Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
File: ejn7sf-ySyJGNVzXvMwUiFY1acA.mft (raw, json)
Hash identifier: or7FWtz4o2akbrmmzpm7KBsr5s6z0El+EJxVdRgj0gg=
Subject key identifier: C7:AC:B4:C4:B1:AB:A8:52:9A:7A:21:FE:0F:C0:2D:FF:A2:02:69:2F
Authority key identifier: 7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
Certificate issuer: /CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Certificate serial: 019D26CCC27795A7C9B3B4437CC0C4961B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
Manifest number: F9
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: eUTnTAS_7nDmDImqNcgOGTu0Od4.roa (hash: ATvILIe7CG50+QhFqAYs1mVMS6f60iOBAKB9QocsmEE=)
2: ejn7sf-ySyJGNVzXvMwUiFY1acA.crl (hash: KiGmRzMTcAVEoxtWJcfGS1UhBxtQSwrARhp+GXRtIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c2:77:95:a7:c9:b3:b4:43:7c:c0:c4:96:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=c7acb4c4b1aba8529a7a21fe0fc02dffa202692f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:b9:86:2a:74:25:13:f7:7c:4f:09:91:b2:
b5:3a:de:00:22:23:ba:05:bd:40:a3:55:be:f3:f0:
54:c5:3e:e9:76:24:53:cd:29:ab:ba:8e:56:ac:1a:
76:ce:0f:68:21:82:d1:14:84:33:8b:40:2f:7a:33:
a3:be:d3:93:d1:a1:03:58:d1:04:81:3a:bb:ce:53:
04:a9:7d:3c:1d:3d:a6:2a:d9:be:85:89:59:3f:a7:
5a:61:ad:f9:d6:a6:8c:b2:26:dd:da:e0:f4:c9:78:
b5:81:85:6c:fa:bb:38:55:a2:f4:f5:d3:f7:4e:1d:
6a:88:3a:93:9d:03:e3:51:04:4f:a6:59:82:fc:ba:
83:b1:bf:7d:54:ff:dc:3f:4c:17:21:30:67:a5:47:
b3:cc:52:88:a7:60:7e:e7:f7:d9:3f:7c:a1:8a:74:
ca:d6:2a:da:5f:d4:0f:ca:3a:a1:87:a4:de:00:9d:
32:9e:8b:42:d5:41:06:af:ed:1f:ac:34:80:24:54:
15:8c:d8:b4:a1:b6:44:af:d9:62:82:ab:52:68:5a:
f2:f2:4f:0a:2b:84:89:2c:cc:b8:98:1c:fe:25:65:
8d:87:52:da:2a:c9:7a:3f:a9:28:02:de:c9:59:f0:
06:be:a6:e6:55:15:72:6f:dc:11:f2:50:2b:a2:21:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:B4:C4:B1:AB:A8:52:9A:7A:21:FE:0F:C0:2D:FF:A2:02:69:2F
X509v3 Authority Key Identifier:
keyid:7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b3:ff:d0:c6:d5:de:cb:0b:00:80:b0:88:58:dd:23:6f:7e:
d4:c3:66:fa:05:e3:50:64:54:5e:2f:95:f2:8b:9a:c4:d7:85:
94:93:ad:d7:81:0b:96:42:ab:67:2e:96:48:70:ae:4a:d2:16:
7b:36:57:73:76:1e:16:a4:76:53:e7:cc:d1:83:e0:5f:52:1a:
ce:9a:6b:75:37:ce:b3:0c:87:a0:cd:b6:40:c9:94:34:c6:cb:
f7:32:75:35:a2:55:0b:4a:af:4d:05:91:cf:71:69:06:99:ad:
90:3f:09:9a:d8:78:23:ff:d6:4b:fd:2f:ff:fc:d4:f9:5c:54:
3b:27:9a:5b:90:96:9b:6d:e9:28:3b:e9:37:8c:54:b1:d0:b6:
90:38:42:53:7e:d3:0f:dc:68:07:60:3f:9f:35:21:a4:7d:06:
20:16:92:77:67:ed:31:ee:1b:3f:54:9f:d6:22:c0:d8:09:8b:
d3:1e:bd:17:8c:f3:1c:f8:96:33:9f:72:57:0d:01:99:74:da:
23:9f:46:f7:73:22:c9:77:02:dc:b9:80:eb:96:4e:c8:7b:51:
9b:66:91:30:a8:db:aa:16:f6:30:84:6c:c4:7e:70:73:34:6d:
a8:33:76:36:66:58:b7:04:ba:de:9a:c4:10:3a:56:b1:d4:2d:
ff:9a:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:26 2026 by rpki-client