Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: F3w9f66JfpXhOdG7o6yNidQB1+sm7fU99BH6nj3rKGE=
Subject key identifier: 42:F5:A5:9B:AE:61:F5:60:C7:6A:78:79:2E:EA:60:93:C9:48:9E:12
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019D2696604748558350ECC9B16CAD2451D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 11ED
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: wjJK9pkdxa+T7zz6nyltdT5xp7hvXKBPOgBys9tVmLM=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:60:47:48:55:83:50:ec:c9:b1:6c:ad:24:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=42f5a59bae61f560c76a78792eea6093c9489e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:87:85:a8:44:75:db:f1:31:c1:8e:8e:cf:
e6:15:9b:b9:58:fa:6b:39:73:e5:e8:4f:d7:2c:af:
0a:ff:ea:ed:db:c7:37:98:3d:54:d2:80:f4:89:36:
77:b0:cb:92:7f:42:4a:d6:4d:5c:01:e5:4e:38:a6:
c3:b2:a0:db:5b:52:2e:7e:02:62:d6:a1:06:41:c7:
67:8f:e6:6d:e9:d6:c8:fa:1d:7b:90:da:e1:63:27:
af:e9:8d:d5:45:22:8b:ce:a3:14:1f:5d:85:75:37:
3e:e7:a8:e9:f8:fb:55:cf:72:0b:01:c8:47:f4:06:
fe:bb:18:d2:cb:00:00:a7:58:a4:f9:2d:9b:7e:67:
67:17:18:21:c5:2d:3a:66:bf:db:8f:71:8d:d5:2d:
29:81:46:4f:27:fd:97:ba:ac:cb:cc:a5:6d:7a:81:
69:5e:bb:0c:eb:68:69:ab:3a:16:3e:8f:91:eb:cf:
ce:ec:67:65:91:b1:45:ce:5c:c1:ba:8c:61:8e:5d:
65:e9:81:5b:c2:5c:dc:6c:3a:a6:b0:26:c0:1f:9a:
9a:f1:88:2f:aa:69:75:15:66:f5:19:c8:79:05:e8:
b5:36:70:2c:f7:4c:14:38:e5:ff:13:b5:46:a5:af:
8e:0f:db:dd:06:eb:be:07:23:30:d7:0b:38:2a:67:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:A5:9B:AE:61:F5:60:C7:6A:78:79:2E:EA:60:93:C9:48:9E:12
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:06:9a:23:66:80:5c:5c:c8:fb:12:b5:aa:85:a5:17:c3:
e5:41:35:38:9a:ee:58:dc:d6:bb:f5:52:49:b4:36:7e:d2:9e:
62:26:56:82:97:01:01:d5:47:e9:ca:ee:c0:3f:a8:23:db:af:
de:a7:a9:f1:8d:17:f0:de:ff:83:30:21:f8:e7:3e:bf:96:6a:
b2:a1:5f:cc:19:d8:71:61:11:2f:52:01:97:51:16:a6:31:2a:
50:d2:f5:11:46:93:20:78:d6:b6:6f:85:40:07:ec:c0:12:d0:
57:b5:3f:d3:3e:f5:21:75:6c:33:64:0c:66:76:76:ab:41:73:
ce:d2:40:72:2e:5a:47:50:eb:4f:05:54:4d:76:51:4d:dd:38:
ae:ca:8f:eb:14:a3:9d:38:fe:dc:af:81:5c:ab:b7:b6:12:c3:
c2:94:80:88:06:02:b2:88:45:3b:b0:df:d9:60:66:03:4c:fb:
31:64:97:31:40:f0:27:20:a6:de:4c:b0:f3:5f:cc:e1:38:f1:
9f:60:40:b5:92:f8:e3:e9:71:d6:3e:6b:87:b4:68:9a:0c:5b:
f6:70:94:a9:59:c3:16:9e:84:91:73:2d:50:43:1d:e5:0e:b7:
50:b8:8d:d0:85:89:56:a3:de:d3:11:82:cf:83:b3:2b:fb:19:
db:d1:76:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmBHSFWDUOzJsWytJFHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjYwMzI1MjAwMTIyWhcNMjYwMzI2MjAwMTIyWjAzMTEwLwYDVQQD
Eyg0MmY1YTU5YmFlNjFmNTYwYzc2YTc4NzkyZWVhNjA5M2M5NDg5ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte2HhahEddvxMcGOjs/mFZu5WPpr
OXPl6E/XLK8K/+rt28c3mD1U0oD0iTZ3sMuSf0JK1k1cAeVOOKbDsqDbW1IufgJi
1qEGQcdnj+Zt6dbI+h17kNrhYyev6Y3VRSKLzqMUH12FdTc+56jp+PtVz3ILAchH
9Ab+uxjSywAAp1ik+S2bfmdnFxghxS06Zr/bj3GN1S0pgUZPJ/2XuqzLzKVteoFp
XrsM62hpqzoWPo+R68/O7GdlkbFFzlzBuoxhjl1l6YFbwlzcbDqmsCbAH5qa8Ygv
qml1FWb1Gch5Bei1NnAs90wUOOX/E7VGpa+OD9vdBuu+ByMw1ws4KmexPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL1pZuuYfVgx2p4eS7qYJPJSJ4SMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtIGmiNm
gFxcyPsStaqFpRfD5UE1OJruWNzWu/VSSbQ2ftKeYiZWgpcBAdVH6cruwD+oI9uv
3qep8Y0X8N7/gzAh+Oc+v5ZqsqFfzBnYcWERL1IBl1EWpjEqUNL1EUaTIHjWtm+F
QAfswBLQV7U/0z71IXVsM2QMZnZ2q0FzztJAci5aR1DrTwVUTXZRTd04rsqP6xSj
nTj+3K+BXKu3thLDwpSAiAYCsohFO7Df2WBmA0z7MWSXMUDwJyCm3kyw81/M4Tjx
n2BAtZL44+lx1j5rh7Romgxb9nCUqVnDFp6EkXMtUEMd5Q63ULiN0IWJVqPe0xGC
z4OzK/sZ29F2BQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:08 2026 by rpki-client