Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: Mu0pude6NdOXQAFYphrjC3dYDNAoPx398BlFIV5KOv0=
Subject key identifier: 5A:F9:58:E0:85:5F:2F:57:49:ED:EA:E8:79:15:3A:E4:C6:9D:6C:5E
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019E4F58A45F8E9649C468F5B742EE20EFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0ECD
Signing time: Fri 22 May 2026 11:01:09 +0000
Manifest this update: Fri 22 May 2026 11:01:09 +0000
Manifest next update: Sat 23 May 2026 11:01:09 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: nfoGMECq5hcdvIFCDfEOFUJvM/bx5eXy5wL9PwoXR1U=)
2: WUBqB14hg7kEPnfwv69maUCGXb8.roa (hash: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0=)
3: _eWSF8bxvOORSX2rJpBEXgzqOFs.roa (hash: OME0ShCnDUmFiI4k1UCn7w/R3M3bK+c6sjs0IHw5Wdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:a4:5f:8e:96:49:c4:68:f5:b7:42:ee:20:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: May 22 11:01:09 2026 GMT
Not After : May 23 11:01:09 2026 GMT
Subject: CN=5af958e0855f2f5749edeae879153ae4c69d6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:c7:7f:df:07:20:d6:cf:1e:d9:f2:ad:fb:
6c:b5:60:b1:af:33:bb:9e:73:c5:c9:bd:b3:db:e5:
eb:13:de:5f:cc:a8:4c:40:02:d2:3a:e2:f0:70:d0:
fc:e4:fd:65:62:99:62:c0:41:ef:6a:a1:7f:fa:45:
fb:a4:42:67:23:22:d6:57:e2:1f:48:fc:3d:a1:c9:
b0:31:a1:46:15:23:f4:4e:96:a1:af:4b:70:c2:08:
c4:64:30:9c:73:22:e0:94:a4:2f:80:ea:4f:2e:3e:
9a:63:3d:82:e5:50:28:a0:79:c0:0e:31:56:23:18:
f1:25:b1:8a:6c:21:0c:69:2c:27:58:74:cb:5e:1a:
9d:35:d4:54:2c:33:38:41:a1:7d:b2:55:3d:ba:f0:
af:b6:93:41:43:4f:45:e4:15:47:b0:4e:c3:d1:30:
07:13:4f:cc:e9:c3:bb:d3:2b:be:47:34:26:5b:61:
41:48:e5:af:9d:5c:14:db:82:0d:dd:2f:15:7b:4e:
24:88:6a:b2:36:37:8a:d0:b8:75:be:8c:27:82:1b:
5a:d1:b4:79:84:b9:f4:ae:92:7f:66:9f:fa:dd:c1:
7c:50:29:99:96:d0:e4:cf:5d:a4:25:cf:d7:47:d1:
f0:5e:de:63:f6:7a:e0:29:44:01:29:a9:4e:e9:e2:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F9:58:E0:85:5F:2F:57:49:ED:EA:E8:79:15:3A:E4:C6:9D:6C:5E
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:e6:8f:33:4c:9d:67:a6:9c:cc:09:d0:fe:40:c3:c4:f9:
68:e6:5e:17:55:44:2e:ab:fd:d0:51:8a:7e:6f:29:3d:bd:6e:
1b:d6:24:8b:4f:85:81:70:86:34:1d:c5:65:8f:6d:60:9f:88:
7b:ef:3f:6d:12:52:7a:2a:be:98:f0:e1:9d:ec:1f:8d:15:59:
97:55:43:60:64:28:cb:5d:a4:4f:c2:2e:40:64:ba:90:f1:3b:
b0:d2:0e:36:a5:56:bb:bb:6e:1e:81:07:cd:a6:ab:67:d2:24:
85:42:6a:52:ff:10:ae:cd:ee:68:1d:16:b2:05:1f:db:ab:ec:
01:dc:15:8c:8d:8d:d7:8e:5f:c0:f5:4e:e0:1d:6d:63:76:0b:
ed:33:cf:55:27:13:d8:d6:e8:20:93:b1:22:93:ba:ec:1a:5c:
7e:f5:eb:a2:3e:aa:c9:1f:ec:9f:aa:73:1b:66:42:dc:74:0b:
d0:10:5d:b9:69:35:b0:81:41:cc:87:1b:78:a0:d8:c0:dd:b2:
6e:56:bf:f1:df:a0:b6:35:06:d6:72:73:9f:c3:f5:d9:fe:87:
89:06:3e:14:7e:30:7c:0d:a3:1e:ce:28:27:31:a3:c7:7c:39:
80:a5:a2:68:d4:b1:7c:1c:53:d9:80:69:51:52:ee:8a:b4:23:
c7:d9:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:16:54 2026 by rpki-client