Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: d8d8skSzJWb8sxkcHfdDeWY8hUPTqbPXrhCHqvG0bsA=
Subject key identifier: 8B:36:94:2A:8B:A7:2C:5E:B8:74:03:AE:08:F3:8E:7A:CE:D3:C9:A6
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019D284D5AF54C95D97355E983E570A5095C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0305
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: C4SkT0FIeEkoSlMDCHwMViAkY3A1R4AbFPAAbWIZQg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5a:f5:4c:95:d9:73:55:e9:83:e5:70:a5:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=8b36942a8ba72c5eb87403ae08f38e7aced3c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:8d:ad:ad:6c:3e:30:bc:93:1d:bb:9f:47:
bd:ca:df:46:8e:84:0a:32:3b:d9:f6:c0:a9:46:8b:
54:bf:cd:bd:15:54:5e:35:71:a2:4b:a7:9e:54:16:
04:7e:52:c6:a9:d7:4b:cc:6a:76:0f:97:f3:a9:b6:
fa:48:78:db:53:11:35:87:a8:98:69:6d:72:dd:60:
a0:e3:28:fe:9e:98:7a:a6:ad:0f:f4:b7:17:32:fe:
f1:dc:c3:5e:ac:6c:3c:75:55:e9:d7:1f:20:71:24:
9a:e6:1e:95:d1:a4:27:f7:e2:fc:a4:c8:2f:14:d4:
c2:96:9c:53:b3:97:dd:e7:c7:86:78:3b:46:1a:cb:
ac:56:5b:ca:ba:52:68:da:97:a6:2c:67:de:fc:41:
b3:b4:32:fb:14:43:a1:14:6e:e5:6a:a0:7a:da:26:
ce:89:0a:af:4d:70:fb:6b:f9:72:85:67:43:c6:d2:
d3:10:a6:94:78:70:3d:c3:13:fa:04:f5:e8:41:a2:
eb:9e:83:05:82:bf:43:1a:4e:e4:0e:fb:62:98:3f:
16:22:82:af:59:a4:72:1b:13:b2:e6:11:6c:de:24:
e0:9c:aa:3e:ee:e8:5c:db:29:21:9b:14:a1:39:f1:
cb:05:2b:fd:c5:f7:05:86:35:57:e8:59:25:8a:fd:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:36:94:2A:8B:A7:2C:5E:B8:74:03:AE:08:F3:8E:7A:CE:D3:C9:A6
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a3:12:28:ff:2e:76:69:7f:39:1f:9e:ee:08:23:4d:5a:00:
1c:2e:b0:fa:b6:ba:9f:ea:9c:24:b3:aa:57:e1:67:53:6e:f3:
9f:7c:f9:69:24:23:62:40:80:bf:6f:16:9d:c6:ba:91:ab:ab:
42:e4:1d:e2:28:14:59:a1:39:78:3b:a7:aa:3a:ea:62:0f:4a:
7c:37:66:02:91:8f:ad:e5:c5:a3:99:d9:d1:43:82:87:f1:a7:
a0:88:1a:8c:fe:b8:a2:4b:4f:01:9b:39:26:da:42:f6:1d:94:
94:6e:c1:aa:28:6d:47:60:76:54:6a:00:47:2f:e7:52:fb:ff:
4c:5c:98:86:4c:10:15:3a:88:e6:5d:be:7e:06:b6:41:c2:eb:
44:38:80:e4:28:b4:7d:3d:c0:8c:6c:65:4f:ba:89:ab:01:0d:
a2:e6:4e:73:bf:5a:e6:58:1d:4d:8b:0c:7d:af:87:03:a0:cb:
cb:8e:ee:f0:8e:08:97:78:ed:af:0c:34:e9:24:34:dd:d2:43:
81:50:35:04:c2:cd:cf:46:87:1c:19:39:7f:5d:32:22:b2:8d:
12:9a:0f:51:b8:ec:e8:76:bd:35:a8:49:1f:ba:56:86:22:c8:
ff:83:c5:ad:58:0f:ba:5c:b3:e1:4c:4f:27:1e:80:ef:24:bd:
eb:ba:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:53 2026 by rpki-client