Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: TDmpHe/w4mLsmDy+54b1RkhtE4KUXOPQHWapgSClzdY=
Subject key identifier: B9:28:1E:CC:96:82:B3:70:42:E0:15:38:A2:A8:76:D9:2F:F8:5E:2B
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019F91DAB1680D97AEE04C85FD8FF326D1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0F74
Signing time: Fri 24 Jul 2026 02:00:56 +0000
Manifest this update: Fri 24 Jul 2026 02:00:56 +0000
Manifest next update: Sat 25 Jul 2026 02:00:56 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: pVSaXhWz6sLD6IEW8wbl4GE56gvCR1kjPGe9BZ3Plgc=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b1:68:0d:97:ae:e0:4c:85:fd:8f:f3:26:d1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jul 24 02:00:56 2026 GMT
Not After : Jul 25 02:00:56 2026 GMT
Subject: CN=b9281ecc9682b37042e01538a2a876d92ff85e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:98:b8:c8:a1:c9:83:06:68:db:32:1f:ed:
8d:8e:e4:a4:f2:e5:63:3e:9b:b1:2c:d8:74:40:26:
8c:18:00:db:3c:27:ae:7e:69:90:7d:1c:35:ab:a6:
7b:f5:ae:6b:cc:de:57:d1:61:e4:17:31:53:a4:d2:
ae:f2:2e:e8:90:83:62:20:33:97:a7:b1:59:6f:20:
26:ad:c7:8b:f6:0c:0c:7d:97:73:67:2e:82:4b:64:
47:b2:c5:94:85:89:41:90:49:8f:72:cc:4f:5a:0a:
76:e3:32:2e:fb:2e:87:fc:ff:67:3e:f3:0b:e6:fa:
d4:ba:4d:ea:e0:e1:34:83:e8:d7:12:c9:bf:a7:48:
85:2a:32:8a:76:f9:0d:e8:e5:b1:ce:f0:55:10:80:
60:71:d2:9c:60:84:3e:cd:5d:cb:43:37:05:ac:cd:
fb:31:42:dd:c7:58:a9:61:e4:e9:a2:b0:57:82:50:
af:51:8c:31:b7:8b:31:4b:51:c5:21:67:48:d4:6d:
0d:21:9e:e7:fb:2f:11:32:10:17:13:8e:13:51:7b:
c1:7a:96:0b:3e:81:b0:05:6c:38:d5:74:19:d4:45:
b4:01:96:48:32:c9:e7:32:ee:f9:9e:aa:d2:0b:7d:
bd:99:bb:c2:db:07:04:ee:c3:8b:bd:e6:dc:b8:35:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:1E:CC:96:82:B3:70:42:E0:15:38:A2:A8:76:D9:2F:F8:5E:2B
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:90:5e:e2:66:15:0b:3c:02:b4:d5:6e:17:48:9d:02:f6:
2d:56:e4:f7:25:04:c4:e2:bc:c7:87:24:53:3b:50:5e:e0:c6:
4a:ad:6c:28:7b:91:de:f4:57:ce:e7:0e:a5:20:67:44:2e:f9:
c0:21:07:ea:17:94:3d:ed:73:0d:91:2b:5f:26:b5:92:13:b9:
ad:6e:40:34:7c:33:eb:d8:29:f5:8f:e6:8f:fa:86:f8:e3:7a:
99:1d:ab:b5:25:f8:8a:d6:6e:77:f7:ee:93:74:df:03:25:26:
4b:7a:0a:b5:b7:ad:71:f7:71:82:b2:46:0a:79:79:4d:47:c4:
18:40:29:2d:26:36:4d:2c:9d:58:21:b0:6e:11:b3:fc:48:c2:
c1:0b:b3:8b:0d:37:df:33:65:d9:c2:05:03:68:45:79:4f:e7:
6d:86:80:13:dc:0d:19:f1:52:42:05:86:5d:68:f7:f7:9a:19:
4d:e6:a9:8a:cb:fa:0a:82:f1:2a:47:c0:97:aa:48:a0:60:a4:
4b:92:80:25:09:ed:5f:3e:9d:21:19:1a:79:ab:f8:c4:15:cc:
d7:af:d4:75:3a:17:f6:b5:6d:bb:27:27:09:6f:d1:fb:3b:82:
5f:fb:2b:29:12:cd:40:2d:af:d3:f3:0e:5a:99:cb:a3:31:c9:
7d:a4:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:40 2026 by rpki-client