Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
File: EjBb1f3nCLx3of0Ber46iDSOeAk.mft (raw, json)
Hash identifier: bJyG9zVlaixxKPOcxl+uaxcGAATJjFCTvdpuleMrCOU=
Subject key identifier: 84:72:42:FA:16:D9:97:9E:1C:B1:CB:81:1B:39:58:6E:D8:79:2E:71
Authority key identifier: 12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
Certificate issuer: /CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Certificate serial: 01A1A6384480B82535BCF3ECCC1BEAC4E3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
Manifest number: 95
Signing time: Wed 04 Nov 2026 11:01:07 +0000
Manifest this update: Wed 04 Nov 2026 11:01:07 +0000
Manifest next update: Thu 05 Nov 2026 11:01:07 +0000
Files and hashes: 1: EjBb1f3nCLx3of0Ber46iDSOeAk.crl (hash: eUJXk1IPnHSwXY1bSE9BPvxKUrSm+M1n3geHD72qsaQ=)
2: wOllorR3IEPsKMbcbB7blz6CaGs.roa (hash: 98dgbOx+V8DXxNAjtoueFdBj41vqBbkPousD5UNldes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:44:80:b8:25:35:bc:f3:ec:cc:1b:ea:c4:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Validity
Not Before: Nov 4 11:01:07 2026 GMT
Not After : Nov 5 11:01:07 2026 GMT
Subject: CN=847242fa16d9979e1cb1cb811b39586ed8792e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:a5:e0:a0:4a:08:a8:b2:5c:09:28:67:d5:
0a:4f:d0:44:3e:53:20:2c:9e:f6:40:7a:45:89:9c:
b2:da:e9:d8:15:90:72:75:7c:24:cd:9a:61:5d:6b:
b8:eb:82:e9:df:cb:8b:6f:19:d8:49:84:ef:a1:85:
0a:9f:77:65:7c:9b:00:be:47:42:d2:46:52:37:b7:
ee:e2:f1:69:34:c1:30:80:e7:77:61:f7:df:00:39:
8d:ca:fe:d4:69:b1:35:27:fb:78:c7:88:13:f9:ad:
0c:8a:f0:53:d0:de:c0:23:37:3b:a1:da:b2:ec:08:
ce:08:ba:e8:2c:ce:13:1d:9b:58:e2:d6:18:82:74:
d0:a7:b2:1b:d8:d5:e7:9e:c7:54:7b:61:e4:44:ae:
f7:06:03:f8:0b:29:90:a0:81:94:44:f6:47:0e:e0:
85:c8:f5:2b:ef:54:a8:56:be:8f:72:60:01:df:94:
93:e0:53:92:01:dd:33:ef:25:55:69:fd:8a:ef:eb:
b7:95:82:e0:c1:da:d1:50:f7:95:b2:db:76:f8:12:
69:c2:90:16:52:ce:ee:d9:27:8e:a8:cf:f8:39:e5:
ac:28:fa:17:26:f3:3f:84:a8:9a:02:96:e5:66:ff:
b8:75:5b:59:5a:04:39:8f:1a:d9:7e:3a:3c:cc:a8:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:42:FA:16:D9:97:9E:1C:B1:CB:81:1B:39:58:6E:D8:79:2E:71
X509v3 Authority Key Identifier:
keyid:12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:d1:a5:75:8a:55:6b:34:49:f6:33:1c:cb:63:ff:85:bd:
b7:a4:a5:81:cc:43:9c:ca:15:10:58:14:dc:b4:48:9a:92:2d:
8a:de:08:c6:3b:d9:36:fc:db:7c:6b:6e:5d:7f:27:99:98:09:
77:a4:82:90:ac:19:52:bb:e5:2b:25:52:dd:6f:88:56:57:42:
9f:47:71:38:3a:8b:2f:65:3a:01:a0:95:61:c0:5c:91:0f:92:
48:a6:51:74:9b:58:c7:db:a4:1f:94:cf:ef:0b:83:36:8e:cf:
4b:57:2f:6a:33:e1:2a:8d:82:f4:5c:53:fe:1e:99:50:64:96:
2c:85:38:fc:3b:50:ac:b3:43:79:1c:09:0c:3e:4d:52:03:aa:
75:01:67:85:87:7d:2b:7d:76:06:0c:be:35:ea:01:54:7a:aa:
1e:0a:54:25:4e:b6:07:50:7f:64:47:2f:28:d4:d1:17:89:80:
1b:fa:02:da:0f:a9:7d:56:af:31:c3:37:a2:72:22:69:74:02:
6b:72:64:f9:2d:68:68:fd:0b:a5:ff:1c:6d:24:e6:a8:d2:6b:
63:20:93:3a:bc:73:02:3f:a9:25:33:9b:ae:96:79:4b:78:0a:
76:a3:92:16:79:b8:a4:62:61:ff:cd:57:01:ae:b2:c7:68:3a:
98:7f:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:38:45 2026 by rpki-client