Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: NEIUyqvAmFpG1Dwwro588VPdD2RtiHoHKCXTJQbeadE=
Subject key identifier: 3D:0B:6F:D2:BC:20:AC:53:4E:CD:38:70:FF:7B:03:3C:3C:65:CF:74
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 019D28F20F79612416943136AAFE38C7BA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 0F68
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: uAyv+LPn2/fMhGbP2Z8HTuZfd6Y06qwikBdx5zbZvAc=)
2: msjxasNTYVip4ytkLcozKUIyuLU.roa (hash: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0f:79:61:24:16:94:31:36:aa:fe:38:c7:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=3d0b6fd2bc20ac534ecd3870ff7b033c3c65cf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:88:91:de:87:bb:95:3c:9f:75:f3:1d:3a:
6f:b0:a5:66:36:d9:e3:0c:99:5d:b8:0a:21:e9:5f:
33:5d:55:e9:b1:1a:d0:99:57:8d:b9:be:59:b3:92:
19:ba:a9:3f:b9:c4:cd:74:17:9c:46:6b:d8:e0:2a:
d8:f9:ac:90:43:ea:dc:9e:29:90:ab:fd:4d:aa:2f:
0d:9e:f8:1b:82:1d:3f:b0:b9:6f:42:44:b9:7f:66:
83:55:17:5e:c7:e8:26:b5:64:7c:ad:20:f1:7d:90:
ec:0b:4b:dc:6b:0e:ad:ce:90:1c:96:70:77:68:a9:
59:a2:e5:f5:f5:b6:5f:54:ad:88:40:9b:9e:ac:ce:
ce:37:3b:fb:f5:f7:7a:94:5b:cf:ad:05:1d:83:d5:
7b:e5:ca:83:1e:54:4c:3f:b9:c7:52:8c:a5:90:87:
6e:91:76:56:88:21:74:d6:37:0b:a6:fb:04:81:f4:
11:39:d7:1e:61:29:5b:d3:e6:e6:1e:85:38:06:83:
99:88:e6:b2:9d:b8:05:6d:99:7b:dc:fa:d8:d8:ef:
20:19:c8:b4:9e:4c:8d:58:73:6d:7f:77:e5:a1:f2:
0b:d4:dc:b8:3d:b7:11:cf:4c:54:63:6f:66:52:e7:
77:1d:9a:c3:8f:47:59:ea:60:5d:97:d2:67:57:a1:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:6F:D2:BC:20:AC:53:4E:CD:38:70:FF:7B:03:3C:3C:65:CF:74
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:4e:2a:35:8e:7c:5c:dd:2a:b7:56:ca:2d:93:17:e6:e2:
51:06:85:05:35:23:12:68:98:6e:34:51:fd:88:cd:ab:e4:ef:
db:b1:e4:9e:f6:1e:72:b1:4c:3c:ab:6c:d3:6d:3e:08:65:27:
de:42:5e:b9:5b:eb:29:16:fe:29:0b:e2:c7:89:74:5a:75:69:
c9:69:30:6d:c4:49:42:c8:af:4a:01:e8:94:34:7f:2a:94:c9:
f3:4d:75:69:01:42:53:0b:28:59:0e:6c:9f:14:c6:1f:b1:a1:
04:a2:4e:5e:2c:07:04:f3:bd:85:2c:62:c1:8e:86:f0:fe:dd:
bc:60:be:a5:03:99:49:d1:17:9a:4a:d0:39:0f:9a:14:c3:76:
2d:4f:9d:1a:df:48:c5:b8:09:cd:32:17:b1:49:ac:ec:61:f5:
a0:71:0c:cf:68:65:af:9e:74:52:d9:a5:34:77:ef:8e:c9:9b:
9c:ee:ce:48:54:eb:ed:54:31:d7:de:54:b4:42:ee:d5:12:c7:
bc:b4:38:d7:81:63:18:76:67:2b:18:16:b9:26:10:71:0d:40:
83:57:0a:4c:7d:36:5e:1d:67:dd:83:9a:3a:1b:6c:29:61:d9:
f2:3e:c4:c4:91:cd:27:96:00:a3:54:1d:bd:25:e9:ff:b9:0a:
26:e6:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:15 2026 by rpki-client