Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: 8FnWD2s4+FGyJhFtSnaKRaZkklwVqWXZOJxnQ6TxZ9g=
Subject key identifier: 02:13:75:97:27:DD:50:D3:77:EA:4D:B3:02:78:26:E6:95:B9:40:55
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 01A11C753D984FE567E266FF749ED7D7BC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0CA2
Signing time: Thu 08 Oct 2026 17:00:07 +0000
Manifest this update: Thu 08 Oct 2026 17:00:07 +0000
Manifest next update: Fri 09 Oct 2026 17:00:07 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa (hash: 6RJCYSiIM4CZdaMt1QH6napTMQyBB8/2uvcNOS+XnT4=)
3: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: O5wqlkUimAm1ZwdKb1ntFVru8Glrv5drR6Eu8t8tRD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:3d:98:4f:e5:67:e2:66:ff:74:9e:d7:d7:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Oct 8 17:00:07 2026 GMT
Not After : Oct 9 17:00:07 2026 GMT
Subject: CN=0213759727dd50d377ea4db3027826e695b94055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:69:b2:6d:91:ca:99:a4:ef:ee:c9:45:11:
e0:31:d2:5d:30:f1:24:1e:c9:4c:23:34:73:dc:78:
7a:c4:c2:79:b9:01:45:72:55:5b:30:40:87:f1:ba:
5c:1a:5f:0e:48:3f:d7:d0:30:09:05:1a:45:95:92:
c1:d4:11:d9:fd:68:d3:57:58:7f:cc:12:bf:d9:61:
bc:4e:20:08:af:77:43:77:e4:19:d5:c0:b1:57:72:
40:1a:30:7e:02:81:89:6b:91:cf:b6:2f:d7:c3:22:
8c:7f:e5:1e:98:39:41:e9:d0:97:36:77:00:7a:e0:
70:4f:1e:b7:b2:a7:53:3e:05:c3:9a:ad:82:8f:3d:
87:96:60:17:b5:6e:ee:7b:4d:f0:68:f6:46:5b:5a:
15:a0:8a:b1:8e:c4:c7:3e:19:b4:f7:93:1d:c5:0a:
3a:9e:66:1c:1e:b7:ed:91:f4:4f:de:80:42:dd:78:
e9:bf:19:52:f0:6f:f6:98:18:68:07:1b:81:df:eb:
88:e2:7e:9b:c5:e8:51:cb:38:d1:26:0f:db:eb:80:
3c:7a:fe:b3:66:5b:31:cb:a8:8a:d1:55:b8:ed:74:
92:2a:7c:92:5f:aa:f8:66:e7:c5:a9:4f:79:a8:95:
23:19:5f:2e:5f:eb:5a:49:ce:f8:eb:78:c4:df:85:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:75:97:27:DD:50:D3:77:EA:4D:B3:02:78:26:E6:95:B9:40:55
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:f5:c1:37:0d:22:e3:50:87:53:e2:d6:79:f4:e4:3e:af:
dd:72:94:91:ba:db:53:79:36:2a:28:cb:da:6d:b7:81:35:e9:
67:8a:07:54:d6:42:95:0d:e3:9b:ef:24:65:77:30:a7:20:18:
31:94:40:77:39:18:30:4e:26:cc:6a:4b:4d:36:34:f1:d4:a5:
74:76:6a:93:45:e9:67:49:18:c2:2e:69:a3:83:e8:e9:1d:c4:
c9:d8:59:9e:7d:65:2a:c1:f7:7f:93:01:b9:aa:51:09:3e:d5:
4d:d4:4c:0d:22:26:73:4b:1b:cd:9d:da:3d:36:1d:37:4d:98:
59:19:bb:28:ec:d7:6c:b0:c7:41:24:98:84:13:c0:ac:bd:c7:
ba:4e:57:41:6c:fc:8f:3b:9f:a0:30:e6:89:49:8d:27:e9:60:
27:80:09:8d:ca:12:7d:ca:3a:bc:b9:76:ae:e0:e8:8f:08:83:
e2:65:5e:9c:77:21:e5:e1:5c:47:7b:1d:c8:a5:2e:d9:ae:c1:
06:c8:01:d5:fe:f7:33:57:84:0b:f2:8d:a4:6c:13:15:e5:ea:
37:26:9a:1b:fd:ac:8a:de:7e:ca:c3:fc:a3:3c:55:64:b9:ee:
c5:63:25:be:0e:5a:83:e7:50:66:0b:81:a1:81:85:6e:57:5b:
b1:5b:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:19:25 2026 by rpki-client