Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: GC5FmyJmyO7c4V2ISvilsU56/nnIO+RdXekyDzN8wV8=
Subject key identifier: 4E:7E:E8:3B:BA:4C:CB:2E:0C:7E:91:D0:D9:08:EF:03:EA:93:F8:A7
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019F96CAB8B10756681E30D069ABF1619B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 19C7
Signing time: Sat 25 Jul 2026 01:01:35 +0000
Manifest this update: Sat 25 Jul 2026 01:01:35 +0000
Manifest next update: Sun 26 Jul 2026 01:01:35 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: Shodp0mChXgKowwqZzgqsxF6faVhJxGmxlU0amZgQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:ca:b8:b1:07:56:68:1e:30:d0:69:ab:f1:61:9b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Jul 25 01:01:35 2026 GMT
Not After : Jul 26 01:01:35 2026 GMT
Subject: CN=4e7ee83bba4ccb2e0c7e91d0d908ef03ea93f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:a7:d6:ff:ac:8b:4f:16:5b:78:5d:78:a3:
f9:7e:b3:16:0e:6b:48:7d:d0:6e:5a:dd:37:5c:63:
25:57:4e:af:7f:de:dc:3b:cf:ae:71:ab:fe:04:8a:
81:fc:73:56:10:8b:f6:1e:cc:90:5e:18:83:11:f2:
17:33:dd:94:84:e7:d4:50:da:81:54:fc:9a:f3:81:
27:bc:84:d3:54:f6:9c:14:71:b9:88:8b:74:77:19:
fc:01:c3:22:9e:13:40:f1:0f:55:bc:41:79:da:b9:
dc:9d:d1:9e:40:62:49:ec:38:b9:df:00:eb:76:9b:
38:8c:1d:b6:f5:1f:39:42:83:5c:d3:6b:d8:d3:ed:
53:55:aa:7b:4f:f0:ed:3d:37:84:a5:7d:2f:b3:b7:
89:9b:6a:b5:6c:4e:f9:c7:24:93:e9:65:3c:fc:e4:
69:3a:c1:ae:38:14:8b:d5:c6:ed:08:87:9a:52:22:
c5:27:8d:85:5d:87:3d:35:57:7b:1f:6f:5a:93:9b:
06:c3:17:5a:67:f3:95:21:e0:57:c9:c3:85:20:95:
9a:ff:ba:73:88:23:55:ec:40:d3:e2:22:1c:98:03:
09:6e:8b:1f:8d:81:3d:75:84:41:cc:b5:07:75:c3:
c2:bb:31:48:43:6b:0e:2b:0c:70:a9:f9:7f:39:80:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:E8:3B:BA:4C:CB:2E:0C:7E:91:D0:D9:08:EF:03:EA:93:F8:A7
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:c6:82:9f:fb:f3:ee:56:a3:19:08:1c:ec:f5:2a:50:92:
fc:6a:39:c0:40:ed:65:02:ac:55:db:58:07:4a:1a:0a:99:c1:
ac:16:62:4f:97:5a:ea:d5:46:ad:c3:43:08:fe:40:a2:9c:fd:
62:71:33:fe:9f:37:f4:c9:dc:e7:1c:24:bd:7d:f7:b3:b1:8d:
39:08:bf:c4:55:73:1b:b5:9a:b0:10:03:1d:6d:20:eb:1e:9f:
d5:f6:13:60:10:c6:4d:c6:94:b9:9a:d9:e6:fc:92:a1:91:44:
93:c9:2f:79:7c:d2:d8:c2:ab:84:b4:19:3b:f4:33:c9:bc:6b:
ad:ac:3e:cd:7f:af:a3:4d:04:8a:53:41:7a:23:e1:90:ad:da:
91:79:f6:71:c4:a7:64:d7:5d:f7:21:20:82:80:77:b6:c7:68:
29:ce:a3:8a:cd:ef:88:5d:75:1b:30:13:a9:0a:07:66:9b:08:
d7:80:37:16:32:d5:22:06:3a:04:38:e6:88:23:a8:e2:a0:06:
f8:4b:b0:d2:78:b1:55:18:8a:30:a9:1f:67:bf:d7:cd:9f:9d:
8b:94:98:44:a1:82:d1:54:a4:5c:1d:87:04:c8:16:19:e4:b9:
ca:22:ef:5d:87:72:83:31:da:9b:9b:ac:05:e5:5c:3e:c6:a8:
c6:f2:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:23:00 2026 by rpki-client