Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
File: EjBb1f3nCLx3of0Ber46iDSOeAk.mft (raw, json)
Hash identifier: xicuSWfDaDBM4L37LkbIjrz/+EVW6hE7GFWrirZxc84=
Subject key identifier: 65:F3:E3:CF:85:E1:CF:B5:BA:DA:51:B5:7A:7D:5D:29:C2:2D:15:A1
Authority key identifier: 12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
Certificate issuer: /CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Certificate serial: 01A0EAE4E94F076D3E34EEAE2A90A8059B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
Manifest number: 34
Signing time: Tue 29 Sep 2026 02:01:05 +0000
Manifest this update: Tue 29 Sep 2026 02:01:05 +0000
Manifest next update: Wed 30 Sep 2026 02:01:05 +0000
Files and hashes: 1: EjBb1f3nCLx3of0Ber46iDSOeAk.crl (hash: Cpo1ZBS1wAHIk5HT2Z7nH85IjZR8OW2hX+EX6n49Azo=)
2: wOllorR3IEPsKMbcbB7blz6CaGs.roa (hash: 98dgbOx+V8DXxNAjtoueFdBj41vqBbkPousD5UNldes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e4:e9:4f:07:6d:3e:34:ee:ae:2a:90:a8:05:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Validity
Not Before: Sep 29 02:01:05 2026 GMT
Not After : Sep 30 02:01:05 2026 GMT
Subject: CN=65f3e3cf85e1cfb5bada51b57a7d5d29c22d15a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:ab:4e:9b:42:54:cb:19:23:66:b7:b5:f0:
7b:1b:de:f4:15:6a:7c:d5:3f:8f:17:1b:60:3f:2b:
c9:74:15:dd:7c:30:58:b3:04:1b:ed:73:ed:14:bf:
bd:92:48:57:2b:e7:01:85:b8:79:4a:19:a0:dd:d5:
8c:cb:79:d6:fb:4e:f2:0d:ce:de:21:20:cc:67:ad:
66:08:5a:a2:8d:aa:d0:ec:ea:ad:fb:d4:5c:93:e4:
15:e8:2a:f3:e3:45:94:df:e5:60:f7:2a:6e:78:c7:
67:4c:7a:15:76:70:2d:7d:8d:b0:bf:a6:d5:2c:fb:
13:e1:fa:af:29:06:a0:46:30:5b:ac:01:2b:a3:ed:
c6:8a:ff:cd:e6:61:5d:8a:81:11:1b:b9:65:d7:a4:
cf:ed:90:7a:37:1e:a9:73:48:c5:2a:91:e5:6b:3e:
00:03:48:d1:b4:4a:5c:2a:d8:2d:d7:b9:20:6f:8a:
19:40:ce:f5:b1:f0:b4:44:f0:d3:5d:c5:ee:6c:8b:
b4:c1:90:1c:d2:22:82:b7:d1:c0:db:e8:be:46:87:
9d:69:be:a1:bc:2c:27:43:9b:96:f6:79:ef:11:47:
da:50:a4:25:2a:bd:2e:ee:41:02:d0:67:da:7f:47:
8c:29:3b:bd:18:64:1c:ee:4f:55:4b:ad:1d:1c:87:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:E3:CF:85:E1:CF:B5:BA:DA:51:B5:7A:7D:5D:29:C2:2D:15:A1
X509v3 Authority Key Identifier:
keyid:12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:f9:e8:1f:e5:be:c5:57:4f:42:30:46:73:d6:08:35:fc:
bc:1b:77:9e:7e:68:18:7d:b3:0d:ec:40:2d:92:9e:5a:df:d8:
18:ab:43:62:b7:f6:87:6a:ab:d4:c2:7f:da:9f:f2:3a:0b:d7:
22:f0:11:2e:93:cd:d3:58:a4:7e:4e:63:b0:4b:5d:ea:a7:26:
19:b0:68:ee:e2:02:0d:b5:fe:0e:ab:7a:a2:b1:15:c3:f6:6a:
1a:c4:3d:5b:a3:dc:c1:d8:a4:be:0c:8a:44:8b:e8:14:ff:fb:
f8:64:28:a0:2f:02:1b:37:8c:17:35:df:2d:ca:67:5d:22:4e:
ad:64:ea:7f:6b:2a:f1:c7:bb:64:4f:88:82:22:70:d7:92:68:
38:f6:32:68:e4:82:7c:16:56:7e:f5:50:6b:eb:41:ad:1d:36:
67:10:a6:7e:5f:89:e3:78:f3:0f:fc:66:7e:2b:2e:54:e2:b6:
23:f3:8d:f8:73:5d:e7:e4:2a:c7:99:bc:79:a1:4b:e9:d0:34:
87:f7:2d:29:0c:11:25:c5:19:68:5a:b0:c7:03:8d:27:22:3f:
a0:1a:c2:9a:eb:21:c6:4e:fb:23:c0:c9:f5:b3:e2:45:fb:b4:
eb:a6:0e:39:ca:ef:c7:fd:77:8a:60:4a:eb:4d:06:e4:29:3c:
95:db:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:39 2026 by rpki-client