Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: M1S9trTT6cMSwAZzpsBTEPYjGEqxXLC5Tzz0rLDRjyo=
Subject key identifier: 85:5A:29:83:26:25:EC:33:FA:AE:93:42:34:88:F8:90:0E:D5:E1:C6
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019E20243EE363398688A11C6100C91D0C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0B16
Signing time: Wed 13 May 2026 07:01:46 +0000
Manifest this update: Wed 13 May 2026 07:01:46 +0000
Manifest next update: Thu 14 May 2026 07:01:46 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: vWdTbes2eu1+ZvFLUPuJJoeojJFCr43XfQ4c6ScYfmk=)
3: YUvYfLIz9Os3TS_5BCkoO47Tc7w.asa (hash: ecIQbMb7coA3jYnuN9HJXpp9aBbglIqzOo2LBtLMzps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:3e:e3:63:39:86:88:a1:1c:61:00:c9:1d:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: May 13 07:01:46 2026 GMT
Not After : May 14 07:01:46 2026 GMT
Subject: CN=855a29832625ec33faae93423488f8900ed5e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:98:fe:36:f5:d7:fb:53:31:32:d6:91:3d:
e6:a8:3b:c7:ea:9f:80:ba:72:be:70:61:7e:cb:85:
8f:28:67:34:e0:b4:e8:0e:43:bc:8f:8e:1c:c6:33:
48:56:16:03:82:40:d5:31:80:f0:3a:a8:c5:03:c8:
2d:bb:15:3b:51:6a:4d:4d:e7:01:f5:5c:c3:3e:48:
4c:d0:b7:6d:15:9c:f6:0c:1e:b2:00:6b:e9:94:80:
f9:d8:26:12:2c:84:7a:38:e2:bc:89:b2:9f:9f:1c:
e9:d7:4f:ff:1e:3c:77:c3:aa:d8:65:10:8a:fc:9b:
ab:23:83:0b:42:6a:8f:3f:04:78:d0:52:ed:33:71:
85:ae:28:3b:e1:ae:ce:1b:69:31:5c:60:a8:24:91:
a7:49:82:a6:59:ec:61:46:73:e3:82:c8:f2:51:33:
3b:c2:8b:52:9d:eb:fd:74:34:46:4f:4a:a7:e7:e4:
53:56:89:49:4b:70:a4:fc:9b:72:05:97:32:63:f3:
61:dd:9e:ef:71:2f:94:81:ab:53:65:16:2b:51:e6:
41:14:2c:10:2d:b3:7e:85:55:bb:97:d5:22:1c:e6:
52:6e:e9:7e:a9:6e:5e:b2:2a:67:85:e8:b3:fb:2b:
e1:c2:61:90:3a:48:4b:ae:9f:fa:8f:74:28:77:fa:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:29:83:26:25:EC:33:FA:AE:93:42:34:88:F8:90:0E:D5:E1:C6
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:d8:a3:bf:94:79:49:4c:15:59:3c:a2:dc:9f:4b:27:be:
0f:67:b9:3c:f7:dc:4e:09:99:07:41:8f:61:8d:6e:d3:bb:a4:
f7:fe:7c:13:88:d1:bf:d0:59:02:43:70:73:b1:0c:84:60:20:
ec:c4:a9:5c:8e:21:76:e0:18:2c:e8:99:8f:5d:48:52:53:6b:
a2:b0:1a:77:96:43:17:de:aa:12:ac:d8:d6:e9:18:71:0e:ea:
5d:65:dd:77:da:4e:44:e6:6a:e2:f1:e2:d8:7b:99:b9:6a:ff:
ec:48:f0:fe:17:18:02:2d:96:6c:27:7c:ec:df:8a:39:60:3c:
83:6e:6e:21:6c:f1:ce:ae:31:06:8a:ab:64:8d:a3:b0:0d:be:
31:e8:88:83:29:f4:41:47:43:ed:9a:00:7a:63:f5:f4:49:89:
59:c9:dd:29:00:6e:5c:b2:27:2a:e9:67:0e:12:1f:4f:c2:1b:
3b:14:b7:d5:c3:aa:80:d5:45:4a:08:61:cb:7c:c4:8a:40:5f:
a5:33:0d:ca:e2:ba:d5:00:ad:5f:87:16:b5:3b:6d:82:6a:81:
63:bc:59:39:89:5e:13:fe:c0:90:0c:50:71:6f:cf:d5:ac:13:
b4:54:a0:ba:b8:71:1d:72:cf:63:54:4a:6b:a9:0c:a8:46:ec:
ff:41:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:41 2026 by rpki-client