Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: 6US1U/Oih9uQoQm86R+sKeBPutRhHLfcaUw6CtBzqr4=
Subject key identifier: 13:DB:04:7E:1E:51:36:77:29:6F:EB:E7:D8:CC:9F:54:DE:C1:77:34
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019F8EA2781A73400DA52D3378DF9A6DD427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0BD4
Signing time: Thu 23 Jul 2026 11:00:39 +0000
Manifest this update: Thu 23 Jul 2026 11:00:39 +0000
Manifest next update: Fri 24 Jul 2026 11:00:39 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa (hash: 6RJCYSiIM4CZdaMt1QH6napTMQyBB8/2uvcNOS+XnT4=)
3: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: H1CjGlbR1c9rWGq40xj7H9BKCviA+zQ+Q5Q4T7+46mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:78:1a:73:40:0d:a5:2d:33:78:df:9a:6d:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Jul 23 11:00:39 2026 GMT
Not After : Jul 24 11:00:39 2026 GMT
Subject: CN=13db047e1e513677296febe7d8cc9f54dec17734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:6c:aa:5d:8a:a2:e7:09:8c:04:07:68:af:
c9:bc:64:2f:7b:e5:ae:6e:9d:5a:21:5a:ac:3e:ea:
a0:d8:9b:a0:55:f0:eb:60:eb:58:31:f5:80:2c:15:
77:33:99:0d:99:bd:18:cd:af:7a:79:a1:15:7b:1f:
4d:7f:50:92:3b:2e:d9:95:b0:b5:b4:23:e7:8a:aa:
8c:8e:a6:7f:a6:6d:5f:43:75:a5:69:83:0c:51:31:
72:f8:6f:30:1d:e0:cb:df:ea:7b:2a:e5:41:fc:56:
e5:46:06:ad:de:f6:52:81:5f:0a:70:3a:b1:d3:22:
a0:9e:bd:c3:74:05:83:86:82:93:3d:45:df:80:09:
f9:d8:c4:fb:78:c0:d0:c9:3b:73:4d:8c:1b:30:c9:
6b:50:9a:1f:b7:30:7f:cb:d7:01:b6:e5:c5:6a:07:
99:ef:0a:75:fb:20:65:23:60:0f:a3:a8:0c:34:ff:
a2:a7:a1:44:f2:63:31:5f:1d:e0:1f:c7:eb:5c:fb:
fc:34:78:65:9a:51:b2:92:3f:9a:59:d1:d9:9b:68:
a1:76:47:29:ce:c7:a4:c9:91:ae:59:c8:8d:b8:83:
db:e3:a0:1f:92:0c:9f:93:fd:20:b8:ca:38:1a:c7:
fd:6c:2f:b9:12:5c:b8:e0:11:06:78:0f:41:cb:fc:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:04:7E:1E:51:36:77:29:6F:EB:E7:D8:CC:9F:54:DE:C1:77:34
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:f6:43:a4:29:80:e8:52:97:a3:71:42:30:3d:fa:87:5d:
ce:d9:d8:d4:bc:31:b1:7c:85:ef:80:f2:e0:5b:4c:77:04:da:
3f:55:7d:3b:35:a0:be:b1:bd:8a:2d:38:f5:cd:66:05:e4:a2:
53:07:da:3e:7b:5d:dc:e4:73:0d:98:ef:a3:e3:75:3a:cf:72:
cd:d4:a5:de:cc:d5:d6:27:e9:47:d4:2e:37:b4:5e:89:ff:49:
24:a9:c8:b9:7f:a0:a0:3b:c7:14:ec:63:ac:3e:c3:e0:fd:e2:
54:e4:c1:c5:85:9e:87:c5:01:f6:56:53:09:81:ca:f0:26:69:
9b:b1:83:64:94:11:3e:f3:09:2e:59:70:07:7f:47:70:dd:94:
99:09:21:37:ca:58:ad:8e:b2:3d:ff:be:f0:76:91:97:07:9c:
79:e6:52:f6:16:ed:f3:0b:de:45:77:4a:0b:3d:a0:ef:0f:f0:
37:33:74:bd:10:83:5e:e5:68:6c:2d:c8:fe:7a:0f:13:29:58:
3a:90:cd:99:25:5a:a5:6d:a1:43:1f:db:f3:22:a5:64:cf:52:
2e:12:01:ed:07:c3:7e:c2:d3:e1:0c:21:1e:6c:65:b5:b9:56:
00:b5:e3:0c:b3:4a:2b:bc:c6:f4:fb:74:78:f9:70:96:29:c2:
58:51:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:22 2026 by rpki-client