Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: 5xCWhkc9UQU2Y8OmUgQYbJqQDpI3aVr7nM4NhK4rLgo=
Subject key identifier: 28:91:FE:65:1F:23:F3:35:8A:42:57:4B:B8:A4:7E:59:58:C4:3A:CD
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019D2AE0D63B7336AAB11505BAA916E56D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 16:01:11 +0000
Manifest this update: Thu 26 Mar 2026 16:01:11 +0000
Manifest next update: Fri 27 Mar 2026 16:01:11 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: dhF410W24vzmbq0rxtNnN54FjIXHa6LL9UFruu7AK6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:d6:3b:73:36:aa:b1:15:05:ba:a9:16:e5:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Mar 26 16:01:11 2026 GMT
Not After : Mar 27 16:01:11 2026 GMT
Subject: CN=2891fe651f23f3358a42574bb8a47e5958c43acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:74:82:5b:e5:45:52:a6:21:fa:1d:46:27:
ce:eb:f8:1a:96:4a:6e:a6:05:3e:d0:af:6f:a4:25:
43:4a:f7:98:ba:9e:4f:de:d6:4b:8a:40:2c:c8:5e:
23:a1:22:fe:f9:fb:59:25:44:23:c9:1a:47:de:50:
b1:ca:68:7f:0f:25:3f:8e:00:48:90:ad:fa:d9:d0:
7b:e3:f5:cd:a8:99:fd:9f:a3:d3:83:23:c0:ce:3e:
3e:74:88:65:4a:73:15:d2:c8:19:87:95:aa:66:63:
a2:4e:a8:c4:02:ca:f6:b2:ac:cf:5f:f0:36:bc:ea:
fd:b6:9e:c0:31:bf:5e:f4:3b:6b:04:b4:0f:6d:12:
0e:a6:07:d9:84:61:f4:aa:ad:6d:bd:31:99:65:f2:
46:46:e6:cf:a2:4f:80:5c:f6:76:94:bb:9e:bd:39:
80:37:51:f5:31:1b:c6:e3:37:1e:1e:fb:5f:8c:3c:
89:38:ea:c9:e1:15:85:79:fe:fd:5a:70:bf:b7:31:
dc:23:39:2e:5f:84:ef:34:64:48:d5:ab:e7:ab:c8:
3f:b4:dc:a1:f9:83:c2:fd:dd:91:64:fe:60:c3:19:
97:fc:25:96:05:20:a0:5c:c3:e9:50:8b:b9:12:16:
9b:b9:68:d7:67:12:66:98:c9:8a:86:ea:4c:b3:cf:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:FE:65:1F:23:F3:35:8A:42:57:4B:B8:A4:7E:59:58:C4:3A:CD
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:eb:09:7c:95:db:f8:74:d1:7f:4c:21:6f:56:1b:bb:a2:3f:
66:6c:54:28:98:f9:6d:e5:eb:63:b0:51:59:85:97:3f:25:24:
62:9b:e0:fa:72:35:5d:13:f8:8c:32:15:72:ef:b6:87:21:53:
b0:a5:81:b5:dc:6b:8a:cd:20:44:ba:2d:06:7c:64:f3:3c:7f:
5c:96:aa:74:08:81:53:ad:ec:ef:b8:9d:51:75:4b:ac:bf:0e:
07:f6:09:ed:4d:02:56:93:9e:3b:1a:20:2a:88:05:bb:0f:c3:
6d:4e:8a:32:9b:ec:df:e4:ae:f1:fc:06:de:49:e0:c2:50:fc:
cd:89:78:0f:fb:77:bb:b8:09:15:9c:5c:d3:96:99:f8:11:5c:
db:b2:89:74:e4:7f:1b:ff:88:f5:7a:af:32:e8:5c:c7:a7:89:
be:38:c1:f1:49:97:7a:81:e8:60:26:56:f7:98:7f:0f:26:b2:
ff:ae:cf:8b:f7:1a:b3:89:8d:de:e6:a4:a7:41:4d:f8:52:5b:
c0:2d:ed:17:9d:cb:f3:91:33:a6:a5:a2:8a:75:9d:09:2e:c2:
97:e6:91:09:5a:91:c9:b6:22:da:ea:be:43:46:10:a4:67:f7:
19:17:69:46:2d:ba:26:f8:a2:53:ae:38:fc:f1:6e:9c:1c:45:
3d:66:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:43 2026 by rpki-client