
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: geJUlg4I/ljaAf+OEeIgxDuKHfIQxBozud0yBg+vAL0=
Subject key identifier: 42:D8:3D:F3:A4:45:F4:F3:62:5F:16:6B:41:BD:21:14:3C:BC:0A:30
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01A0047097134A4DE61C29EA50A3E0206462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 08:01:22 +0000
Manifest this update: Sat 15 Aug 2026 08:01:22 +0000
Manifest next update: Sun 16 Aug 2026 08:01:22 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: /PM4Wg+95PoMkffkrOLwz0NyPWCmikZI62uMl+3Uk/w=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:70:97:13:4a:4d:e6:1c:29:ea:50:a3:e0:20:64:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Aug 15 08:01:22 2026 GMT
Not After : Aug 16 08:01:22 2026 GMT
Subject: CN=42d83df3a445f4f3625f166b41bd21143cbc0a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:9a:15:82:22:a7:fd:14:f5:e8:be:83:ef:
56:b1:97:91:e1:87:78:5f:07:60:e5:24:e4:81:67:
95:aa:d4:4d:6d:6b:f3:d6:fa:9d:62:12:31:71:c8:
fa:9d:1c:a0:a2:bb:33:dc:eb:b4:2f:8b:c1:78:bc:
eb:89:3a:93:66:35:ec:1a:e1:84:5d:2a:7c:55:d6:
c8:a7:89:22:a3:14:27:de:33:92:6b:0d:46:74:98:
90:ae:c0:54:e2:6f:0c:c8:a3:8b:50:42:0e:0f:0b:
77:a3:93:7f:a8:97:d0:74:ac:0e:9d:6d:de:f9:ec:
ca:a9:3e:4a:b4:63:36:27:6d:c3:20:9b:48:f6:d4:
ea:fb:72:ca:1e:d0:7b:92:84:61:8a:c6:76:7c:ac:
ec:b4:57:e0:50:df:15:2a:c9:ed:d8:8e:f6:67:78:
27:1a:ec:6b:ce:b7:d5:0b:5f:f0:c1:8b:1a:25:ed:
4a:bd:ad:83:f5:4d:0e:ff:51:44:52:82:d0:d2:3b:
49:f1:e4:97:c3:2c:53:01:65:f5:71:9d:4f:cb:d7:
30:1a:0d:04:46:67:d5:d8:a9:a0:d6:2a:9a:80:fa:
e9:07:22:5f:71:fb:7f:2d:8c:90:28:c2:70:c5:19:
6c:41:0f:34:d9:2b:91:c9:3b:82:f4:b8:a7:e1:96:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:3D:F3:A4:45:F4:F3:62:5F:16:6B:41:BD:21:14:3C:BC:0A:30
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f3:79:3f:eb:2b:27:36:6e:37:9f:ee:4a:07:f3:99:cb:9c:
3f:5d:b1:2e:f5:28:0c:ad:f6:5b:d7:fe:6a:32:02:0c:4c:7c:
fc:29:84:8b:e2:e7:65:19:b7:33:6d:aa:c6:7f:5f:3f:fb:0a:
6d:3d:a0:40:81:7f:05:32:1c:ec:67:46:dd:55:7e:85:e8:ee:
a4:47:4e:7b:46:14:c2:71:c9:34:2b:ce:38:e7:8e:13:eb:bd:
a7:ff:9f:15:71:06:14:31:37:df:9f:59:c5:f4:42:15:5c:4a:
44:76:4b:72:26:3b:16:70:81:5c:c6:ec:c2:fe:32:a7:e5:91:
79:7f:21:5d:4c:fa:02:b7:77:c8:0e:6c:e2:07:25:23:ea:48:
ce:5a:bd:86:e6:f0:a3:71:c5:52:3d:af:d9:b1:38:04:95:b2:
56:65:23:a3:c3:a8:72:33:0d:25:40:dc:10:21:41:55:cf:c8:
41:ca:6f:7e:70:af:3c:eb:22:76:52:e6:06:ac:32:f3:2a:6a:
89:4a:39:8b:58:af:cf:1e:3e:17:2f:d6:bf:2d:65:a6:f6:08:
00:b7:b2:a4:5b:02:7e:38:97:67:e2:46:a7:93:48:ab:a0:7b:
ae:7b:a4:64:9b:aa:9a:26:12:13:95:b4:a5:9c:2c:c1:e7:91:
bd:a1:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:11:25 2026 by rpki-client