Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: CmTmFWC7JyOoVfSneTbR1/Lz/G2z9lg5nOBG59n3Fr0=
Subject key identifier: 0D:97:31:9A:08:65:20:38:6A:90:55:21:88:C1:00:EB:6B:EF:B1:4F
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019F3717A33D3CE9352337AF1381E73941C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0F45
Signing time: Mon 06 Jul 2026 11:02:03 +0000
Manifest this update: Mon 06 Jul 2026 11:02:03 +0000
Manifest next update: Tue 07 Jul 2026 11:02:03 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: rTRxmwgHVateWz3QPZsTUJJFE4kCL82qHGBBt6Ai6cs=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:17:a3:3d:3c:e9:35:23:37:af:13:81:e7:39:41:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jul 6 11:02:03 2026 GMT
Not After : Jul 7 11:02:03 2026 GMT
Subject: CN=0d97319a086520386a90552188c100eb6befb14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:10:e1:97:73:d1:67:98:5b:31:2b:d6:ee:
2d:7e:65:2b:dd:16:bd:08:5f:df:a6:51:de:02:c6:
cb:18:a3:26:93:21:a3:88:76:86:8a:7e:c5:1a:a1:
4c:b2:b6:13:6f:ca:8b:ae:cf:87:b9:e6:de:b4:69:
b1:14:04:61:aa:08:44:b2:ea:49:6b:2c:23:1f:c8:
a6:16:c4:bb:3a:a0:73:5f:2c:3b:3b:6a:58:09:ce:
cd:d3:35:71:ad:1d:26:78:d3:7e:fc:68:5d:37:d8:
78:82:85:5f:25:d5:3e:89:da:29:65:83:0d:f2:51:
aa:cc:a3:5f:fa:44:e7:de:47:e4:2b:db:df:e4:35:
3b:89:6a:a1:af:71:56:b8:d6:c9:a3:68:31:73:da:
a8:17:c0:ef:8e:6b:f0:48:dd:b4:9e:ea:8c:1f:4d:
ea:84:b4:cd:b2:94:95:f1:d4:9f:1b:07:a8:58:87:
f2:dd:f3:f5:7c:e8:67:16:79:a3:d8:49:c4:d2:d0:
8c:a8:38:8d:ed:d0:6c:bb:18:5a:a9:5f:99:45:0d:
9e:2c:25:21:38:f3:28:69:cd:00:00:77:6f:19:40:
4b:42:62:a2:c4:be:59:6c:48:8b:4f:19:db:80:51:
ba:12:0c:3d:52:78:fa:9d:19:9f:db:d2:b4:ec:c6:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:31:9A:08:65:20:38:6A:90:55:21:88:C1:00:EB:6B:EF:B1:4F
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:f5:c1:f5:3e:d1:fd:62:0a:fe:b3:62:c2:39:be:a3:49:
53:17:2d:a5:b8:3d:f3:92:11:59:5e:14:d1:33:44:32:39:d5:
30:b1:73:c8:f7:4f:37:c8:6d:44:2b:73:6e:f2:6a:1a:df:67:
c2:16:fe:be:7a:23:bd:4a:c0:f2:0a:69:b7:5e:bf:b9:30:b6:
92:ae:0d:71:9c:d4:69:6b:b5:dd:43:46:1d:d5:c9:e0:72:2d:
95:7a:24:a2:9a:51:6a:44:64:56:77:5d:b7:41:26:00:5e:43:
26:68:00:b2:d2:2f:2c:22:2b:47:fa:ce:1e:62:eb:f2:71:2e:
c3:46:6e:36:e1:d8:39:44:97:f3:e3:b3:73:69:94:9d:a8:75:
8c:5d:d2:f0:81:01:a9:23:81:a3:17:f9:8a:9c:8f:ff:c4:d8:
94:d5:3f:60:a0:69:2e:f3:1c:35:f0:fc:e5:2d:ef:7e:90:0b:
84:ed:1b:d5:f6:ce:f8:66:9f:5e:7f:44:29:63:11:97:79:2c:
cf:23:27:c0:e8:f7:ab:a9:8c:9c:92:77:2f:6b:5d:03:3e:52:
0e:09:1c:b8:75:6f:12:3e:31:de:7e:f1:b6:8a:0f:c9:03:c1:
f3:50:0c:c4:58:e6:b5:13:34:d6:5f:95:db:03:26:c4:9e:51:
fa:1c:ea:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ83F6M9POk1IzevE4HnOUHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzAzYTY0NjJkYmEyOTUxN2RlMGRlZDg3Mzk3ZmE5ZTVj
NDA1MmUwHhcNMjYwNzA2MTEwMjAzWhcNMjYwNzA3MTEwMjAzWjAzMTEwLwYDVQQD
EygwZDk3MzE5YTA4NjUyMDM4NmE5MDU1MjE4OGMxMDBlYjZiZWZiMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+wQ4Zdz0WeYWzEr1u4tfmUr3Ra9
CF/fplHeAsbLGKMmkyGjiHaGin7FGqFMsrYTb8qLrs+HuebetGmxFARhqghEsupJ
aywjH8imFsS7OqBzXyw7O2pYCc7N0zVxrR0meNN+/GhdN9h4goVfJdU+idopZYMN
8lGqzKNf+kTn3kfkK9vf5DU7iWqhr3FWuNbJo2gxc9qoF8DvjmvwSN20nuqMH03q
hLTNspSV8dSfGweoWIfy3fP1fOhnFnmj2EnE0tCMqDiN7dBsuxhaqV+ZRQ2eLCUh
OPMoac0AAHdvGUBLQmKixL5ZbEiLTxnbgFG6Egw9Unj6nRmf29K07MZ/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2XMZoIZSA4apBVIYjBAOtr77FPMB8GA1UdIwQY
MBaAFBIwOmRi26KVF94N7Yc5f6nlxAUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzIt
M2VjZjcxYTcxMTViLzEvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzItM2VjZjcxYTcxMTVi
LzEvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqb1wfU+
0f1iCv6zYsI5vqNJUxctpbg985IRWV4U0TNEMjnVMLFzyPdPN8htRCtzbvJqGt9n
whb+vnojvUrA8gppt16/uTC2kq4NcZzUaWu13UNGHdXJ4HItlXokoppRakRkVndd
t0EmAF5DJmgAstIvLCIrR/rOHmLr8nEuw0ZuNuHYOUSX8+Ozc2mUnah1jF3S8IEB
qSOBoxf5ipyP/8TYlNU/YKBpLvMcNfD85S3vfpALhO0b1fbO+GafXn9EKWMRl3ks
zyMnwOj3q6mMnJJ3L2tdAz5SDgkcuHVvEj4x3n7xtooPyQPB81AMxFjmtRM01l+V
2wMmxJ5R+hzqUg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:23:43 2026 by rpki-client