Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: Dvq9Ug5lCqXQZ5jzetOzDf3dWESGOl4fWEW+aBQa7gA=
Subject key identifier: E2:C5:3C:E8:16:74:94:2E:EA:E5:A3:6D:DD:7C:4E:60:03:2A:B9:0D
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019D2703F3E93A1C6D1B7C47EC02DF05E3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 0582
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: FbUvX2PwMnpEkojl2RQGmSzHcCLWRrkVOdpPy3XOcs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f3:e9:3a:1c:6d:1b:7c:47:ec:02:df:05:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=e2c53ce81674942eeae5a36ddd7c4e60032ab90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:60:a5:b2:6a:b2:bb:16:a5:44:5d:2c:e9:
a4:45:5a:8c:d6:1f:6f:00:2e:c8:d4:a2:9a:78:d3:
8f:b8:e3:3b:33:5f:3d:d9:26:2d:36:0c:8f:51:86:
fb:14:19:ab:f8:59:9a:c9:e2:c0:65:f7:83:2f:0f:
84:a6:df:af:20:ab:20:51:5e:2b:d8:6c:71:46:48:
60:50:e4:cd:a5:74:a8:20:dd:85:18:e8:87:c9:70:
e1:54:dc:02:1c:10:8f:e3:02:08:09:da:19:50:45:
8a:28:4e:f9:63:d6:43:99:f0:82:b2:01:75:05:86:
82:11:84:6d:7e:43:4c:b4:44:18:2b:1c:b9:f2:9d:
f2:74:d9:16:53:9c:3c:00:96:a5:b4:70:4d:7f:00:
d9:44:e0:44:37:c0:38:1a:fe:3a:ac:39:0d:df:bd:
17:fa:a4:80:23:59:d9:c3:af:4d:72:3b:53:10:10:
96:71:95:5f:0a:29:f8:4e:cd:d5:78:26:91:de:40:
a2:c5:87:12:19:d9:3c:cd:17:99:05:b4:c5:ac:07:
c6:2d:d1:36:5c:28:b3:4f:62:6e:90:03:ba:29:01:
0b:7e:c5:21:b3:96:aa:62:21:83:8b:f4:3f:8e:85:
32:6e:1c:fe:6e:fc:4f:cb:6c:56:eb:cc:a2:bc:97:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:3C:E8:16:74:94:2E:EA:E5:A3:6D:DD:7C:4E:60:03:2A:B9:0D
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2c:f1:c3:40:1c:9b:0e:d7:b2:c0:94:1c:59:bb:05:e1:89:
88:ee:3b:a9:6c:c4:7c:9b:fe:a3:b1:45:cc:81:e5:e1:4a:03:
3e:b4:8e:01:bc:49:82:fc:74:17:5a:05:85:be:9c:b8:b7:09:
f5:ee:83:66:a3:40:e5:0f:2b:ca:3a:58:78:c1:5d:d8:5d:ab:
7d:d4:67:7f:44:6f:9c:2b:20:ed:9a:17:6c:08:f8:49:43:b7:
d4:7f:17:e4:5d:fe:13:cb:72:dd:f4:00:44:80:e3:fa:f2:20:
91:78:51:d2:d0:39:4e:bf:41:ea:82:df:d2:a2:fb:6c:b0:f8:
90:f7:6c:20:71:bf:94:49:d8:a0:82:af:8e:9c:0b:b6:bc:5d:
40:d4:fc:94:c4:fb:ed:31:f1:7a:f0:1d:a5:44:9f:69:b1:56:
e6:9d:23:30:dd:00:ed:ea:64:91:0b:37:b3:7a:9b:36:aa:90:
66:81:45:b1:2d:ec:b8:67:ac:47:a9:5d:83:1b:2b:af:eb:50:
fe:ae:f2:4a:15:4c:12:67:fd:6b:6b:4f:80:76:31:ed:0b:76:
84:59:01:1b:df:f4:73:85:ab:91:21:97:68:76:0b:ac:f4:b8:
ad:c6:2c:d5:62:ad:dc:57:5f:fc:36:ca:ed:0d:7e:44:aa:83:
ca:b1:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client