Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: ukSOD7agF+m5zKpoBihZr1evTqPbMmS8rLy/4mx7gOc=
Subject key identifier: CD:5F:E6:94:D1:B8:2C:4E:77:50:67:CC:5A:66:5D:FA:C0:63:B4:1D
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019D27DF61DC65F02204CC550284CE80104A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0E34
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: qZexmTjTtJk/b7erCiGiDXZqFlBvQA2tWwgWhVOL9Gg=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:61:dc:65:f0:22:04:cc:55:02:84:ce:80:10:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=cd5fe694d1b82c4e775067cc5a665dfac063b41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:43:b0:5f:3d:d3:26:90:2e:a7:67:df:45:
33:89:36:20:6a:ac:ed:99:94:fd:51:1b:9a:76:f6:
07:5c:42:f9:34:34:57:4e:b1:ee:31:0f:71:15:ff:
fd:c9:92:ba:4e:62:88:ca:db:d6:4c:2f:3f:56:3c:
71:63:6d:2f:4c:3a:e1:61:c9:0b:77:e2:9c:98:09:
85:c3:50:7e:34:56:b6:39:93:1b:98:a1:82:b2:06:
b0:ae:96:ed:02:88:b8:8c:f0:93:57:15:63:45:40:
82:ec:bc:dd:77:b1:c9:10:dd:72:62:b4:ba:b9:aa:
b2:d7:8a:ec:ed:c6:d1:4f:37:b4:df:ec:bb:39:f0:
80:bd:c6:7a:19:34:90:69:90:67:99:13:ca:00:63:
22:4a:db:16:d2:8c:f6:dc:1f:e2:2b:07:9a:02:72:
25:09:0f:34:d7:73:af:c3:af:a1:67:2f:47:6e:9c:
ec:bf:60:ad:7d:32:90:f9:94:0b:02:a5:08:c3:6b:
06:da:22:12:47:21:ae:9f:45:72:f4:59:5d:48:09:
05:d6:fc:47:96:7f:d5:7f:65:4d:e8:f9:b3:a3:28:
d0:f6:f5:e1:71:2e:58:77:bb:9e:21:03:1f:90:5b:
22:29:f5:85:5e:6c:ec:75:f6:8f:b2:16:ec:ff:83:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5F:E6:94:D1:B8:2C:4E:77:50:67:CC:5A:66:5D:FA:C0:63:B4:1D
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dc:49:0a:50:2a:52:39:44:b1:d3:ed:f3:96:b5:68:70:d3:
c3:00:0a:b1:6f:6e:d0:3c:1d:49:84:97:95:cb:8d:49:52:7e:
4f:42:e7:a1:de:99:1d:32:4b:9d:df:9c:1e:01:d7:b2:41:2b:
b3:ac:78:6d:0a:8c:cc:ac:76:0b:7e:06:45:3c:e3:60:ac:a9:
61:66:c9:6c:d7:d6:4d:83:2e:3e:cb:b3:2a:59:16:ee:ef:4f:
98:86:87:07:d2:79:37:a5:97:f4:dc:b7:31:88:12:0f:f2:0a:
4f:5e:0f:59:0a:c8:c3:5a:0f:b7:b5:db:fe:21:56:1f:80:26:
e6:61:7d:a0:57:cc:cf:1a:05:e2:9f:25:fd:78:cb:b5:ca:df:
d5:24:55:af:bd:7b:35:cd:5d:1d:6d:50:cc:b3:4b:a5:29:52:
3e:5b:c0:b3:8d:f5:d7:73:26:9c:f4:b8:bc:67:ad:0b:94:4a:
a0:58:5e:09:e9:a7:e1:d8:f2:d4:4c:19:08:76:cb:68:9d:2c:
73:aa:f5:09:65:eb:72:9b:86:f2:0a:75:87:4a:3e:12:39:d0:
13:26:95:38:f8:03:23:5f:a8:53:1b:41:b9:a4:83:52:94:da:
78:66:4b:d9:fd:37:29:d3:6f:94:6b:84:dc:b4:a3:49:48:92:
8b:35:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:22 2026 by rpki-client