Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: tmhvF+IsgPUD/vtXDjoPZprhxSKqfr1q3hB2jZItCSo=
Subject key identifier: B9:DB:23:F1:5B:E9:C2:01:97:BE:8C:0C:50:FB:E7:15:CF:03:1B:69
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019E2091254FF6EEBEB46FADE298FD2BAAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0D61
Signing time: Wed 13 May 2026 09:00:43 +0000
Manifest this update: Wed 13 May 2026 09:00:43 +0000
Manifest next update: Thu 14 May 2026 09:00:43 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: flsE+eul3pyBjflAEhm/CxQ5jY4Qu58i/PDwvXesP9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:25:4f:f6:ee:be:b4:6f:ad:e2:98:fd:2b:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: May 13 09:00:43 2026 GMT
Not After : May 14 09:00:43 2026 GMT
Subject: CN=b9db23f15be9c20197be8c0c50fbe715cf031b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:1c:fa:70:39:64:18:1f:e7:7e:47:1d:00:
cf:08:0e:7d:d7:cd:e2:01:bc:b9:1e:01:18:ad:72:
0b:45:d4:7b:8a:c2:46:82:52:3e:cf:f5:86:1a:1d:
15:26:de:99:44:45:28:8e:16:b0:4f:f2:f3:40:35:
36:77:c1:90:e8:01:e1:1a:f3:72:c9:05:03:71:22:
a3:fc:79:c2:49:5e:fa:75:ba:de:6b:e8:4f:1b:05:
15:b0:a1:2a:da:e6:4a:26:fe:0c:43:db:fe:c9:f1:
bd:40:e9:73:55:86:82:45:f5:46:be:3d:8a:e7:d2:
73:13:e3:64:7d:6d:f3:de:f4:03:53:55:cc:b0:c6:
ea:8d:f5:26:b0:ea:8e:8a:75:b5:8e:6e:2a:90:da:
f3:72:76:9c:c8:89:bd:61:fa:67:26:74:fb:31:d5:
8f:ac:9c:b2:f2:92:b8:80:bd:48:51:bb:35:a4:5a:
1d:d5:7a:5a:a4:be:f9:61:af:2d:aa:56:97:9c:9e:
2f:b2:68:9f:5c:c2:10:2c:24:eb:49:06:45:55:d8:
56:c5:75:4f:57:8c:be:88:7b:02:9e:96:1d:42:64:
cf:e9:42:15:6b:f2:15:11:34:0e:b6:da:4f:97:c6:
7e:b2:98:20:88:41:41:5e:eb:06:5e:28:03:04:7a:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DB:23:F1:5B:E9:C2:01:97:BE:8C:0C:50:FB:E7:15:CF:03:1B:69
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:62:84:ca:ab:fa:40:30:27:7d:50:6f:dd:c6:b2:6f:be:
81:4a:51:ad:e9:50:4c:5f:12:28:93:84:6d:3d:e1:8c:d9:10:
8d:94:97:88:d3:a8:71:60:75:cf:c0:14:17:53:ad:fd:5f:09:
15:78:c5:af:19:c4:0f:f3:2c:fb:40:ef:67:ac:80:08:67:fc:
04:a2:f0:95:21:d0:94:c8:66:48:9b:e7:3e:f0:45:a6:a5:85:
c7:4d:8c:d7:c5:c4:0e:0a:e3:ad:29:bc:27:fe:ef:3f:d9:04:
d8:09:7d:d1:dd:c7:6b:1e:1b:38:cf:ea:38:2b:0a:86:75:99:
99:38:5c:ec:b4:bb:b8:71:99:c6:01:c0:1f:ec:5c:9f:89:68:
9d:48:31:f4:e7:ba:f6:9b:48:b5:62:ac:f7:fd:6f:73:eb:41:
a6:58:b8:48:d5:17:bd:7a:dc:19:a1:17:64:26:3f:8b:62:b3:
1d:fe:4e:a7:e9:22:df:2c:07:b2:ce:86:ee:15:e1:4c:5c:ae:
64:34:4c:ca:44:d4:a4:24:c3:17:df:62:4c:e0:34:d5:0c:1d:
08:36:b1:66:f6:b5:34:e8:23:a5:5f:d1:e0:2a:5d:d5:fd:ff:
87:6f:7f:c5:c9:87:93:fb:75:b8:eb:70:b8:a5:23:27:07:45:
20:74:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:52 2026 by rpki-client