Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
File: EkQqmE1AazYwQ34q7JxTDQ4blcg.mft (raw, json)
Hash identifier: ePHKgreQfOb52YNvVQeU1WY0JlFWZeigG0s534OIRJk=
Subject key identifier: 2B:5D:B0:4B:0D:4E:A0:0A:82:E6:93:FA:1E:9A:4D:6F:EA:C7:CA:05
Authority key identifier: 12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
Certificate issuer: /CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Certificate serial: 019F8FB573400E4CA5DEB3D1F11A3410A70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
Manifest number: 0204
Signing time: Thu 23 Jul 2026 16:01:00 +0000
Manifest this update: Thu 23 Jul 2026 16:01:00 +0000
Manifest next update: Fri 24 Jul 2026 16:01:00 +0000
Files and hashes: 1: EkQqmE1AazYwQ34q7JxTDQ4blcg.crl (hash: pjWQ/CNjDo5JFH33vf8maqww5ZgaUSSAX2yFiYaSbSU=)
2: U8iAmFlOu7jnq03KN9YX2p3mkGo.asa (hash: 26B7BqJLnY5LyTXfl2t8zYzSCm7kCwZWjNMieaPc1fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:73:40:0e:4c:a5:de:b3:d1:f1:1a:34:10:a7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Validity
Not Before: Jul 23 16:01:00 2026 GMT
Not After : Jul 24 16:01:00 2026 GMT
Subject: CN=2b5db04b0d4ea00a82e693fa1e9a4d6feac7ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:de:45:c2:fd:e2:db:f1:82:5a:78:96:2b:
b4:97:bd:f0:46:7a:27:c4:96:86:ec:43:51:6c:09:
4c:41:00:36:7e:95:6a:17:2d:b0:74:a5:81:fe:a1:
5e:3d:9b:c1:60:7f:1c:43:cd:46:0c:f6:f5:ec:51:
17:50:ff:77:96:a1:67:3d:a2:c1:71:52:19:3f:38:
6c:56:95:9d:80:58:14:af:9e:e9:dd:20:05:e7:18:
45:c3:f4:0c:6b:a9:67:9c:ae:7b:6e:b5:3c:11:8a:
60:35:b6:ba:4d:a9:ae:03:c8:6a:38:87:d4:e7:53:
64:d4:04:f2:e2:52:dd:5c:58:35:17:14:9c:c9:0a:
35:4d:4a:8f:3c:4c:7b:76:7e:50:3d:6a:84:7f:12:
e8:6d:a7:10:84:7b:23:c2:90:da:cb:57:57:92:ef:
c8:7b:20:b6:64:2f:c2:60:02:f6:84:38:30:51:36:
16:09:8d:6c:dc:cf:5c:b6:d6:6d:81:ca:6b:45:e5:
8a:a0:8d:0e:fd:6e:fc:53:58:bd:be:62:a8:e3:1c:
8c:b5:3c:9d:7a:dd:c1:12:6e:e7:0e:72:be:f3:15:
be:f2:62:7c:11:22:59:09:cb:49:bf:c5:96:2a:8b:
11:72:27:60:b0:ef:f0:ef:37:d4:de:8f:17:73:5d:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:B0:4B:0D:4E:A0:0A:82:E6:93:FA:1E:9A:4D:6F:EA:C7:CA:05
X509v3 Authority Key Identifier:
keyid:12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:30:85:73:f7:5c:8b:69:66:3d:e5:30:b1:b0:94:c0:fc:c0:
bf:0f:af:db:c6:20:21:47:ae:5b:35:d1:a4:7a:28:9c:54:5e:
