Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: O+LMWjCEZvJrX9eyKR2FSBPbwH4Er8h9BqARpt3LO3Q=
Subject key identifier: 7F:BF:15:4A:59:7F:EA:41:5F:5D:B6:CB:49:6A:A3:17:3A:30:27:BD
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019D27DF843C3A1F0F1AC1604A94B2056ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: 7IF32onzwLcwj+FQV+6+agIO2YEiQ0W9Jgbm+tVrN40=)
2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:84:3c:3a:1f:0f:1a:c1:60:4a:94:b2:05:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=7fbf154a597fea415f5db6cb496aa3173a3027bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:75:5a:fd:bb:38:db:82:43:a2:2d:c8:9b:
20:50:b3:af:aa:51:af:fd:ce:62:06:60:d6:8b:d2:
3b:3d:7e:09:c9:7d:0c:ea:3f:42:66:d3:be:b0:26:
f4:78:e0:b2:e3:3b:76:03:2d:8c:c8:32:33:30:d4:
b0:28:97:bd:d4:58:c6:ab:d7:9b:6f:af:cb:ef:22:
6b:86:e5:8a:a2:ef:6f:48:50:aa:c9:d7:c3:0b:3b:
e4:7d:4f:0d:95:6e:30:79:4c:39:bc:62:b7:fa:16:
47:d5:69:a5:06:69:9f:72:74:16:d6:01:9b:c2:b0:
59:4b:9e:be:b2:0a:4e:ae:69:b3:24:14:2e:a5:b9:
48:a7:89:a7:3f:4e:5e:34:eb:5f:e9:76:33:e9:64:
84:c5:12:f1:f8:28:4e:ed:85:f1:79:93:17:38:ff:
ed:e3:af:82:50:10:28:7b:0b:24:b8:c8:cc:5f:55:
c5:16:a2:c9:f1:49:f0:23:90:66:9f:75:8c:81:35:
c0:11:33:f7:d8:77:bd:8a:f3:87:a8:94:5a:c1:25:
ba:49:2e:e5:13:7b:c9:22:ac:13:16:bd:de:4a:32:
09:27:27:69:a7:a3:65:63:5f:ef:54:49:62:0b:cb:
11:32:20:f4:96:a3:02:20:4f:31:bb:f0:99:a4:0b:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:15:4A:59:7F:EA:41:5F:5D:B6:CB:49:6A:A3:17:3A:30:27:BD
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:07:7a:77:3e:bf:b4:f3:1f:9f:58:fe:9f:25:71:2f:4a:
21:03:e2:05:df:6c:42:5a:2f:35:32:f0:fb:92:5a:e3:a4:34:
b6:6e:d7:08:7f:01:2c:0f:65:15:24:13:0e:7c:3b:7a:af:3f:
ba:c4:a8:f0:4c:85:ee:7f:73:36:12:38:83:78:18:ee:0a:50:
c1:69:65:5d:18:05:92:30:16:17:98:da:81:29:86:1a:5b:03:
95:70:92:c5:21:ef:ad:7f:4d:38:ec:d1:d0:cf:80:f0:64:10:
44:37:c4:52:9f:f0:18:d9:a8:f3:71:d7:39:ac:e2:19:21:5c:
e1:d9:b2:5c:df:0c:f8:1c:dd:5b:5c:c2:6e:7b:13:57:d4:cb:
c1:25:19:1b:2f:2d:a1:11:f2:3c:ae:09:22:3c:3c:00:c4:c5:
d7:dd:ad:82:dd:4f:89:11:ca:e7:54:bc:89:df:73:d4:49:b0:
11:4e:a4:54:5f:d4:c3:cc:be:ae:87:34:7f:44:c2:92:70:6c:
5e:ce:b7:6b:21:6a:39:09:9c:61:25:db:bb:ba:ff:6b:4a:eb:
7c:ca:b9:21:09:d9:20:fb:34:22:e1:2d:15:5e:8d:5f:16:f2:
0d:65:9f:db:c8:e0:5c:98:2f:82:4e:94:a0:45:8a:a1:b2:c2:
2e:92:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:55 2026 by rpki-client