Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: 2VvT2cdyeHsxK0v+p0h1iDwyKYSEIJiYS45JotWTKq4=
Subject key identifier: 76:31:D8:09:20:9D:11:AE:D9:B7:9B:58:5C:CF:FA:5B:7E:22:B9:1F
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019D39413816FBD0DC3169019ACB82EF4BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0E3D
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: V6IH36OLH8iUIvfu8UcbgXRnS+fEtjrNmTw/nFHvU8A=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:38:16:fb:d0:dc:31:69:01:9a:cb:82:ef:4b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=7631d809209d11aed9b79b585ccffa5b7e22b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:ad:37:de:07:7f:d7:74:4e:d0:58:a1:ff:
f6:bc:25:7a:18:1e:68:78:6a:bb:6c:7b:bf:8d:81:
e0:64:a0:f7:7a:39:42:a3:ea:f1:a4:92:1c:53:f9:
87:01:dc:6d:d6:c5:79:71:2d:8e:b9:bc:d8:ad:39:
ae:f0:68:9b:fc:09:2f:1b:87:12:79:53:b2:30:6c:
61:4e:97:da:89:ae:8c:3a:19:42:eb:cd:f9:fd:1b:
6a:02:46:2b:ad:51:b7:6b:6c:56:ec:95:46:05:a5:
7b:80:8c:53:3f:37:66:5b:ad:f5:9d:b6:08:ac:b4:
f1:ec:b0:af:c9:24:33:23:bf:b2:96:25:8c:4d:34:
13:1a:b6:0d:cf:24:ee:dd:c4:3d:b2:12:b7:5d:aa:
11:3f:51:f6:e3:6c:a3:c0:64:13:eb:48:ba:5c:f1:
f7:21:21:02:58:ca:b6:08:5b:6b:b8:c8:eb:86:03:
2f:29:4d:54:72:5a:9b:da:d7:53:f9:c5:74:11:7f:
a5:6d:70:e7:c7:a1:1d:1f:30:ee:80:c5:47:15:76:
f1:39:10:fa:7d:ed:e6:d1:e6:38:e7:37:8a:30:ce:
4b:d9:40:0b:3d:72:35:e7:d9:c3:33:7c:68:78:fa:
e8:aa:4b:c0:bd:aa:fe:8c:15:36:5b:06:a0:b2:bb:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:D8:09:20:9D:11:AE:D9:B7:9B:58:5C:CF:FA:5B:7E:22:B9:1F
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:55:c9:7f:a4:46:a1:4c:67:b8:db:b0:e4:7d:82:19:79:
13:80:0b:e2:ad:20:a3:c3:0e:cc:b6:56:b2:df:ca:36:b4:73:
55:00:d1:09:91:82:46:d9:59:fe:39:3b:21:a7:99:40:56:5f:
50:9b:3b:a0:b0:1c:9d:31:89:15:e9:ef:dd:f4:37:5e:f3:6e:
d1:e6:31:44:6a:54:f0:40:cf:c6:d2:a2:d2:67:20:c2:40:64:
53:d6:bb:9a:9b:ee:0a:0b:84:3d:27:c1:f4:cd:4d:47:34:a9:
2e:9c:44:68:1d:84:7d:a5:0a:e0:e8:dd:56:d5:94:e5:f3:ea:
59:e1:cb:5b:c6:11:c9:85:e9:98:9f:9e:ea:30:7e:ff:02:f9:
e0:11:7c:94:69:2e:04:40:f3:a4:1c:a1:02:3a:7d:86:c1:e5:
34:60:d1:89:b0:2d:ad:fa:f5:ea:a0:a3:13:7e:ff:00:1b:72:
34:4d:2d:97:ea:74:0b:d1:d9:de:3c:7a:4a:1e:48:4e:a8:4a:
c7:be:c4:79:6a:82:3b:80:39:68:d0:dd:51:73:44:dc:0f:77:
9a:98:aa:58:c4:a9:07:30:59:aa:0e:8e:c9:8d:13:04:e3:7b:
c5:6d:c0:42:0e:29:70:ce:78:92:a3:f7:89:58:18:d2:cb:74:
33:d7:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:06 2026 by rpki-client