
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
File: ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft (raw, json)
Hash identifier: S9uZX+JvacsW8vIW7ZiG+czbqjNuDkg3wbAMydr4brI=
Subject key identifier: F8:2A:61:59:6E:DA:94:B9:C0:83:56:30:DE:9B:3D:AD:E4:4E:15:59
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Certificate issuer: /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial: 019D382DFA86B27A802601DB1B85270399EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl (hash: b5RQKMJAOhCOSGuTJW6dIRZgVkoxEjkrSicojN+H83E=)
2: r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa (hash: Lx5U2EtRmK/SMw+CSkQAbyTcgCy3VHiqTM7rtjngPZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fa:86:b2:7a:80:26:01:db:1b:85:27:03:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=f82a61596eda94b9c0835630de9b3dade44e1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:42:20:b5:e3:15:16:0e:97:34:15:64:6a:
21:22:92:ab:29:fd:84:61:24:e4:72:f8:35:be:62:
d0:a1:61:22:76:37:5b:4b:67:a8:73:4f:1b:4e:4d:
f0:47:6f:20:a9:c0:a8:2b:47:0a:95:93:52:3a:d3:
45:63:ee:be:9e:9e:b4:e0:6a:e7:3a:31:a4:5b:1d:
ab:c8:fa:54:9a:ef:01:08:ed:45:7e:e2:a6:cf:98:
38:bf:1c:c9:d2:26:09:f2:2f:0c:7c:b3:02:f2:cb:
9d:f2:a0:93:51:db:a4:df:4c:ae:a3:55:a2:47:af:
50:23:18:1d:2e:fd:3c:b1:fe:cb:7d:ba:2f:ac:95:
70:e3:9c:b2:50:64:f7:42:49:59:3f:b2:32:90:6c:
86:3d:dc:78:fe:27:d3:79:3d:81:5a:67:bc:f2:9f:
ad:79:e8:a1:2d:81:df:79:30:84:4d:05:f9:71:fa:
46:e0:97:8b:c8:74:cd:27:12:78:81:68:e6:0d:1d:
14:fd:22:af:a4:e9:e4:0b:de:1c:03:45:dd:f3:e2:
a0:a2:95:84:bc:8e:22:6d:3b:d7:0c:18:2f:1c:2a:
0c:4a:31:e4:36:21:27:39:40:ce:b7:18:f0:de:17:
3c:6f:0d:2b:0a:17:6a:54:50:eb:1d:84:98:a3:a4:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:61:59:6E:DA:94:B9:C0:83:56:30:DE:9B:3D:AD:E4:4E:15:59
X509v3 Authority Key Identifier:
keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ca:f1:bd:27:43:01:fe:ec:15:5e:9f:51:2c:cc:d3:5e:f1:
6c:4d:c5:7b:23:c4:e6:b6:55:c9:df:0b:32:37:89:44:af:46:
01:8f:73:6d:09:5c:00:0a:14:18:55:a3:c4:4e:45:ed:e5:69:
52:5b:2f:4c:70:ee:67:f8:21:43:10:6f:4c:ad:67:a4:3f:7e:
99:e4:d3:2d:3e:5c:20:28:8d:71:f8:e2:00:75:5b:59:26:a9:
3c:97:96:18:75:58:c5:8f:54:b5:c0:54:5a:2d:c0:63:40:0e:
d3:92:ce:f6:06:48:a2:c4:3b:14:26:67:d1:7d:52:2d:81:43:
10:06:f8:91:9d:49:cf:38:03:a9:65:48:a3:be:58:5f:3f:71:
88:c2:22:6b:c8:c6:49:bf:aa:ed:2e:2c:23:e8:a1:6a:6b:88:
fc:63:54:c3:14:e1:eb:6d:d8:70:7b:c3:9c:dd:f9:b6:b9:77:
78:1b:a8:0e:ec:8a:69:11:af:4e:36:a7:dc:83:04:93:43:28:
e3:bf:71:b5:b3:77:61:99:c1:88:8d:c8:bc:f8:57:5e:17:1d:
7f:73:cf:bf:42:ab:3e:d5:68:7b:a7:8f:3b:cc:c6:67:7b:78:
58:24:b5:f4:c6:2d:05:b7:9a:0f:fc:3f:ea:9f:22:c7:9e:91:
54:e9:9c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfqGsnqAJgHbG4UnA5nrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2Y4OTcxMTc1OTlmZTgzOWE5OTQwZTgxYTE3ODgyNDRj
YWFkMDYwHhcNMjYwMzI5MDYwMDMwWhcNMjYwMzMwMDYwMDMwWjAzMTEwLwYDVQQD
EyhmODJhNjE1OTZlZGE5NGI5YzA4MzU2MzBkZTliM2RhZGU0NGUxNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/tCILXjFRYOlzQVZGohIpKrKf2E
YSTkcvg1vmLQoWEidjdbS2eoc08bTk3wR28gqcCoK0cKlZNSOtNFY+6+np604Grn
OjGkWx2ryPpUmu8BCO1FfuKmz5g4vxzJ0iYJ8i8MfLMC8sud8qCTUduk30yuo1Wi
R69QIxgdLv08sf7LfbovrJVw45yyUGT3QklZP7IykGyGPdx4/ifTeT2BWme88p+t
eeihLYHfeTCETQX5cfpG4JeLyHTNJxJ4gWjmDR0U/SKvpOnkC94cA0Xd8+KgopWE
vI4ibTvXDBgvHCoMSjHkNiEnOUDOtxjw3hc8bw0rChdqVFDrHYSYo6QdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgqYVlu2pS5wINWMN6bPa3kThVZMB8GA1UdIwQY
MBaAFHo/iXEXWZ/oOamUDoGheIJEyq0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDIt
YjJhZmVhNmQwNmFiLzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDItYjJhZmVhNmQwNmFi
LzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsrxvSdD
Af7sFV6fUSzM017xbE3FeyPE5rZVyd8LMjeJRK9GAY9zbQlcAAoUGFWjxE5F7eVp
UlsvTHDuZ/ghQxBvTK1npD9+meTTLT5cICiNcfjiAHVbWSapPJeWGHVYxY9UtcBU
Wi3AY0AO05LO9gZIosQ7FCZn0X1SLYFDEAb4kZ1JzzgDqWVIo75YXz9xiMIia8jG
Sb+q7S4sI+ihamuI/GNUwxTh623YcHvDnN35trl3eBuoDuyKaRGvTjan3IMEk0Mo
479xtbN3YZnBiI3IvPhXXhcdf3PPv0KrPtVoe6ePO8zGZ3t4WCS19MYtBbeaD/w/
6p8ix56RVOmcaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client