Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: UnX0sd/f4SGvDz+dOO5zexaBlyxGLBJ450Y2yrNvz1o=
Subject key identifier: CD:91:2D:AF:4E:D3:F6:04:76:33:FA:06:A8:BE:C4:A8:3C:D1:0E:63
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01A12BB2699B9752FAA102838DB21FADDEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 16:01:14 +0000
Manifest this update: Sun 11 Oct 2026 16:01:14 +0000
Manifest next update: Mon 12 Oct 2026 16:01:14 +0000
Files and hashes: 1: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: u6eo4zs0w6O91SukyakWReNjgGg366c4r3ipmA9KpPo=)
2: PX-PA_qvZ-1l6K3wNjSwdgT4Mdw.roa (hash: HB/qGyQkIbjMupRljxbBaXBLXsVJ22JDc51zymfvPJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:69:9b:97:52:fa:a1:02:83:8d:b2:1f:ad:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Oct 11 16:01:14 2026 GMT
Not After : Oct 12 16:01:14 2026 GMT
Subject: CN=cd912daf4ed3f6047633fa06a8bec4a83cd10e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:c2:96:a6:ce:2c:e0:e2:f4:20:9b:ed:5a:
46:4a:55:d1:a1:0a:7b:e9:8a:f9:d6:e4:8d:31:da:
49:1d:c5:54:78:7a:a6:53:90:fd:ef:b5:02:72:38:
32:c9:58:8a:7c:aa:91:22:a0:20:b9:bf:8c:cf:6f:
02:9e:55:fe:52:8e:70:d0:b5:17:07:96:f9:2a:cb:
1f:46:7e:36:e4:b6:0b:32:f1:92:0d:91:d4:41:57:
0d:3a:66:55:dd:8d:d6:eb:2b:c9:61:76:67:0b:41:
7c:1a:de:12:76:ff:36:e6:27:66:70:77:8f:87:1a:
19:81:0b:9c:93:c6:5d:6c:73:05:bb:f7:d5:f7:04:
a2:39:42:32:1b:20:8d:e6:4c:fe:1c:cb:a2:31:71:
e9:6f:52:f8:3e:ec:79:d3:3b:6f:31:06:2a:b9:fa:
b3:a8:f0:86:52:f4:36:3b:55:a4:f8:63:1d:7b:63:
d9:e1:38:31:64:48:20:f2:6b:51:c9:9d:54:f5:2b:
a7:40:87:12:61:fe:3a:a1:cf:aa:10:54:ee:72:c8:
12:6c:cd:27:fa:5b:bb:49:40:e2:55:0e:31:2c:2a:
38:53:43:3d:a3:91:67:3c:7f:5c:b4:01:f4:f6:87:
b6:2d:d6:c3:91:94:56:7e:57:8b:21:89:ee:69:51:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:2D:AF:4E:D3:F6:04:76:33:FA:06:A8:BE:C4:A8:3C:D1:0E:63
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b9:f5:ae:b1:7a:3d:a3:11:74:8a:87:80:ae:05:9f:d5:eb:
12:99:10:51:df:df:93:8c:ee:d8:7e:11:64:8f:46:95:85:a6:
91:32:95:c0:9a:dd:e9:50:04:aa:5b:6a:f6:54:54:52:61:a7:
00:59:72:09:74:e8:85:09:36:9f:25:c5:d3:a3:50:0a:78:17:
f6:00:df:86:54:55:c8:f8:39:5e:3e:cd:79:61:a3:83:dc:19:
87:b3:53:b5:f7:48:61:c0:2f:6b:35:85:a7:22:80:c1:f6:5b:
fe:8b:f2:78:9f:ca:fa:e4:40:ed:e7:98:d1:8a:e9:4e:9f:6b:
21:42:1d:90:f9:d4:6c:d8:82:c4:04:03:d6:39:f9:32:b2:c6:
03:34:43:37:23:e0:8a:74:32:b1:a7:2f:15:52:f5:1f:60:fb:
88:a0:cb:0f:ce:b5:f9:d8:98:0b:92:a2:ad:4c:db:c5:b5:8c:
6b:95:00:60:6f:a1:82:86:eb:09:96:9f:d3:d2:1b:34:8d:ba:
e8:83:ec:50:b8:d8:ff:f9:bf:15:b1:df:30:85:09:9c:89:c9:
60:19:92:aa:20:95:09:29:83:ff:54:05:f6:33:38:d6:97:8f:
60:44:36:ea:69:97:9f:0e:50:99:66:15:7e:c5:be:0a:3c:36:
fe:71:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:06:36 2026 by rpki-client