMTA5WhcNMjYwMzI2MTgwMTA5WjAzMTEwLwYDVQQD
EyhkMDY4MDg2NmJmMzRiZWFkZGM5M2ZiODBhMjBmNzM0ZmUzNjUxNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+AkhwZLWPrXzCVq+csj0BRi6CsT
9LaM3JwS/XSVfpYtj1Zx2CJ3yXw9NLZDhA0hqYe4b8bKdyMp6UcTjkVlKOC596QX
kfqa8Dq8D73d8MCnlS+O8t/oQ/pMS0Hz7qMy3jaPPSNuNwIDPnn3ji4NzBr6kQeq
kq/D8YQbC3pTKHQQQ77JpHW3P8dNftUoUeyk6wjkfRx3TFdhshgR5Mpl5ENT/S81
CxiuE0fLGZ5LyjMymeg41JDZo3HSQ/BsNs6QQUgoRB8/og/asl3hVDH1J0Cbq9kD
KAeGi+Ub+2ulMp3i1JMqPLJorIByT5v587ekKy4/5raNvN4k9m0RTNuDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBoCGa/NL6t3JP7gKIPc0/jZRUnMB8GA1UdIwQY
MBaAFBCRksBzhi5iIMX5EG18VeP8bF1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYt
ZTZmZTY5MWQ5NDg5LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYtZTZmZTY5MWQ5NDg5
LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROqBESDb
HWeRgyUuTpBLCRA4J0Z7Rc6QkSAx77S0sr7Y4NuPIvalR2FuJYxLXTJy/rrkYq+0
ErCM4Pa3BSLIRMugKUuJh58Y5DfmWwM3JCifGqZpJ2rFuXEPuTnuT1asAOp4fn3D
YacIWS+ZSgf6h9iUsXmZavhz9cYFDh8mlTV0xbX+pmDWe0CkKsaQtzp8Sb4PfEJ7
19wLjzz4gM/TicL0ZJOyq8Z0EErgSxUja/X6qMerV86FPZc4x6Ob2DnnLONAvABh
7fwUWzRQfalKiZhnyUSY31MIx+nbJyfpkIZ3Ktu+hP15l8riTdti31P/oSOLAUBt
8p7rW0BBU8KNLg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:46 2026 by rpki-client