Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: bKCWQSf4nFX2HVOJBkkgZKAt6mh3vn2ZxiKtAN/Nojg=
Subject key identifier: F3:8E:2E:81:CF:FF:D8:D6:6B:52:80:36:B9:27:33:84:B8:F7:0D:38
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01A1562F3E2CBB57E515D1DA286181398041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 22:01:38 +0000
Manifest this update: Mon 19 Oct 2026 22:01:38 +0000
Manifest next update: Tue 20 Oct 2026 22:01:38 +0000
Files and hashes: 1: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: LvSyZUzibguBftd05+VAmfJmNul5zEFXhyynBsTkFvI=)
2: IyEPa2Wo8-kP076L1HjykAM4k1I.roa (hash: e98pvgSClRZwcOYUVJYvqg5/jfbNk7qXW3cczc491nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:3e:2c:bb:57:e5:15:d1:da:28:61:81:39:80:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Oct 19 22:01:38 2026 GMT
Not After : Oct 20 22:01:38 2026 GMT
Subject: CN=f38e2e81cfffd8d66b528036b9273384b8f70d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:be:f1:cf:4e:3e:44:62:5a:42:cd:54:90:
ae:14:7e:6a:a2:e6:01:e5:a5:c3:b5:8a:4a:3b:fa:
67:26:f3:9a:39:b7:51:0f:64:27:e8:a6:9f:09:98:
cf:af:0e:54:0f:05:9f:b3:6c:56:31:bd:42:8f:6f:
d8:13:4d:b3:2b:9f:37:30:7c:df:c8:99:98:e8:a7:
dd:bc:76:e3:16:d8:06:7e:46:17:26:19:ba:61:b7:
ba:83:b1:5e:53:7a:57:0b:5d:d7:23:96:b1:0a:3d:
cd:3a:bb:8d:94:02:43:4d:7b:d3:99:c2:90:45:4a:
43:0b:09:5b:cb:04:6b:53:8b:09:37:5b:3f:73:64:
e5:28:01:a2:5a:3d:59:93:89:d5:8a:77:e8:25:e5:
49:f2:ee:aa:81:d4:23:c3:59:e8:a3:b4:dd:4f:0c:
5f:f4:6a:bf:67:93:75:8a:70:b8:a8:ee:da:3a:4a:
03:9f:17:b2:c5:f2:ca:87:71:65:40:13:35:23:b9:
a9:f6:01:bf:e7:08:34:61:11:0c:f7:07:69:0f:52:
2d:87:29:57:a6:5a:1a:37:8f:dc:18:17:6c:31:a4:
31:82:b0:29:fa:76:87:13:41:a3:4b:bc:f9:16:29:
a3:fc:a3:75:b6:ef:a6:55:e4:19:d6:d7:24:a0:32:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:2E:81:CF:FF:D8:D6:6B:52:80:36:B9:27:33:84:B8:F7:0D:38
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:53:a2:c6:99:43:ed:3c:c1:25:a1:63:5a:bb:15:b5:16:45:
78:11:5a:9e:b3:ce:34:5a:74:ab:00:a7:71:98:9d:fa:25:50:
f1:c2:a6:f6:b1:a9:9e:f7:c5:1d:59:82:8f:7f:c8:0e:9a:78:
c5:18:e4:3e:36:62:de:5d:b4:64:46:ec:5d:c6:c3:1a:81:88:
5c:80:72:83:8e:b9:56:6c:e6:83:68:77:7c:97:2e:91:2d:3e:
ef:63:da:74:b9:9d:8b:86:a2:f3:f9:99:60:35:53:be:7f:42:
07:ba:b1:37:60:e5:3e:23:fd:e7:41:6b:bf:d6:8b:b0:f0:72:
d9:13:6c:45:3c:74:4d:4a:2e:ea:1d:cc:32:5f:f8:ac:7c:b8:
c5:7d:41:70:94:3f:44:c0:da:d8:f9:a8:02:ee:a7:36:47:69:
bb:76:84:4a:67:c5:12:36:29:5f:41:df:be:c7:c2:58:43:6b:
ba:34:6b:04:83:37:3e:fe:ef:3d:e6:6a:04:a5:1a:69:a2:1e:
be:d7:84:26:ff:3a:1d:6a:c5:e2:d6:8d:d6:67:e1:37:86:1c:
8d:92:f1:e5:ac:49:1e:82:73:d3:57:40:82:5b:78:eb:3f:b7:
b5:72:20:05:0a:2c:d1:13:a5:82:53:37:c1:a5:d1:af:f1:37:
26:f7:3e:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWLz4su1flFdHaKGGBOYBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4
OWZhYWYwHhcNMjYxMDE5MjIwMTM4WhcNMjYxMDIwMjIwMTM4WjAzMTEwLwYDVQQD
EyhmMzhlMmU4MWNmZmZkOGQ2NmI1MjgwMzZiOTI3MzM4NGI4ZjcwZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5++8c9OPkRiWkLNVJCuFH5qouYB
5aXDtYpKO/pnJvOaObdRD2Qn6KafCZjPrw5UDwWfs2xWMb1Cj2/YE02zK583MHzf
yJmY6KfdvHbjFtgGfkYXJhm6Ybe6g7FeU3pXC13XI5axCj3NOruNlAJDTXvTmcKQ
RUpDCwlbywRrU4sJN1s/c2TlKAGiWj1Zk4nVinfoJeVJ8u6qgdQjw1noo7TdTwxf
9Gq/Z5N1inC4qO7aOkoDnxeyxfLKh3FlQBM1I7mp9gG/5wg0YREM9wdpD1IthylX
ploaN4/cGBdsMaQxgrAp+naHE0GjS7z5Fimj/KN1tu+mVeQZ1tckoDI/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOOLoHP/9jWa1KANrknM4S49w04MB8GA1UdIwQY
MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt
MWIxOTIzNzFmNDQyLzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy
LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVOixplD
7TzBJaFjWrsVtRZFeBFanrPONFp0qwCncZid+iVQ8cKm9rGpnvfFHVmCj3/IDpp4
xRjkPjZi3l20ZEbsXcbDGoGIXIByg465Vmzmg2h3fJcukS0+72PadLmdi4ai8/mZ
YDVTvn9CB7qxN2DlPiP950Frv9aLsPBy2RNsRTx0TUou6h3MMl/4rHy4xX1BcJQ/
RMDa2PmoAu6nNkdpu3aESmfFEjYpX0HfvsfCWENrujRrBIM3Pv7vPeZqBKUaaaIe
vteEJv86HWrF4taN1mfhN4YcjZLx5axJHoJz01dAglt46z+3tXIgBQos0ROlglM3
waXRr/E3Jvc+KA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:28:57 2026 by rpki-client