Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: ILxHxUfKZMl72W+wiPT6y14urOJ60CHUflATBjJEByg=
Subject key identifier: 47:C7:4E:2C:57:94:4A:FE:EB:E0:25:D8:27:03:7B:42:BD:2B:41:88
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 01A0D3EFE1F30C6285C27AAB81433247EC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 14E6
Signing time: Thu 24 Sep 2026 15:01:48 +0000
Manifest this update: Thu 24 Sep 2026 15:01:48 +0000
Manifest next update: Fri 25 Sep 2026 15:01:48 +0000
Files and hashes: 1: CWHHJeYwgvu_DkfFEA9PpyyrrFU.roa (hash: oofrp1EIh2uZ/w767SyVcjsAPCoRcbFcavREaGG+ayc=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: Q5s+cciVpJfEPPSeCm4KRKePxg/peAq/gAtwIPsNZ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:e1:f3:0c:62:85:c2:7a:ab:81:43:32:47:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Sep 24 15:01:48 2026 GMT
Not After : Sep 25 15:01:48 2026 GMT
Subject: CN=47c74e2c57944afeebe025d827037b42bd2b4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:23:95:97:ec:90:3b:bc:bd:c2:0c:36:8f:
4e:62:c4:06:48:bd:3f:d8:e7:02:ba:5b:ca:11:29:
e6:a3:69:d6:4f:81:94:9b:0e:72:65:14:79:80:8c:
ae:0d:37:a4:e2:20:f7:98:e6:00:fc:78:92:04:85:
f3:3b:6e:1b:c5:2b:02:86:5c:7f:4a:e3:c7:9e:68:
bf:b5:a7:45:03:a5:ad:e9:62:60:bc:a4:79:8b:18:
39:0a:d0:cd:eb:3c:4e:17:c5:2e:b0:0f:28:8f:67:
05:a6:d9:b5:3a:c6:7c:77:ac:b6:1a:8d:1e:1a:aa:
48:ed:c9:51:89:cc:f1:81:f5:38:0d:95:7a:57:48:
1c:02:ce:05:07:5b:a7:75:46:8d:28:aa:00:b9:ad:
c8:7e:90:13:28:c1:19:9a:43:e2:96:2d:8a:4c:26:
7e:42:d3:9e:ae:db:d4:ff:95:86:f3:8c:db:0a:2b:
31:e5:0f:50:3c:0a:f0:d3:e2:a3:70:5e:1b:5e:29:
15:68:c1:41:a6:71:3b:d4:ce:7e:7c:83:09:21:21:
0e:4c:c4:96:3b:9a:88:d9:aa:98:59:cd:f1:bf:fc:
c2:f9:37:6e:4a:df:a8:e1:f8:4b:91:a4:50:38:9c:
c3:a5:32:85:41:44:0d:a5:80:b2:e7:59:1d:62:43:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:4E:2C:57:94:4A:FE:EB:E0:25:D8:27:03:7B:42:BD:2B:41:88
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:b8:58:dc:6e:1f:34:48:e4:34:32:06:20:05:68:03:58:
52:8d:59:85:b6:3d:c2:b0:ac:db:42:e7:47:bc:13:87:c8:e6:
c5:64:b0:dd:81:92:9d:1c:d4:06:c1:14:1e:b7:49:a0:1f:c7:
41:0f:11:ba:82:db:1b:ab:92:91:3b:73:b2:f4:ff:38:c6:0f:
fd:53:5b:14:71:fc:10:77:61:22:35:b9:85:df:14:f2:ed:7c:
0c:1a:cb:0e:9c:04:83:bc:21:23:01:5e:e3:95:8a:f7:cb:5b:
31:e9:47:0f:fe:c0:70:81:8e:87:ca:1d:c1:89:5a:06:c9:cf:
a3:cd:0f:40:cb:42:49:20:f2:76:df:bb:48:86:05:00:7d:04:
55:77:c9:64:20:da:dc:1c:f3:07:61:29:0f:34:d4:9c:09:11:
3e:dc:ca:48:f9:d5:c6:af:fd:a7:aa:87:34:d6:c6:dc:99:aa:
f0:3c:62:12:0a:40:a5:aa:8e:36:db:74:55:14:d9:c0:89:33:
a1:5a:c8:d3:b4:20:3b:50:bb:d2:90:27:16:7c:1b:57:a2:4e:
5b:40:f0:da:70:9e:8a:00:56:8c:9f:07:a3:0b:22:6c:b3:4a:
86:f6:9b:61:db:77:bb:18:26:5d:8b:d7:f8:79:f9:0f:c7:4b:
07:a2:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:35:43 2026 by rpki-client