Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: tmleXAC0/zWicMu/ah9epEw95jIb616YpB3NJHbkMoc=
Subject key identifier: ED:20:D0:57:5F:59:37:C7:E2:B9:DD:ED:3E:AB:B7:0A:30:38:FA:72
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019E3184AB5EA6E9C97E1381657C784B52DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 16:00:38 +0000
Manifest this update: Sat 16 May 2026 16:00:38 +0000
Manifest next update: Sun 17 May 2026 16:00:38 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: YZ5OBKgtrwnLoXdegIAUaepryO5n1ql53I/rHhB5hco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ab:5e:a6:e9:c9:7e:13:81:65:7c:78:4b:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: May 16 16:00:38 2026 GMT
Not After : May 17 16:00:38 2026 GMT
Subject: CN=ed20d0575f5937c7e2b9dded3eabb70a3038fa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:2a:7c:4f:0c:3d:3d:8e:6c:65:f1:11:55:
2e:d7:60:50:21:ca:0d:05:a5:d7:3c:58:c9:b8:60:
28:1b:56:25:29:27:21:2d:85:0e:c2:e4:19:6d:5f:
9e:2d:aa:bc:03:b1:79:13:b0:15:82:60:3a:28:bc:
34:6f:4d:3d:af:b6:d3:2d:c6:80:90:69:51:52:2c:
86:72:92:0c:74:2d:b2:17:7a:f8:33:02:b0:22:61:
e1:a6:f1:6c:74:ba:da:e2:11:c3:61:54:7b:b4:a1:
d5:3b:b2:02:8f:57:bb:3e:ec:6b:8a:90:72:aa:20:
1c:b1:78:f5:54:6f:ed:68:d3:e7:9f:7f:c5:ee:b3:
d3:fb:d9:98:47:3a:9d:08:45:00:dc:e7:b2:92:9f:
30:da:29:5b:18:4a:d7:e6:87:8b:f8:e4:22:3b:fd:
ba:b6:df:8a:fb:36:11:7c:2d:7f:0c:66:b8:46:29:
4f:b8:c4:72:f0:e9:46:a3:b8:c2:c7:84:05:17:ae:
3e:fe:56:86:b3:27:8f:83:3d:33:7c:ba:22:32:36:
d8:2c:83:fd:74:21:70:70:a5:93:dc:0d:67:b0:c5:
06:6b:e2:f9:05:22:ef:72:ff:ca:6d:cf:cc:14:08:
78:de:23:25:61:48:65:de:c0:bd:56:a9:9d:c4:3c:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:20:D0:57:5F:59:37:C7:E2:B9:DD:ED:3E:AB:B7:0A:30:38:FA:72
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:52:7f:3b:67:2a:30:f5:7d:30:82:87:b3:26:ee:d8:a2:ba:
93:6e:85:40:0a:5e:4f:09:ee:c3:ee:40:c9:d7:19:96:2e:58:
45:58:eb:47:c2:7b:90:20:63:a8:9c:b8:c0:dd:f4:40:53:2e:
14:b5:84:13:54:82:a5:db:78:32:b5:90:3c:b0:23:9b:a9:d0:
11:af:32:6d:8f:f7:1a:54:1c:ab:f2:7c:81:02:3f:50:0b:db:
7a:a2:08:8a:be:bc:6a:7e:f6:d9:2a:5c:6d:c9:dc:e4:be:b3:
85:ba:4c:95:ee:47:49:26:91:13:d2:47:b4:b8:cb:e2:e6:83:
30:92:18:b3:7a:14:e8:e3:bd:06:7b:45:75:37:d7:0f:67:8d:
ea:4c:1a:c1:a6:7b:ca:c3:ca:34:0b:a9:5d:39:3e:fa:09:83:
06:04:40:01:e4:0d:44:3e:b9:69:f8:02:41:3f:52:c3:40:46:
12:d6:c9:29:84:a8:c6:79:26:c4:8d:31:53:11:e2:5c:01:bc:
b6:f5:5a:a0:89:c6:6f:ac:b4:4f:94:31:24:25:24:e9:75:c8:
d6:b7:32:bf:fb:d1:dd:a9:e2:48:30:ab:ec:bd:59:62:c8:c5:
85:9b:37:bb:31:1b:c0:c6:8b:91:7a:ea:7d:6c:8a:f0:ce:a3:
cb:d4:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:15:32 2026 by rpki-client