Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier: AZyUrxrrbrGAHpHUwGBiWW5VrRH/DoxykW3rVwQSYFw=
Subject key identifier: D3:EA:1D:14:9F:ED:35:1E:F3:1F:B1:B0:EE:74:C1:5E:7D:62:E3:67
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 01A0D192FD2C49D1A962C9D69B9CCC2F2957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number: 114D
Signing time: Thu 24 Sep 2026 04:01:06 +0000
Manifest this update: Thu 24 Sep 2026 04:01:06 +0000
Manifest next update: Fri 25 Sep 2026 04:01:06 +0000
Files and hashes: 1: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: Z3aY2n4adnoj7Mi3ZvMM5wRfKZcXT7iGjO0SAaua5bk=)
2: msjxasNTYVip4ytkLcozKUIyuLU.roa (hash: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:fd:2c:49:d1:a9:62:c9:d6:9b:9c:cc:2f:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Sep 24 04:01:06 2026 GMT
Not After : Sep 25 04:01:06 2026 GMT
Subject: CN=d3ea1d149fed351ef31fb1b0ee74c15e7d62e367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:71:b8:a8:78:af:15:70:a3:bb:95:18:aa:
0d:2a:50:d5:42:57:06:a0:1a:62:e2:29:dc:04:93:
f5:e5:e0:07:eb:5b:2a:6b:f4:67:f1:c2:5e:7a:b8:
02:58:b6:df:70:4e:14:3e:35:f3:45:1b:5d:e4:f2:
89:a7:0b:f4:bf:ad:5f:21:71:be:64:d2:2d:11:ef:
ab:da:56:35:a3:b5:52:89:af:05:3f:5c:d3:ac:69:
fb:58:47:4b:17:cd:2f:e5:a5:71:43:46:72:ab:26:
23:fe:c3:b0:24:c1:14:f5:b2:61:7e:86:f5:bc:58:
10:ce:3f:54:88:6a:7c:a0:f8:17:5e:bb:24:b4:d4:
07:46:d3:59:4e:f4:d3:5f:18:6b:98:2a:49:fb:ae:
35:2b:d7:a7:85:6b:88:56:4a:ce:a8:2e:63:3e:e8:
e0:95:55:8c:ad:8f:af:0c:c3:f7:28:cc:28:6e:8e:
7f:4c:f3:ff:43:3d:d0:db:f4:1b:25:f4:9c:2f:d1:
1e:2d:cd:60:92:e5:58:17:44:e8:f2:b0:b9:f8:33:
bf:44:1a:26:25:32:fb:fd:ba:c8:19:4e:88:28:75:
e4:b9:c4:0f:36:98:9c:4d:36:25:34:5e:e0:08:42:
27:63:e5:e6:18:d6:e2:39:dd:dc:54:24:77:bf:d7:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:1D:14:9F:ED:35:1E:F3:1F:B1:B0:EE:74:C1:5E:7D:62:E3:67
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ee:89:00:ff:e3:48:31:d8:8c:17:57:f5:3a:7f:00:cc:7f:
8d:99:a2:4f:4b:82:df:01:af:92:af:cc:4e:13:43:9a:98:d0:
f0:27:1d:5a:59:79:b4:5c:78:78:2c:da:19:2c:08:78:5a:58:
76:ca:c2:aa:49:b1:d1:d8:b3:a2:3d:38:9d:3b:6c:ae:a0:1a:
0e:41:ba:5d:5d:48:fa:31:a7:06:37:ad:3f:67:a0:11:b6:f3:
56:d9:ed:d1:22:e7:1b:03:a5:be:3b:3d:fd:17:b2:ae:f8:09:
ee:7d:76:49:98:ac:e2:c6:17:7f:66:be:9d:83:0c:a4:8b:75:
c3:5e:b6:c1:69:61:65:09:03:51:17:4e:8c:00:9e:cb:0c:46:
97:4d:08:32:6e:db:d4:3a:dd:72:c3:2e:ce:dc:fd:5e:eb:6e:
b5:87:8d:38:37:4b:f3:48:7a:3d:21:06:ec:01:2c:58:54:5b:
21:40:06:d9:89:05:43:18:5c:cd:1b:0a:31:d0:94:24:5e:c5:
30:f6:74:3c:8c:f0:12:c6:84:ac:d8:6e:0d:6e:ea:70:c1:85:
0e:34:9c:c4:e7:b0:27:c1:b1:23:6b:a5:a5:14:c0:c0:db:c3:
0f:b8:f0:ab:57:ff:8d:41:bf:db:e3:ba:a8:6c:59:9b:cb:02:
89:58:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:16 2026 by rpki-client