Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: N2EMgzFd09OOCf4qXI+fwH6EH0M84NFQg+i/rrGmqSc=
Subject key identifier: E9:7B:D4:C8:98:F1:E2:09:54:1C:26:17:90:98:19:34:17:F8:92:1B
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019E1FB5D69F5840B0D9D131DD97DFBD741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 126E
Signing time: Wed 13 May 2026 05:01:11 +0000
Manifest this update: Wed 13 May 2026 05:01:11 +0000
Manifest next update: Thu 14 May 2026 05:01:11 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: GL2Dcyz0WvEY3w9QqHobJrypXjn0gHazhqYug55NrLs=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:d6:9f:58:40:b0:d9:d1:31:dd:97:df:bd:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: May 13 05:01:11 2026 GMT
Not After : May 14 05:01:11 2026 GMT
Subject: CN=e97bd4c898f1e209541c26179098193417f8921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:0a:3f:00:56:60:c2:9f:11:ee:7b:56:6e:
fe:16:af:a3:b9:97:2e:04:19:0a:07:72:fa:e0:d7:
4c:a5:80:fd:b5:1b:1c:51:8d:8b:52:bb:56:dc:20:
4c:ac:46:9f:22:8a:32:d6:26:bb:80:38:04:68:56:
0d:f9:9d:44:03:42:28:5a:9d:7c:89:e2:fd:ea:59:
1e:ed:89:f3:7c:e7:c5:4a:8e:72:b5:c7:1e:03:8b:
ba:a2:e5:46:bc:d3:57:76:2d:f4:b2:dc:a7:bc:9c:
53:3b:2a:ed:f7:47:28:83:db:10:3b:df:6e:b7:fa:
af:4e:fc:c1:67:a0:8a:10:c4:da:03:86:1c:ac:00:
55:c7:90:d5:9a:08:1e:c5:a9:65:83:db:30:df:e7:
a5:b3:23:61:68:a0:a7:40:00:57:af:32:df:5a:ce:
77:92:f2:1a:be:b9:0b:22:6e:90:45:04:35:b0:18:
1a:e2:58:84:00:7b:58:9e:c2:ff:a4:ca:64:dd:b8:
56:62:73:af:e8:8b:ba:2a:7a:66:1a:3f:3a:13:ee:
ba:bd:73:8f:19:21:ba:90:6e:29:6c:0f:c2:d0:c3:
d3:74:57:96:30:e3:b8:7a:c4:27:ae:79:90:bf:0f:
f9:5b:c3:47:3b:bb:3b:0e:fc:7d:1c:a9:6e:d4:ec:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:D4:C8:98:F1:E2:09:54:1C:26:17:90:98:19:34:17:F8:92:1B
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:3b:8a:dd:c1:4a:4a:f9:5e:bf:4f:39:d1:f9:4b:35:2b:
1e:a4:ff:a8:40:00:d6:68:73:6b:f6:a4:b9:6e:47:2b:44:9b:
52:66:66:42:2f:5a:8a:12:82:cb:e8:ab:3e:aa:2c:f9:60:95:
c7:99:56:49:81:b0:3b:58:ed:b8:37:b3:8b:c7:26:7d:96:b9:
3d:11:8b:82:37:d7:98:1b:d8:58:da:63:1d:1a:c7:90:72:79:
11:ba:fe:7f:40:c2:4e:d9:f1:80:3d:51:6b:a9:4c:ad:59:0c:
ec:3a:aa:5c:7c:32:8b:30:f5:64:0f:ad:95:0d:f0:5b:c0:80:
76:7e:13:eb:b6:7d:f5:c4:77:ea:6f:dc:4e:f3:d3:49:d6:81:
95:20:af:3b:5a:e7:04:1c:0e:00:6a:27:2a:6f:a3:ab:a2:82:
d3:2f:01:f4:74:85:86:01:a1:02:60:ba:8c:7b:38:9c:1c:7c:
9d:b7:ba:6f:4e:af:6a:bd:13:da:f4:1c:18:08:08:b2:c0:cf:
f1:87:bf:5b:f0:3f:8b:44:1e:d1:70:83:b2:6a:fa:96:f5:f1:
9a:69:03:52:95:2b:4d:6d:41:95:a6:20:cb:3e:b2:40:c7:c0:
b2:79:52:ca:44:0f:17:0f:9b:24:f0:65:ba:59:26:98:80:1e:
13:1d:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:05 2026 by rpki-client