Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: hCeOi/L2rSSuHNqepg/ttN1sLLBuIMU8DGzwLx3ziP4=
Subject key identifier: 17:67:57:89:41:0F:C4:83:4B:6A:7A:A3:5E:4A:38:C8:EE:74:90:36
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019F943662E90F1CE2E4B8C4657BE6FE11A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0446
Signing time: Fri 24 Jul 2026 13:00:19 +0000
Manifest this update: Fri 24 Jul 2026 13:00:19 +0000
Manifest next update: Sat 25 Jul 2026 13:00:19 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: Mm3M/IF98RwybCcRc67ZctjDWj643qtcdaM0BqntQik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:62:e9:0f:1c:e2:e4:b8:c4:65:7b:e6:fe:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jul 24 13:00:19 2026 GMT
Not After : Jul 25 13:00:19 2026 GMT
Subject: CN=17675789410fc4834b6a7aa35e4a38c8ee749036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:57:a6:a7:2a:a2:6d:38:32:01:ab:c0:2c:
60:9e:bb:41:4b:e2:30:eb:c9:d7:4e:48:d6:cd:0f:
69:8d:9c:e8:9b:5c:6a:32:e6:52:45:4e:15:00:2d:
96:40:cb:29:38:de:2e:f7:88:93:30:a6:31:f3:c9:
6c:e8:91:cb:fc:ce:0b:04:58:41:16:37:3e:0f:f3:
16:9a:eb:3f:b1:f4:fe:76:ae:9c:03:79:9e:a8:86:
2f:1a:3d:74:14:17:89:df:28:3d:c3:dc:e2:b3:87:
06:9d:02:fb:50:f6:a1:15:0f:e4:31:99:f9:8c:37:
92:91:02:04:f1:28:a1:3b:c2:fe:c9:ac:43:9a:07:
cb:d9:3c:d7:87:34:f0:30:1f:34:43:3f:d5:03:b8:
41:b4:45:10:c0:97:26:8a:39:f5:f0:27:7e:f6:1b:
7b:41:60:a8:b6:8d:a5:68:e3:68:55:7a:db:40:45:
d5:e0:d2:cb:0d:95:23:d6:44:a1:cd:54:98:47:d1:
d6:5d:e9:1d:76:74:52:67:56:40:75:ef:87:79:91:
50:e8:0b:44:00:72:97:4d:6c:a2:38:f0:f7:a3:df:
18:d5:fe:c8:dc:d5:dc:33:49:3f:6e:e7:94:dc:89:
25:4b:70:2e:6c:b6:ac:a6:f8:b8:33:9d:ae:56:d8:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:57:89:41:0F:C4:83:4B:6A:7A:A3:5E:4A:38:C8:EE:74:90:36
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:71:68:99:46:cf:41:d3:37:98:4b:9f:39:3d:a2:b2:75:
28:80:4d:a2:e1:e0:f0:b1:ab:ae:80:8a:d4:1f:91:0a:0f:01:
4d:a7:cc:73:92:1e:30:27:92:33:36:67:d1:e8:89:0f:72:a4:
b4:4a:54:72:8a:32:83:fb:2f:18:ce:97:30:3a:2e:ee:6c:40:
b5:d1:9d:6d:e3:44:4c:e5:ff:2b:f4:d4:3c:88:fa:b8:f1:be:
67:ac:fe:a1:4c:02:27:cc:ab:e9:36:a9:33:0d:20:aa:e7:c9:
4c:12:2b:bb:02:c4:51:4e:f7:1d:d7:95:03:f3:75:6d:7e:b0:
ec:b6:ba:97:21:c2:14:4d:0b:7b:63:4c:13:94:23:6b:d4:b8:
59:16:c5:62:5a:13:3b:f9:c1:09:ce:0f:d3:99:a7:fe:6f:72:
c0:c4:d0:5d:74:fc:17:74:d9:85:2b:97:ea:35:de:4e:27:db:
4c:e8:08:38:33:87:19:fe:96:99:82:2b:3d:b1:f1:c8:d3:b1:
fa:bb:95:ff:3a:28:77:de:0e:e8:b4:91:d0:52:a1:22:54:09:
74:e2:ee:02:78:62:65:e0:5a:72:8e:18:bc:f5:16:61:f7:37:
db:d4:bf:de:0d:33:54:54:49:6f:90:09:34:2a:c9:10:61:9d:
de:2d:a4:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNmLpDxzi5LjEZXvm/hGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2
Yzg0NDEwHhcNMjYwNzI0MTMwMDE5WhcNMjYwNzI1MTMwMDE5WjAzMTEwLwYDVQQD
EygxNzY3NTc4OTQxMGZjNDgzNGI2YTdhYTM1ZTRhMzhjOGVlNzQ5MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlXpqcqom04MgGrwCxgnrtBS+Iw
68nXTkjWzQ9pjZzom1xqMuZSRU4VAC2WQMspON4u94iTMKYx88ls6JHL/M4LBFhB
Fjc+D/MWmus/sfT+dq6cA3meqIYvGj10FBeJ3yg9w9zis4cGnQL7UPahFQ/kMZn5
jDeSkQIE8SihO8L+yaxDmgfL2TzXhzTwMB80Qz/VA7hBtEUQwJcmijn18Cd+9ht7
QWCoto2laONoVXrbQEXV4NLLDZUj1kShzVSYR9HWXekddnRSZ1ZAde+HeZFQ6AtE
AHKXTWyiOPD3o98Y1f7I3NXcM0k/bueU3IklS3AubLaspvi4M52uVtgLfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdnV4lBD8SDS2p6o15KOMjudJA2MB8GA1UdIwQY
MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt
NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi
LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl9xaJlG
z0HTN5hLnzk9orJ1KIBNouHg8LGrroCK1B+RCg8BTafMc5IeMCeSMzZn0eiJD3Kk
tEpUcooyg/svGM6XMDou7mxAtdGdbeNETOX/K/TUPIj6uPG+Z6z+oUwCJ8yr6Tap
Mw0gqufJTBIruwLEUU73HdeVA/N1bX6w7La6lyHCFE0Le2NME5Qja9S4WRbFYloT
O/nBCc4P05mn/m9ywMTQXXT8F3TZhSuX6jXeTifbTOgIODOHGf6WmYIrPbHxyNOx
+ruV/zood94O6LSR0FKhIlQJdOLuAnhiZeBaco4YvPUWYfc329S/3g0zVFRJb5AJ
NCrJEGGd3i2k2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:34:24 2026 by rpki-client