Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: dc93UpkHw7/hm+yc6d6IBv/Q/aKIvxSyBBPUHd5hlEE=
Subject key identifier: F1:D4:FD:A9:D9:EA:7A:C1:E2:F2:B5:74:BF:2A:A4:1E:14:D9:B6:51
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019D2884B7554BA79E3626DCF47B493BEBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 149A
Signing time: Thu 26 Mar 2026 05:01:19 +0000
Manifest this update: Thu 26 Mar 2026 05:01:19 +0000
Manifest next update: Fri 27 Mar 2026 05:01:19 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: /YTTjQypfFkta1yM5vwlxrkD4B2nbZzAmqyVGAgv2oo=)
2: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (hash: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b7:55:4b:a7:9e:36:26:dc:f4:7b:49:3b:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Mar 26 05:01:19 2026 GMT
Not After : Mar 27 05:01:19 2026 GMT
Subject: CN=f1d4fda9d9ea7ac1e2f2b574bf2aa41e14d9b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:7a:19:7d:a9:34:bb:d3:ce:37:77:e3:f0:
5a:3e:8c:09:b3:1a:77:b4:e1:04:08:b5:99:d1:7e:
1f:37:69:ac:16:a6:f5:f5:a3:c0:26:8c:3c:0a:b2:
a8:37:91:6a:2e:08:b7:ef:05:9c:a1:ec:bd:2a:72:
a2:91:5e:bf:8e:d1:c5:cc:03:b8:4c:d1:bc:88:30:
d5:1b:6c:31:cf:6c:67:3a:90:e7:6e:18:2b:4d:98:
04:11:b5:a9:f4:97:bd:d5:5c:6c:4e:05:1a:9d:d1:
b6:7b:7a:b3:ef:a0:75:48:4c:89:8a:ef:db:3d:18:
e6:1f:83:d9:3a:dd:a2:b8:be:bc:10:79:23:95:05:
98:ba:b0:81:2e:bc:d2:2c:a7:8e:d8:8e:64:09:3c:
7b:55:e7:ea:35:d2:91:27:1d:75:cc:b0:07:ec:b2:
a9:08:e8:90:2c:1b:dc:c7:c4:73:19:09:68:91:7c:
34:f9:86:05:d7:47:4e:fa:a1:06:89:22:81:75:d7:
4f:69:bb:b5:e2:ae:28:f2:87:8a:86:40:06:98:3e:
f0:2e:17:0a:ad:f7:8b:70:e4:eb:50:a3:f2:f7:36:
db:0f:57:9a:b6:5e:bd:65:76:19:e1:a2:66:53:11:
33:eb:b5:bd:db:79:72:df:02:3f:37:97:37:9f:22:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:FD:A9:D9:EA:7A:C1:E2:F2:B5:74:BF:2A:A4:1E:14:D9:B6:51
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:12:91:8d:27:4c:bb:a7:87:82:e9:6c:14:17:f6:31:f1:
9f:60:0a:17:73:b0:66:ad:9d:8d:fc:0f:94:1d:42:39:3b:5f:
33:a7:8d:1b:c8:4c:8e:66:18:55:2c:83:84:3e:c7:12:24:30:
94:92:73:1f:7c:4b:18:2d:a0:19:ef:cf:15:1a:ab:c9:da:97:
6d:a6:a0:8f:da:50:df:89:79:40:26:71:0e:18:49:48:29:ee:
2b:7a:7e:7d:79:24:6e:0c:95:cf:c5:00:3f:b1:a2:71:f0:0a:
57:d4:f7:6e:fb:76:76:90:71:51:1e:1a:d4:ac:3b:93:a1:b6:
93:b0:26:0d:13:6a:92:6e:c7:34:8c:f2:55:d2:82:06:05:c1:
7c:dc:ce:cf:20:c4:b9:bb:21:1d:7b:37:a9:a9:70:91:35:66:
df:f9:0b:f7:d2:16:7b:91:3c:27:d6:c4:84:7e:bb:8c:17:95:
d2:58:82:1f:8b:68:74:18:99:ca:41:e0:d4:f2:8b:1e:da:cb:
ac:25:9d:8f:5f:90:9f:62:8f:66:8b:b9:36:25:7a:a7:66:59:
da:e0:57:53:02:44:80:34:d3:70:be:8a:ca:23:75:60:93:0d:
d3:a2:7d:ce:43:36:ea:aa:83:c0:61:99:94:a2:5c:7d:a3:3a:
8a:63:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:13 2026 by rpki-client