
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File: eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier: Q9Lg9sMUB7wBA1LnHviODBBqYfGE7aCYzjfWMGwpDXE=
Subject key identifier: A4:7C:A7:B5:43:21:30:5F:3F:EA:33:44:3D:05:B8:3D:FD:82:40:1F
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 019EB62118D8A917E65A9A1746BA1FAF677B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number: E2
Signing time: Thu 11 Jun 2026 10:01:22 +0000
Manifest this update: Thu 11 Jun 2026 10:01:22 +0000
Manifest next update: Fri 12 Jun 2026 10:01:22 +0000
Files and hashes: 1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: bFP3C30avQHsf92j3MjjPogSWUl0gHNfVUsghID0aQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:18:d8:a9:17:e6:5a:9a:17:46:ba:1f:af:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Jun 11 10:01:22 2026 GMT
Not After : Jun 12 10:01:22 2026 GMT
Subject: CN=a47ca7b54321305f3fea33443d05b83dfd82401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:89:22:ad:83:63:fa:24:34:65:2c:e4:f2:
0a:78:67:b1:e1:1e:97:1d:5d:41:95:1a:72:0a:82:
ce:d3:d2:43:12:19:eb:a5:3a:bd:c8:1d:73:74:c5:
1c:f2:7b:d2:7e:29:36:59:52:19:4a:4f:7a:43:b0:
32:8a:1c:0d:ea:19:ef:3f:ae:5e:e2:33:62:a4:c3:
44:92:3a:8d:80:cd:c1:99:21:bf:6d:4b:1b:51:5e:
79:0d:5b:e0:36:a7:a5:42:73:5e:ea:8f:47:ab:27:
21:a3:dd:4b:39:ae:17:7a:0d:8b:3f:09:29:4e:8f:
95:e1:ed:2e:e5:ac:96:8e:bd:78:00:3a:51:a5:f5:
f7:d7:7a:61:3a:8a:8b:53:97:1f:65:b8:b2:0e:a1:
b6:2b:cf:61:40:8e:79:de:de:a8:d0:48:ff:ad:45:
38:b6:e7:28:a7:8f:0e:e2:a5:55:e9:33:2b:94:80:
62:fe:30:7a:59:bb:e2:3f:a2:be:66:be:fb:b4:9f:
61:34:da:62:f4:d0:cc:46:61:be:9b:28:4d:e4:b1:
aa:16:36:ef:d9:74:cd:8c:71:fe:27:7b:c1:a3:f0:
a0:21:b9:28:27:ea:68:36:7f:19:8d:9c:5e:08:2d:
75:96:c6:4d:1f:1b:09:22:82:b6:ed:cf:76:48:ce:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:A7:B5:43:21:30:5F:3F:EA:33:44:3D:05:B8:3D:FD:82:40:1F
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:bb:f1:ff:d8:e2:47:c0:2b:bd:71:ff:98:31:bc:87:b2:
ee:ab:00:cc:a5:4e:aa:63:93:3e:5c:95:fc:30:00:fe:5c:32:
9f:5a:c1:e7:75:f5:64:a5:cf:65:3f:4d:5f:ec:a4:23:d1:9c:
7e:0c:2d:1f:2b:5a:01:3e:31:9c:f2:1b:ba:cd:c7:b6:a2:8d:
75:fc:c1:ad:ff:a0:17:d6:b4:a9:c9:e6:92:c9:9d:91:56:d1:
71:4b:c9:fb:aa:dc:60:fc:03:33:7b:33:a2:70:ba:e2:c3:ae:
eb:66:66:e8:17:55:fa:eb:1f:6a:c8:ce:73:93:e6:63:6f:b1:
88:7c:2c:e6:be:f6:72:8b:a4:56:48:02:c8:5e:be:c8:27:54:
5b:a5:92:d0:21:ac:8a:a5:fe:d4:21:47:6a:89:2d:65:77:52:
91:09:3f:f6:cb:73:9c:4c:de:a4:e5:37:51:17:86:12:86:59:
9b:8b:3c:eb:f5:38:97:42:c6:91:db:4c:63:ae:50:6a:25:43:
6b:6a:ff:0e:3a:30:17:05:ec:4f:1a:a3:85:de:b4:7e:e1:aa:
30:ab:43:a8:f2:e7:b5:78:0d:8a:5d:7e:79:0a:45:eb:f0:37:
f8:af:2e:01:79:72:cb:b5:86:96:2a:8e:02:8e:f9:b3:98:f4:
81:94:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:45 2026 by rpki-client