
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: uW31fHLSHnJ0WxWWxS7Qm1E3GsP4/i6PSTo3KWaid+s=
Subject key identifier: 31:EC:D3:30:FA:51:59:E1:29:9D:8E:BD:36:98:31:F4:32:90:29:E7
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019D39E551E2132614672C14B761775FE9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:23 +0000
Manifest this update: Sun 29 Mar 2026 14:00:23 +0000
Manifest next update: Mon 30 Mar 2026 14:00:23 +0000
Files and hashes: 1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: IfXHnzsf1f216BxuTuzhjs9JZUKDqGFsbe5wNk5rlqs=)
7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:51:e2:13:26:14:67:2c:14:b7:61:77:5f:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Mar 29 14:00:23 2026 GMT
Not After : Mar 30 14:00:23 2026 GMT
Subject: CN=31ecd330fa5159e1299d8ebd369831f4329029e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:a3:c8:79:ea:f0:f9:d1:a6:72:eb:6d:bd:
08:21:91:68:f2:af:e9:ef:ed:ea:c0:da:56:39:d3:
7e:52:b5:97:63:21:40:76:c3:4d:a1:21:da:d8:93:
9b:0c:8a:ef:21:03:1a:33:f0:c9:76:aa:a9:59:3d:
98:d5:5d:8b:e3:55:e9:10:c2:a2:ef:e1:2e:d1:f1:
4d:93:e4:81:a2:96:3d:e8:8b:bb:34:9b:da:b3:60:
9a:c9:09:c7:52:33:56:95:3f:b5:9b:68:12:e7:df:
76:7a:7d:66:96:95:69:c8:b8:98:96:45:7e:1c:5d:
7e:29:ba:d9:86:1c:2c:30:9b:bb:f7:f0:3a:7a:0b:
c3:aa:f3:b2:06:01:59:a7:50:b4:da:c4:76:5e:8f:
58:0c:be:1e:17:b4:5b:5f:99:a7:78:be:89:92:b8:
2b:8b:b1:45:a3:91:f2:a4:f0:15:99:7a:6d:3d:d3:
34:01:41:99:02:6e:f3:ec:61:fe:14:c5:4b:ef:e6:
b6:2a:5b:16:5a:2c:00:c0:a1:a3:02:57:a3:7f:91:
66:70:9f:72:f2:ef:52:fc:91:f6:4f:c0:04:53:56:
8e:ba:90:06:94:83:d4:11:d5:6f:c2:7a:26:79:9d:
6f:1a:a3:fe:8d:9a:56:84:f0:17:7d:71:cf:b2:4a:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:D3:30:FA:51:59:E1:29:9D:8E:BD:36:98:31:F4:32:90:29:E7
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b2:ce:ac:6f:48:d2:d8:b4:f0:70:0c:0d:b2:30:2f:23:aa:
6f:5c:dd:c3:0b:42:30:3a:b9:02:c0:93:54:2e:23:e7:6a:76:
11:ae:84:ea:78:6b:9c:56:be:4a:8d:c9:42:cb:37:41:6a:18:
22:c6:bd:69:fe:db:98:5f:95:6d:b2:bd:77:f1:40:d6:1e:a7:
0f:3f:94:8d:1d:37:aa:4c:44:86:33:fd:57:d4:af:48:1f:c8:
eb:f3:13:ac:88:13:f6:98:18:d4:8b:51:26:c6:84:e5:86:bf:
b4:01:c4:c5:d5:43:ee:e2:27:f5:3f:e6:32:06:aa:9a:ba:37:
14:9a:ff:c1:24:4a:41:a0:f5:94:c1:67:c4:82:38:c3:ea:ff:
cc:92:e7:0a:50:8f:57:31:2d:24:9b:c5:01:23:60:16:a4:eb:
93:48:c8:3c:82:40:b3:72:19:e2:6b:77:09:73:c4:ef:19:ce:
08:7a:cf:45:81:af:d3:b2:47:c6:bf:04:99:75:17:1a:c5:69:
77:f0:17:6f:ea:94:93:fa:c1:92:ec:c6:e0:80:ae:ab:d8:8a:
64:1a:1e:6f:a7:1c:9c:2c:1e:4b:7a:8a:76:e8:52:8e:e1:c1:
4d:9b:8a:45:e9:21:c1:ac:0c:3c:c2:9c:4e:47:91:6b:67:8a:
b8:29:54:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VHiEyYUZywUt2F3X+nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjYwMzI5MTQwMDIzWhcNMjYwMzMwMTQwMDIzWjAzMTEwLwYDVQQD
EygzMWVjZDMzMGZhNTE1OWUxMjk5ZDhlYmQzNjk4MzFmNDMyOTAyOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qajyHnq8PnRpnLrbb0IIZFo8q/p
7+3qwNpWOdN+UrWXYyFAdsNNoSHa2JObDIrvIQMaM/DJdqqpWT2Y1V2L41XpEMKi
7+Eu0fFNk+SBopY96Iu7NJvas2CayQnHUjNWlT+1m2gS5992en1mlpVpyLiYlkV+
HF1+KbrZhhwsMJu79/A6egvDqvOyBgFZp1C02sR2Xo9YDL4eF7RbX5mneL6Jkrgr
i7FFo5HypPAVmXptPdM0AUGZAm7z7GH+FMVL7+a2KlsWWiwAwKGjAlejf5FmcJ9y
8u9S/JH2T8AEU1aOupAGlIPUEdVvwnomeZ1vGqP+jZpWhPAXfXHPskogFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHs0zD6UVnhKZ2OvTaYMfQykCnnMB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbLOrG9I
0ti08HAMDbIwLyOqb1zdwwtCMDq5AsCTVC4j52p2Ea6E6nhrnFa+So3JQss3QWoY
Isa9af7bmF+VbbK9d/FA1h6nDz+UjR03qkxEhjP9V9SvSB/I6/MTrIgT9pgY1ItR
JsaE5Ya/tAHExdVD7uIn9T/mMgaqmro3FJr/wSRKQaD1lMFnxII4w+r/zJLnClCP
VzEtJJvFASNgFqTrk0jIPIJAs3IZ4mt3CXPE7xnOCHrPRYGv07JHxr8EmXUXGsVp
d/AXb+qUk/rBkuzG4ICuq9iKZBoeb6ccnCweS3qKduhSjuHBTZuKRekhwawMPMKc
TkeRa2eKuClUxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:00 2026 by rpki-client