Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: OwI90N8sTePYyzSDLS43L654ynWPnw6qHxBsAfyjyyA=
Subject key identifier: 67:2E:10:F1:9E:63:10:7D:1D:60:86:6B:4D:D2:8E:9F:33:E6:E0:5E
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01A0E1AB06504B2357392C8F4D8BDA26FD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 169C
Signing time: Sun 27 Sep 2026 07:01:16 +0000
Manifest this update: Sun 27 Sep 2026 07:01:16 +0000
Manifest next update: Mon 28 Sep 2026 07:01:16 +0000
Files and hashes: 1: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (hash: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: t+tqh7GkUYIlRx09U0QlB4rPU49bn9GeorzqcwlOYfY=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:06:50:4b:23:57:39:2c:8f:4d:8b:da:26:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Sep 27 07:01:16 2026 GMT
Not After : Sep 28 07:01:16 2026 GMT
Subject: CN=672e10f19e63107d1d60866b4dd28e9f33e6e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:89:13:fd:84:d1:a2:9f:66:41:db:dd:39:
d1:22:fc:61:26:1e:f2:9a:6d:1d:18:08:e9:05:7d:
74:5a:bb:4b:70:ab:51:6a:60:6f:20:7b:ac:88:4a:
52:36:a2:7f:c1:01:2f:05:c4:6e:d5:4b:02:7b:55:
78:f2:54:15:cf:bd:15:57:62:e5:49:63:cf:fd:63:
e8:0d:77:23:1a:e2:ed:67:92:ee:41:53:cc:f0:cd:
10:ec:98:f4:b3:00:d1:14:d1:a6:1b:07:83:f7:82:
f5:db:e1:23:a1:e8:24:53:dd:20:58:6d:bb:e4:33:
a8:cf:3d:36:a0:21:40:00:3d:0f:9e:c1:4e:bf:f1:
f6:ab:d3:33:62:0e:bf:f2:1f:8e:6d:9d:b6:94:f2:
db:7f:86:83:24:49:28:76:8b:02:04:d6:62:05:65:
03:c0:db:a5:7e:38:88:f5:4e:95:c9:1e:98:c1:6e:
c3:f2:2a:6e:4e:e7:d3:18:98:d8:90:e1:da:02:12:
3d:93:65:ef:35:22:57:f1:c1:c1:d2:30:88:ef:f7:
7c:37:70:3c:43:d5:48:a4:41:66:11:ec:66:5d:25:
08:27:2d:1c:f0:43:a7:d7:a3:3b:ad:7c:5e:93:f7:
bf:02:5c:63:b8:85:68:07:2d:ad:5a:ce:e8:d3:fa:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2E:10:F1:9E:63:10:7D:1D:60:86:6B:4D:D2:8E:9F:33:E6:E0:5E
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:b2:95:21:b0:1a:eb:5d:90:a5:f4:f1:65:f4:11:9b:0f:
72:90:cd:ce:30:70:c2:6c:8d:de:e5:92:30:bd:5b:d5:25:f8:
72:35:0d:02:1b:ab:eb:41:95:2b:1b:ba:b1:d2:6f:3e:98:1e:
d7:e3:dd:f3:56:5c:72:34:82:a3:40:6b:f2:7e:8f:e2:e5:ee:
95:7c:4f:99:a6:51:d2:07:77:f7:ea:13:84:ad:3a:72:01:4c:
a6:2f:14:82:f9:13:8f:38:dd:b8:ac:63:40:3b:fe:2e:6d:2b:
e0:99:52:20:ab:15:c4:5c:81:df:79:b7:fb:59:08:a8:90:01:
81:69:c8:87:2b:c8:77:d6:11:88:9e:77:a5:4a:8e:11:14:83:
30:77:60:bf:4b:af:23:21:2a:11:2b:63:af:ee:a1:da:d9:4b:
61:77:ed:c6:d2:bd:3a:b6:9b:5b:5f:d9:bf:8d:a4:8e:8a:e1:
81:ce:1c:ff:73:7e:47:cb:ca:6e:a3:d5:47:d3:92:3b:a3:b3:
d4:5f:ce:9e:f0:df:e4:5d:2e:09:fc:04:98:54:da:67:33:91:
d1:88:d1:b4:3d:4d:32:57:b4:fe:78:33:2c:20:f4:c5:6b:dd:
ef:99:94:80:77:b6:a8:d2:b1:b9:b5:72:60:9e:31:7f:8a:6e:
8a:2c:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:42:05 2026 by rpki-client