Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
File: EjBb1f3nCLx3of0Ber46iDSOeAk.mft (raw, json)
Hash identifier: 5242WG9EaBw657tKD12TyPVYoL3Qz3mAkx/LX/oGRI0=
Subject key identifier: 2F:C4:FC:CE:49:DE:01:0C:93:75:A7:10:BC:69:C5:38:56:D1:07:F0
Authority key identifier: 12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
Certificate issuer: /CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Certificate serial: 01A08C43F6988E5A77E7A50BADC0CFC56B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
Manifest number: 03
Signing time: Thu 10 Sep 2026 17:00:59 +0000
Manifest this update: Thu 10 Sep 2026 17:00:59 +0000
Manifest next update: Fri 11 Sep 2026 17:00:59 +0000
Files and hashes: 1: EjBb1f3nCLx3of0Ber46iDSOeAk.crl (hash: 8ZYHSqztsMEegooTYOH7R0Y24RD8/Qg1S9wpRsqXEoA=)
2: wOllorR3IEPsKMbcbB7blz6CaGs.roa (hash: 98dgbOx+V8DXxNAjtoueFdBj41vqBbkPousD5UNldes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:f6:98:8e:5a:77:e7:a5:0b:ad:c0:cf:c5:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12305bd5fde708bc77a1fd017abe3a88348e7809
Validity
Not Before: Sep 10 17:00:59 2026 GMT
Not After : Sep 11 17:00:59 2026 GMT
Subject: CN=2fc4fcce49de010c9375a710bc69c53856d107f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:24:bf:b7:66:1b:56:a4:ac:84:2b:f9:7d:
a8:a4:16:97:ad:0b:25:25:48:bc:2a:1b:8f:0e:5b:
06:08:71:b2:88:bc:0e:20:8f:4b:79:f1:8b:9e:03:
8e:fd:e4:74:d8:31:93:b4:ed:be:d2:af:a4:b2:67:
00:ba:29:6f:44:26:e0:e7:e1:59:1c:f1:c6:68:2b:
d9:26:33:cc:53:ae:31:4f:07:3a:b0:ff:aa:ef:22:
66:1d:df:57:0a:45:8e:c0:ea:ed:a3:57:f9:e0:a4:
72:ad:1b:be:68:f0:5d:0e:8f:af:78:e2:8a:8f:ba:
ae:eb:8d:36:3d:55:e1:27:78:56:49:56:59:58:fe:
40:ff:24:bc:bf:42:ea:dc:7e:73:8b:dc:a3:2e:3c:
79:7d:35:2f:07:57:9b:39:4b:39:a7:79:22:73:e0:
e5:92:8d:5b:41:5e:84:d1:a4:ec:bf:59:55:2c:fc:
5a:0b:1b:b9:fd:8f:58:95:00:67:81:ea:4a:98:4d:
83:fa:87:33:b1:b2:d6:16:00:8f:d8:0a:a3:15:da:
b2:8a:17:81:1c:57:0d:cf:d5:60:be:32:37:5b:1a:
d7:bc:66:c8:c7:ba:bf:7b:53:87:b7:19:c4:9c:66:
c7:e0:c3:dc:ac:c5:96:d4:a7:60:5b:6f:cc:e6:20:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:FC:CE:49:DE:01:0C:93:75:A7:10:BC:69:C5:38:56:D1:07:F0
X509v3 Authority Key Identifier:
keyid:12:30:5B:D5:FD:E7:08:BC:77:A1:FD:01:7A:BE:3A:88:34:8E:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjBb1f3nCLx3of0Ber46iDSOeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9f5a3b-7112-4ab3-ac38-8ed4049304c4/1/EjBb1f3nCLx3of0Ber46iDSOeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:ca:db:30:38:0d:8f:a7:f2:bd:6a:16:d9:ef:9e:de:44:
14:3e:8c:e6:68:af:6a:c4:ae:a2:b9:79:e6:40:60:a2:d6:bd:
a1:22:e2:4b:2e:ee:c5:87:01:ee:fa:ba:b3:2d:cf:79:85:10:
13:bd:c0:ef:b4:ca:05:12:32:fa:e8:3f:d5:75:b7:4c:db:8a:
b9:6d:a8:c2:09:41:53:25:29:56:10:a7:5d:76:79:45:09:17:
4e:9e:c6:2c:07:3c:be:90:aa:66:6e:a9:57:39:42:90:78:79:
4c:0d:fb:dd:6b:b1:2e:e3:c2:a8:77:63:f6:4a:27:59:61:cc:
a4:1d:0c:d8:0c:c5:88:4f:58:8b:7d:51:f0:3a:f5:56:ab:1a:
9f:fb:40:ff:fb:de:dd:18:9f:02:ca:c5:3f:91:9c:72:4b:6a:
0c:31:88:78:d5:d2:ba:56:bf:bc:23:22:16:62:46:2a:7f:38:
7c:ef:03:7f:6e:be:2f:b5:4b:64:b1:17:10:71:84:3f:5d:c8:
8b:f6:56:23:f6:b6:f4:3f:14:5c:4f:ce:53:dc:f9:b3:78:79:
df:bb:b9:60:38:71:f9:9e:76:49:ed:0c:d8:63:99:e8:41:15:
0f:f4:e9:ea:a3:bc:55:15:3e:9f:16:02:24:df:a1:1f:91:c7:
e3:98:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:30:05 2026 by rpki-client