Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: PV0jpy5XxHZSvdWYlRp1ARXmLwv8pBPc81U/So+6cH4=
Subject key identifier: EC:35:06:39:24:1E:68:E3:22:19:71:FE:88:53:F4:C6:84:93:0C:DB
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 01A10693DF5D69FCEDA84A9D31159451A700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 11:01:56 +0000
Manifest this update: Sun 04 Oct 2026 11:01:56 +0000
Manifest next update: Mon 05 Oct 2026 11:01:56 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: rWkwYLoct0kFPp4hesshBYkXI71yPG9B0KYiBRVPzlk=)
2: wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa (hash: zwkwV/qCyW+dPqYTHQuCJTe82tiBbsC4rDyFqVjw0RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:df:5d:69:fc:ed:a8:4a:9d:31:15:94:51:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Oct 4 11:01:56 2026 GMT
Not After : Oct 5 11:01:56 2026 GMT
Subject: CN=ec350639241e68e3221971fe8853f4c684930cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:51:98:8c:30:37:3b:60:e2:cd:2e:97:c0:
ff:f4:60:86:ef:5a:46:fe:2a:3d:66:f1:4d:97:63:
ab:2c:f1:9e:2b:b9:51:07:1b:85:23:49:14:46:4e:
6c:53:e6:d0:01:2c:f2:4e:a6:03:1f:8b:1b:27:0c:
36:3e:20:43:bb:bc:b6:53:08:50:2d:3b:5d:90:d3:
ee:3a:ed:87:86:4a:4e:f3:08:5b:98:fd:f3:4d:88:
14:ab:06:e8:8d:76:d5:9b:e8:c9:0b:f2:6a:28:83:
85:28:7a:99:e1:62:18:c3:1a:87:02:d2:95:3f:86:
6e:5f:b7:b6:3b:b3:68:71:2b:18:fb:58:99:5a:9c:
07:2c:16:86:cf:13:40:77:ab:41:26:3c:79:f2:98:
29:f3:15:cf:c6:7c:d0:75:fc:08:bd:00:a5:e4:ed:
9e:30:95:94:9d:35:49:ee:91:6d:32:80:79:46:5a:
a3:92:7d:e4:6f:2c:14:25:ab:b3:3f:de:d0:ca:a3:
dd:fe:aa:92:fd:18:a4:6b:d5:eb:fe:3f:0d:ca:ea:
2d:ed:c0:45:b5:c1:3e:6c:54:51:c4:67:7e:14:0c:
69:1e:8a:5b:4c:e3:ae:db:f4:80:f2:52:a4:41:53:
e5:18:68:10:53:63:70:92:da:24:b4:ad:ed:d2:c0:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:06:39:24:1E:68:E3:22:19:71:FE:88:53:F4:C6:84:93:0C:DB
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:49:39:50:01:29:10:bd:56:d4:48:61:67:c7:72:2b:4f:4f:
4c:32:31:0a:e5:d6:c4:91:60:0d:dd:65:99:ea:46:3b:fd:32:
cb:49:aa:f6:0a:b0:8d:1f:61:e9:52:17:7b:3f:54:c7:ad:cb:
8f:0f:50:20:5a:dc:b3:ce:73:7c:6c:0f:8b:7c:c4:1a:5f:c1:
6b:57:e4:6f:98:24:32:70:c2:5f:3f:b2:6d:17:d9:83:23:83:
fb:59:4c:b2:0f:0b:65:32:f0:72:ec:10:40:45:e4:2e:f7:fc:
26:f7:0f:e8:96:10:25:ba:1f:52:03:79:f0:01:22:fe:5f:bc:
b3:2f:96:03:c8:98:40:d3:2f:09:72:10:6e:6d:ea:d8:b2:95:
1e:08:71:ff:14:41:a7:72:41:aa:ff:82:a2:7a:26:16:86:15:
97:8e:54:41:de:11:1c:67:61:7d:c5:53:c4:d4:06:88:7c:e9:
a4:05:b0:50:97:e3:d6:53:51:03:ac:3a:10:65:d2:d2:4f:29:
3e:31:52:6a:0f:bd:e3:5e:17:ad:99:75:b9:7f:b1:df:42:fb:
be:8c:63:d3:4d:1f:e3:24:53:cf:20:8e:e9:4d:68:2e:f1:ec:
ef:6e:90:91:e2:29:ed:b1:ac:e8:64:05:86:d3:a0:94:3d:09:
0a:11:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:25:26 2026 by rpki-client