c2:01:88:7d:1d:4c:92:0c:4e:ec:bb:75:dd:cb:14:29:11:09:
ba:c6:4d:46:32:08:1d:1b:f7:d8:0a:4f:3c:bc:44:b2:ba:d3:
94:12:f8:24:f8:2a:46:d3:d1:54:f6:36:49:d4:be:03:f6:52:
72:d9:96:d8:1b:f9:23:6f:e5:86:0d:f5:6b:b3:c7:ce:4d:d0:
1c:73:e5:c8:03:77:28:56:d8:50:a4:be:5e:e2:fe:02:1c:d5:
e3:8f:ac:94:43:b3:40:90:72:fe:77:d4:72:02:7c:a6:cf:e6:
48:13:ee:3d:e5:99:4c:1c:29:c5:7b:3a:71:80:ec:fb:1f:9d:
e6:39:10:cd:e7:90:13:06:ea:41:8d:53:21:e5:d1:d6:9d:ca:
24:c0:82:77:96:d5:fe:bc:1b:20:bb:91:5f:5d:b0:b9:b7:65:
3a:ee:55:8a:f7:89:66:5c:bb:2e:7f:0e:9e:7f:ba:51:57:ba:
90:37:bc:13:c4:47:af:c7:7f:26:07:e3:ef:ae:66:64:51:ef:
ff:ce:a7:ba:19:8a:1a:d1:a4:72:91:d9:cb:4a:56:b4:63:c2:
2e:9e:95:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtXNADkyl3rPR8Ro0EKcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDQyYTk4NGQ0MDZiMzYzMDQzN2UyYWVjOWM1MzBkMGUx
Yjk1YzgwHhcNMjYwNzIzMTYwMTAwWhcNMjYwNzI0MTYwMTAwWjAzMTEwLwYDVQQD
EygyYjVkYjA0YjBkNGVhMDBhODJlNjkzZmExZTlhNGQ2ZmVhYzdjYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOneRcL94tvxglp4liu0l73wRnon
xJaG7ENRbAlMQQA2fpVqFy2wdKWB/qFePZvBYH8cQ81GDPb17FEXUP93lqFnPaLB
cVIZPzhsVpWdgFgUr57p3SAF5xhFw/QMa6lnnK57brU8EYpgNba6TamuA8hqOIfU
51Nk1ATy4lLdXFg1FxScyQo1TUqPPEx7dn5QPWqEfxLobacQhHsjwpDay1dXku/I
eyC2ZC/CYAL2hDgwUTYWCY1s3M9cttZtgcprReWKoI0O/W78U1i9vmKo4xyMtTyd
et3BEm7nDnK+8xW+8mJ8ESJZCctJv8WWKosRcidgsO/w7zfU3o8Xc10G1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtdsEsNTqAKguaT+h6aTW/qx8oFMB8GA1UdIwQY
MBaAFBJEKphNQGs2MEN+KuycUw0OG5XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtRcW1FMUFhell3UTM0cTdKeFREUTRibGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMjJiZTItM2Q1OS00OGUxLWEzYTkt
NTA1NWVmODRhMGRlLzEvRWtRcW1FMUFhell3UTM0cTdKeFREUTRibGNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMjJiZTItM2Q1OS00OGUxLWEzYTktNTA1NWVmODRhMGRl
LzEvRWtRcW1FMUFhell3UTM0cTdKeFREUTRibGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTCFc/dc
i2lmPeUwsbCUwPzAvw+v28YgIUeuWzXRpHoonFRewgGIfR1MkgxO7Lt13csUKREJ
usZNRjIIHRv32ApPPLxEsrrTlBL4JPgqRtPRVPY2SdS+A/ZSctmW2Bv5I2/lhg31
a7PHzk3QHHPlyAN3KFbYUKS+XuL+AhzV44+slEOzQJBy/nfUcgJ8ps/mSBPuPeWZ
TBwpxXs6cYDs+x+d5jkQzeeQEwbqQY1TIeXR1p3KJMCCd5bV/rwbILuRX12wubdl
Ou5ViveJZly7Ln8Onn+6UVe6kDe8E8RHr8d/Jgfj765mZFHv/86nuhmKGtGkcpHZ
y0pWtGPCLp6Vbw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:26 2026 by rpki-client