Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: z6rj9Vf+2BjaDpyOX6VEdyaP5MLht+5yoFIQkP1j5ck=
Subject key identifier: 39:DD:A5:11:17:74:AB:F0:DE:1C:0B:AC:92:76:30:A1:14:65:CD:26
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019D2996C760FA647FDB567B47294E85116F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 08EE
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: LwoLT1S5IZ3GJENrbIOLiJKkrxM.roa (hash: ANC1phdFKuJYTnQOKa5Ojw1nbMCT2ZAJrnTkKz9AGrk=)
2: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: YJc7LFMYQKwhyCjIBmFIorH2XXc3CbvLIQFex7xqQ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c7:60:fa:64:7f:db:56:7b:47:29:4e:85:11:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=39dda5111774abf0de1c0bac927630a11465cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:2f:36:f4:e8:e7:7d:88:a2:45:ff:83:26:
48:97:d6:4c:2c:9b:ca:27:17:96:69:0a:81:ed:9c:
67:4e:ec:e9:2a:ed:46:c1:e7:2c:cd:00:26:5b:b1:
17:b1:e7:db:d1:51:81:51:c2:b7:0a:75:19:05:5b:
97:f6:62:4b:3d:18:55:0f:87:fd:0c:fe:ed:c3:7c:
b1:80:2a:47:17:6f:7b:d7:a6:62:94:e9:62:10:bf:
81:37:64:97:48:3c:26:2a:b8:62:a4:3a:fd:bb:a9:
51:18:a3:c3:2b:30:92:07:8b:24:15:7d:ea:52:1b:
3e:d7:e8:d9:d5:e7:f9:88:01:34:22:66:b3:be:95:
a2:1f:71:2c:98:1c:7f:40:27:6c:cf:4f:39:93:a0:
d2:13:bb:7a:d6:43:26:da:fa:91:19:b9:7c:1c:ff:
49:5b:9e:f5:ec:5d:ed:46:23:dc:d5:00:7e:72:6b:
24:88:d0:15:32:8a:8a:ee:b4:2e:cb:06:1f:af:ec:
75:b7:47:df:58:fe:d0:76:e6:f4:a1:dc:fd:f2:96:
e5:07:ab:a9:3a:32:db:4c:94:90:7a:68:34:7c:c0:
bb:bb:4b:e3:57:b5:81:0d:6b:5c:ff:b7:d6:80:7b:
d4:86:a4:b0:f8:5e:d8:b7:f7:45:33:7f:da:62:c9:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:A5:11:17:74:AB:F0:DE:1C:0B:AC:92:76:30:A1:14:65:CD:26
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:71:c1:72:30:69:39:d2:48:2f:0c:64:a2:be:d4:97:de:63:
9d:35:37:3a:d2:58:12:71:1e:44:4e:a3:ee:ab:6d:83:5b:99:
ef:08:0d:48:4f:91:fd:53:ad:c6:5f:ca:db:1d:a3:ab:da:6b:
5c:9f:48:d2:8b:ea:af:0b:d9:f2:51:9a:5b:ae:f1:5d:cb:25:
34:05:ed:f4:91:b9:45:47:c4:56:6a:a6:4c:5e:24:1e:3e:01:
d9:62:7f:f0:69:05:94:97:d3:16:42:d7:67:d2:02:5e:6c:a8:
2e:cd:5d:31:e5:b3:3f:6d:81:cc:0d:27:1c:bd:ff:42:de:4b:
b1:4d:d9:90:33:e8:e5:72:23:58:7c:b2:7a:ed:32:9b:f8:69:
d8:9a:77:87:2e:2e:f6:28:dd:a5:69:92:d8:6b:c6:fd:94:65:
1c:ee:b7:40:dc:0c:ec:7a:67:c2:3d:f6:df:76:8c:42:57:d6:
12:98:b8:f5:e8:dd:e4:f1:c1:b1:8c:99:07:b5:5f:80:9b:a0:
16:45:48:2c:93:34:a4:2a:a9:a1:10:65:dd:9b:2c:90:a8:cb:
30:d6:0c:d8:6d:51:ef:53:ec:19:9c:18:bb:7e:39:61:0d:ba:
aa:2b:2d:ce:83:6f:13:47:a8:e2:39:61:89:af:f3:86:ac:43:
54:a2:2c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plsdg+mR/21Z7RylOhRFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1
Y2FlNGQwHhcNMjYwMzI2MTAwMDQwWhcNMjYwMzI3MTAwMDQwWjAzMTEwLwYDVQQD
EygzOWRkYTUxMTE3NzRhYmYwZGUxYzBiYWM5Mjc2MzBhMTE0NjVjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS8vNvTo532IokX/gyZIl9ZMLJvK
JxeWaQqB7ZxnTuzpKu1GwecszQAmW7EXsefb0VGBUcK3CnUZBVuX9mJLPRhVD4f9
DP7tw3yxgCpHF29716ZilOliEL+BN2SXSDwmKrhipDr9u6lRGKPDKzCSB4skFX3q
Uhs+1+jZ1ef5iAE0ImazvpWiH3EsmBx/QCdsz085k6DSE7t61kMm2vqRGbl8HP9J
W5717F3tRiPc1QB+cmskiNAVMoqK7rQuywYfr+x1t0ffWP7Qdub0odz98pblB6up
OjLbTJSQemg0fMC7u0vjV7WBDWtc/7fWgHvUhqSw+F7Yt/dFM3/aYsm29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDndpREXdKvw3hwLrJJ2MKEUZc0mMB8GA1UdIwQY
MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt
NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4
LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3HBcjBp
OdJILwxkor7Ul95jnTU3OtJYEnEeRE6j7qttg1uZ7wgNSE+R/VOtxl/K2x2jq9pr
XJ9I0ovqrwvZ8lGaW67xXcslNAXt9JG5RUfEVmqmTF4kHj4B2WJ/8GkFlJfTFkLX
Z9ICXmyoLs1dMeWzP22BzA0nHL3/Qt5LsU3ZkDPo5XIjWHyyeu0ym/hp2Jp3hy4u
9ijdpWmS2GvG/ZRlHO63QNwM7Hpnwj3233aMQlfWEpi49ejd5PHBsYyZB7VfgJug
FkVILJM0pCqpoRBl3ZsskKjLMNYM2G1R71PsGZwYu345YQ26qistzoNvE0eo4jlh
ia/zhqxDVKIs0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:17 2026 by rpki-client