Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
File: ejn7sf-ySyJGNVzXvMwUiFY1acA.mft (raw, json)
Hash identifier: XpjGEFu7+8hgrAC+aJu+mz4497VU96JKCbg6Js2SYVs=
Subject key identifier: 05:E9:B4:FD:49:6F:00:69:9B:E9:D1:56:96:1D:83:F7:63:1D:E2:F9
Authority key identifier: 7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
Certificate issuer: /CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Certificate serial: 019D382E2595ABD6A6AA0027323D325EB2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
Manifest number: 0102
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: eUTnTAS_7nDmDImqNcgOGTu0Od4.roa (hash: ATvILIe7CG50+QhFqAYs1mVMS6f60iOBAKB9QocsmEE=)
2: ejn7sf-ySyJGNVzXvMwUiFY1acA.crl (hash: n0p8kOEAaQ3K7MhaCkXl7v9Q2K2O28UFbtecp2DUOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:25:95:ab:d6:a6:aa:00:27:32:3d:32:5e:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=05e9b4fd496f00699be9d156961d83f7631de2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:44:97:a0:f7:51:81:ea:0f:42:15:b5:5b:
f8:5f:b0:95:d2:40:2c:f5:d4:14:c4:16:74:82:fd:
00:30:0c:e4:7b:f2:74:f3:c9:dd:eb:be:20:90:5b:
5c:eb:f9:83:d8:b1:7c:a0:1d:3c:06:ba:3b:bf:54:
bf:ca:c4:0c:b4:ad:e0:06:5b:d2:ec:79:90:7e:4c:
8d:8c:c9:3f:a5:e2:68:6f:26:1e:a4:19:de:ea:36:
0f:d3:a7:4b:01:f6:4b:ac:16:ca:60:25:dd:e6:bf:
9e:37:c0:32:81:b6:1d:39:90:e6:f3:4f:a8:4c:be:
aa:c5:de:12:6c:04:1b:8b:74:41:d5:66:a4:26:61:
17:e2:02:d3:1e:fb:07:b1:0d:ae:a1:38:6b:07:bf:
4e:45:7a:de:b2:e5:47:34:d1:99:0a:e3:16:54:60:
69:18:6f:e1:9e:91:87:09:98:90:84:de:da:30:79:
48:50:55:e6:0e:9a:ed:ae:d4:5d:2f:3a:b5:15:c5:
d2:94:24:f3:c0:27:54:6a:0c:ee:9b:a3:aa:6a:6c:
35:e4:68:73:9a:2d:62:fe:c4:1c:41:e9:49:b7:3a:
f3:57:4e:55:43:2e:45:a3:77:69:9a:19:94:07:da:
08:f7:10:2d:e5:8d:80:4b:a7:95:4b:58:ff:33:6e:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:B4:FD:49:6F:00:69:9B:E9:D1:56:96:1D:83:F7:63:1D:E2:F9
X509v3 Authority Key Identifier:
keyid:7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:e0:63:95:49:9a:70:6d:96:d5:f7:7a:fe:54:e8:f2:7d:
29:71:02:ad:8b:dc:1d:9c:d5:ac:ac:cd:28:57:73:5b:f6:a4:
d1:a3:22:9d:3f:27:3d:1a:4c:ff:3b:94:eb:eb:bf:fa:03:fb:
97:76:ea:e7:27:1c:c6:33:7e:b0:70:50:3f:de:d5:0c:2a:45:
2f:71:ec:db:33:d2:f1:31:f8:f7:83:ae:67:79:cd:ec:e4:b0:
61:02:b0:d8:b5:3d:a5:78:41:f1:26:3e:da:5a:1d:6e:0c:8c:
38:e1:03:91:4e:72:b8:b6:d1:82:5b:65:cb:13:ab:a3:dd:57:
c5:2e:55:6f:f2:44:0b:1f:e0:71:d4:40:22:f4:cf:85:a4:42:
c7:fd:a1:00:0e:2e:42:98:c5:76:13:69:b3:c5:b8:f9:2a:13:
66:da:8d:ec:05:e4:9a:6e:f7:4a:30:76:35:90:c7:87:2d:c3:
d0:4a:38:92:89:bb:c0:af:d2:69:24:04:eb:c9:d2:87:ca:61:
4a:ec:08:d7:46:62:68:ff:1a:cd:4f:06:62:70:bf:88:82:03:
39:43:56:fe:71:c6:8d:74:c8:cf:b2:6f:41:42:eb:9f:6d:41:
42:16:f9:0e:d0:54:b3:4d:5e:57:d3:89:5a:64:62:eb:ef:58:
aa:5c:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client