Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: Qad+QtsXuEY/kWdjD2W/5KjbiQ+IehM3aknrabv8EmY=
Subject key identifier: 7C:99:42:E4:D5:AA:3E:62:4D:F5:0E:EF:BB:7E:94:0D:26:C0:3D:41
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019D38662E11216231C5EC95D7C8DA94C7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: UWIL+0F/7hRgPqIq6IL5BeMBVyzTBIpNJKE5eaJaFDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2e:11:21:62:31:c5:ec:95:d7:c8:da:94:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=7c9942e4d5aa3e624df50eefbb7e940d26c03d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:fa:c3:46:56:27:fc:af:c6:42:70:70:e7:
70:97:fe:4a:53:55:d5:f8:13:19:a3:1a:a5:1d:67:
24:8d:c9:7c:64:6c:19:3c:d5:44:17:2d:1e:b6:c4:
f5:a5:4d:a2:17:f5:99:92:79:c4:3b:1b:3a:d5:a7:
be:41:95:21:dc:fd:38:95:dd:c1:be:84:02:fd:ad:
38:ee:ab:45:86:86:52:35:20:5e:d2:f9:a9:5d:d2:
fb:cc:cb:4e:ff:df:f9:5c:21:f8:e6:37:da:03:c3:
ad:49:bb:43:70:6d:1a:fa:22:06:72:48:92:66:75:
04:57:9b:03:91:e6:ca:e4:aa:3a:13:63:2b:f3:b8:
f6:40:3f:f5:b4:8a:94:e2:4f:14:5a:8e:57:a7:8b:
27:d4:34:a0:5c:fc:b2:98:77:3d:05:fd:06:76:e5:
53:e4:2d:4b:20:70:b3:6b:33:69:c7:a9:15:6d:7f:
a5:11:38:f0:a7:ce:3e:5a:bb:ae:ee:71:61:70:d8:
c4:91:85:e4:df:f3:c2:0c:b7:53:d6:79:50:77:b0:
7b:c6:e7:98:ab:90:dd:8e:17:ae:0e:11:e9:ca:a7:
f9:6a:c7:dc:63:46:cc:2b:18:3a:e9:bf:e2:f4:92:
5a:45:4e:1e:6a:d5:b1:3e:a3:6b:e5:e4:76:07:06:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:42:E4:D5:AA:3E:62:4D:F5:0E:EF:BB:7E:94:0D:26:C0:3D:41
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e1:f0:33:00:07:05:f0:28:c9:6e:e2:9a:6a:7a:bc:52:59:
56:30:7d:96:3f:9b:42:dc:87:a6:3b:03:cf:cc:32:ec:30:0e:
84:14:51:14:3e:6f:8a:fe:47:d8:8e:4c:25:16:67:a7:f7:9e:
78:d0:42:b7:29:05:8a:88:3b:f1:11:e4:e5:3b:c0:64:1f:b7:
0a:47:93:37:31:b8:64:c2:7c:a4:55:34:a5:66:4c:df:a6:da:
ad:a7:09:50:ea:e1:00:49:35:a5:af:13:7c:55:c7:72:97:c4:
f2:75:dc:c1:4e:79:ad:e0:f6:00:4e:85:9d:08:97:dc:5b:00:
f6:d5:ef:7b:62:05:26:bc:f8:45:ef:1c:23:c7:6e:79:e0:84:
2a:af:5e:f5:43:1d:03:9d:7b:5c:b3:91:a6:c3:05:e7:35:3c:
b6:39:2f:7f:e2:37:13:8f:6f:03:e1:78:35:b7:3b:fe:96:f1:
48:49:51:fd:5b:84:5f:7c:95:db:7d:82:4a:6a:32:30:56:e1:
66:cc:5e:22:0d:a6:2d:d3:ab:f0:04:bd:b6:3c:4f:b8:4c:66:
53:be:e1:c7:2c:b5:4f:c9:88:ab:2d:9a:06:45:ae:98:c0:f9:
95:cf:a6:e1:d9:88:28:88:50:9d:9f:53:22:96:e0:c8:ca:39:
6f:08:1a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zi4RIWIxxeyV18jalMfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4
OWZhYWYwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
Eyg3Yzk5NDJlNGQ1YWEzZTYyNGRmNTBlZWZiYjdlOTQwZDI2YzAzZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRX6w0ZWJ/yvxkJwcOdwl/5KU1XV
+BMZoxqlHWckjcl8ZGwZPNVEFy0etsT1pU2iF/WZknnEOxs61ae+QZUh3P04ld3B
voQC/a047qtFhoZSNSBe0vmpXdL7zMtO/9/5XCH45jfaA8OtSbtDcG0a+iIGckiS
ZnUEV5sDkebK5Ko6E2Mr87j2QD/1tIqU4k8UWo5Xp4sn1DSgXPyymHc9Bf0GduVT
5C1LIHCzazNpx6kVbX+lETjwp84+Wruu7nFhcNjEkYXk3/PCDLdT1nlQd7B7xueY
q5DdjheuDhHpyqf5asfcY0bMKxg66b/i9JJaRU4eatWxPqNr5eR2BwbsxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyZQuTVqj5iTfUO77t+lA0mwD1BMB8GA1UdIwQY
MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt
MWIxOTIzNzFmNDQyLzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy
LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuHwMwAH
BfAoyW7immp6vFJZVjB9lj+bQtyHpjsDz8wy7DAOhBRRFD5viv5H2I5MJRZnp/ee
eNBCtykFiog78RHk5TvAZB+3CkeTNzG4ZMJ8pFU0pWZM36baracJUOrhAEk1pa8T
fFXHcpfE8nXcwU55reD2AE6FnQiX3FsA9tXve2IFJrz4Re8cI8dueeCEKq9e9UMd
A517XLORpsMF5zU8tjkvf+I3E49vA+F4Nbc7/pbxSElR/VuEX3yV232CSmoyMFbh
ZsxeIg2mLdOr8AS9tjxPuExmU77hxyy1T8mIqy2aBkWumMD5lc+m4dmIKIhQnZ9T
IpbgyMo5bwgaEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:36 2026 by rpki-client