Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: F5D/UeJDbMVvNR9dUuu1T569jKDNzXyQ1BXOH6odKoM=
Subject key identifier: 7B:EF:D6:F9:AC:9B:5C:59:5A:66:69:05:53:FD:EF:B8:C3:20:B7:C8
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 019D28165546E6A40EF5FE075B668E3B98E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: InFTT6cqk9gIIzVW8VLswiFFgynbq2BYDJp6l+sur0Q=)
2: KTLrylbaPZVc2tcqKn9wzCh_kXU.roa (hash: fYS788ZlufFWPud3/HvTQbZGHC7LPz9v9l4mgngmvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:55:46:e6:a4:0e:f5:fe:07:5b:66:8e:3b:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=7befd6f9ac9b5c595a66690553fdefb8c320b7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:87:05:92:8c:9e:26:6d:28:9c:ae:ee:61:13:
14:09:74:17:35:98:87:51:02:85:69:7a:59:58:63:
24:a1:80:e8:82:aa:ad:1b:05:e2:4e:49:f0:e0:66:
bf:52:54:1a:6a:c3:33:dc:b2:b1:b7:71:23:51:5b:
1d:c3:a7:6e:08:cf:a9:93:50:72:c4:69:1b:e9:89:
4e:b3:cf:72:cc:5b:02:ec:26:10:b0:fc:8d:c5:00:
c4:ec:d7:31:c8:e8:d2:d3:49:39:23:16:e2:be:4e:
f7:04:a3:63:dc:a6:ea:ac:b0:bc:11:18:a9:23:89:
97:07:68:a1:ac:f5:5a:b2:5f:5a:1d:80:c0:d6:1d:
65:ae:5c:c9:8c:ce:35:a7:33:dd:0f:63:02:9c:57:
5f:5a:7b:9b:53:ce:da:74:65:86:61:91:8c:0b:52:
65:2e:29:be:64:16:99:8b:d5:0e:33:f7:ae:89:51:
89:54:61:49:41:6f:db:0e:13:fe:80:9f:da:fe:77:
99:6c:92:35:f3:72:cd:a2:d0:b2:0b:20:ed:3d:c2:
f7:86:60:37:6f:aa:94:6c:17:74:71:f1:80:1a:6e:
a4:56:e0:c9:3a:a6:83:b9:8a:d2:65:ea:a7:7b:26:
d8:a1:ab:f8:be:d5:2c:ad:2f:f9:07:31:f0:f6:e1:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:D6:F9:AC:9B:5C:59:5A:66:69:05:53:FD:EF:B8:C3:20:B7:C8
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f6:6e:6f:32:a5:1d:a6:31:39:2f:ef:8a:0a:53:82:2f:fc:
1b:9c:b5:46:a6:d5:80:29:dd:f3:37:a1:bb:06:13:d1:f3:76:
f6:9d:1b:bb:fa:cd:1b:24:04:0b:e9:a3:38:b9:4c:c9:98:03:
41:82:ea:a3:9f:26:a1:5b:59:58:95:13:50:e5:0c:61:97:c2:
f8:fa:40:5f:05:f6:ac:5f:67:f5:0c:f8:6d:ca:95:40:01:a0:
cb:09:62:51:8d:d7:0a:65:88:61:53:82:92:24:a0:c2:7d:eb:
3a:72:26:12:06:39:59:86:46:ef:10:ba:90:b7:5b:be:f0:42:
92:61:ad:b7:e3:d2:83:43:40:14:0f:06:7b:24:c1:41:cb:db:
dd:99:d3:5a:5e:e5:ba:c5:62:8c:37:c0:35:1b:fd:a2:19:bf:
2b:8c:44:e2:52:89:b3:21:42:58:b9:43:c9:a8:93:80:24:72:
19:23:4f:86:b1:8e:66:d1:b3:2a:58:21:fd:fb:ea:bf:5e:26:
c7:27:53:a6:7c:b3:c9:09:d4:50:b7:10:b4:97:78:54:0e:7a:
07:39:e8:a0:9b:fc:f8:22:0d:2b:3c:c5:0a:28:ed:cf:a6:0d:
70:3b:94:7c:94:79:76:21:6f:b5:42:25:10:0d:5c:e1:9f:04:
0e:34:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:15 2026 by rpki-client