
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: Dv4LWkdjPZB0cK16QYfb6xuadRhHj5mIn6WuLbhqXhA=
Subject key identifier: B5:77:DD:8B:EE:41:94:4A:4D:44:14:DE:0E:98:75:D4:45:63:67:B1
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 01A0D570AEC7665DB8B1E7DDC82DB708C694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 114F
Signing time: Thu 24 Sep 2026 22:02:06 +0000
Manifest this update: Thu 24 Sep 2026 22:02:06 +0000
Manifest next update: Fri 25 Sep 2026 22:02:06 +0000
Files and hashes: 1: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: KrcVpURxtLEYXruXJhXF0dr7i04nvR1O0UZYQLMBbV0=)
2: msjxasNTYVip4ytkLcozKUIyuLU.roa (hash: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:ae:c7:66:5d:b8:b1:e7:dd:c8:2d:b7:08:c6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Sep 24 22:02:06 2026 GMT
Not After : Sep 25 22:02:06 2026 GMT
Subject: CN=b577dd8bee41944a4d4414de0e9875d4456367b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:3d:43:ec:15:ae:42:86:36:59:f9:95:34:
83:47:f4:95:15:28:03:c5:6e:01:f5:5a:1f:13:36:
4d:7e:30:69:09:a6:23:c9:49:32:46:5e:40:7b:9c:
21:94:27:13:4d:e4:28:ae:f1:e5:96:fc:86:3a:57:
0e:64:50:c0:a7:96:64:54:c1:6b:db:fc:4b:8d:44:
ee:12:51:e5:ad:35:80:d8:39:e4:d6:5e:7a:b5:5a:
88:71:b7:79:10:b6:67:d8:b4:d1:0a:31:6d:ae:ab:
9e:bf:12:0d:3f:8c:f0:26:b4:ab:7a:d2:ca:59:d1:
6f:c8:4b:e9:05:0d:0e:40:cf:0e:35:8a:c2:35:ce:
3b:bb:2d:20:3d:4b:17:f0:77:df:9c:15:41:60:a1:
45:ce:82:2f:98:81:0e:4b:b4:f5:bb:0c:f4:c4:e7:
da:c8:73:ed:e7:87:2a:8a:ce:a9:5f:ad:92:ac:65:
80:17:71:55:60:eb:cd:6f:a5:85:10:12:19:b6:59:
4a:67:e2:35:5e:17:64:12:d9:ed:f5:47:03:83:10:
c9:f4:49:ab:8d:23:c1:13:28:af:df:9f:37:dd:f1:
fe:db:f5:e2:0f:03:b6:18:20:5b:e4:fb:51:cb:74:
17:0b:e0:23:0a:09:af:f4:1f:fa:81:03:9d:72:68:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:DD:8B:EE:41:94:4A:4D:44:14:DE:0E:98:75:D4:45:63:67:B1
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0d:3d:f7:81:cb:0d:93:93:83:38:ca:1c:9c:9b:aa:35:a8:
d3:d7:3d:34:4c:2d:cf:0d:68:4b:2a:f5:9d:bb:d3:d3:cf:6e:
56:62:b2:97:64:47:1b:1b:ec:52:6d:e6:5e:56:0d:48:b0:71:
69:90:ac:d2:9d:69:d7:b4:1b:39:03:c8:d9:4c:a4:a6:0f:f4:
83:2f:3e:7a:2c:64:7b:f9:cb:ba:ce:9b:28:21:a8:9f:0a:d2:
82:f1:e3:76:45:17:2a:da:13:ed:d6:1e:b9:ea:64:96:d2:1d:
b7:82:40:9c:99:00:83:5e:1f:ae:8b:5a:6e:10:cd:68:8e:94:
37:fd:21:66:a7:79:9e:b8:0c:b6:56:a5:f2:a1:30:19:e4:a0:
1d:06:d6:e1:7a:91:f7:80:7f:a5:d1:5d:12:37:e3:fa:cc:e7:
6b:80:0f:c0:f6:49:48:36:c8:14:bc:22:94:04:6d:b1:45:72:
2f:e0:09:9a:18:e8:cb:ae:80:b8:9d:ff:0a:4d:32:d6:1d:63:
ed:d5:e0:76:99:98:78:9b:3a:cf:91:9a:29:0a:0a:88:56:8b:
21:de:b4:93:73:d8:46:cf:e9:cf:c7:bf:1e:19:bf:f3:83:e9:
ee:c4:66:bb:fc:8a:76:46:b1:74:b3:7f:ee:65:44:5a:95:61:
94:c2:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:17 2026 by rpki-client