Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json)
Hash identifier: FSm/Rs8eyk3W2Bfr8+d6X3nJKvs1lYhpdDkDvtBZcJU=
Subject key identifier: D9:25:98:A0:7B:18:D4:60:6C:EC:5F:5F:4B:45:2E:2C:40:52:CD:6A
Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969
Certificate serial: 019D26962159BEA38A21D41628E9F6C926CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
Manifest number: 026A
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: qtqv49yyU4VcOIdfTrHdk56j6nX2nC4bazHmTOePPjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:21:59:be:a3:8a:21:d4:16:28:e9:f6:c9:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=d92598a07b18d4606cec5f5f4b452e2c4052cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:da:36:3b:d0:8b:e1:6e:bf:28:d8:fc:2a:
36:48:60:76:36:4f:19:51:a1:ea:e7:b8:48:f7:65:
82:ee:a8:f6:da:52:1b:c9:64:89:1e:af:0c:fc:32:
51:59:ed:f9:1f:b8:45:b4:3d:e9:c6:ef:b9:55:ee:
de:14:1f:1d:af:43:cc:b9:e3:37:2d:f0:e9:48:b2:
77:46:53:e6:c8:83:1a:ce:38:84:b1:74:f7:d2:9b:
b1:3e:ec:61:e8:76:48:da:ab:ff:02:6e:37:21:6f:
f3:15:6b:f3:e5:78:bd:70:46:b0:ca:30:59:e5:df:
ae:d9:c5:62:d9:f7:5b:a8:6f:43:ea:fd:f9:0c:d4:
f4:48:48:e3:b0:fd:83:83:2c:e2:e3:df:28:fd:0a:
2d:15:b2:04:25:75:36:5a:ae:40:6b:12:3d:2a:40:
6c:87:68:67:9b:36:02:04:68:50:2d:64:bb:34:a3:
b5:46:ff:89:4f:d3:77:a3:82:15:ac:4c:61:07:de:
32:e6:58:90:c7:a5:72:f2:d6:ac:08:bf:ed:89:4e:
2a:8d:8e:d3:de:59:fd:0d:9b:de:d1:b0:4e:22:27:
4d:2f:6a:d5:29:02:f1:77:d9:76:e9:62:8d:bc:48:
a0:c6:ed:77:56:8e:ea:f0:82:a1:07:aa:f3:23:b4:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:98:A0:7B:18:D4:60:6C:EC:5F:5F:4B:45:2E:2C:40:52:CD:6A
X509v3 Authority Key Identifier:
keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:83:e4:06:2b:46:4f:e7:25:15:fe:e2:e0:51:5d:64:d8:
a7:9d:71:1a:be:f7:c4:d9:d3:4e:11:5c:ef:ae:28:73:90:61:
09:38:59:53:72:0c:26:34:e0:62:a3:52:bd:28:e8:31:31:50:
7b:76:38:13:86:ae:36:1d:78:2f:02:83:32:d0:7a:8e:e1:1b:
ff:cd:e0:69:dd:fb:5d:74:49:a1:fb:a4:07:b9:54:93:b3:dc:
f8:d6:07:f0:3f:51:c0:da:f3:e2:82:61:b8:ae:77:b4:e9:2b:
11:11:01:39:0b:ef:ac:2e:9f:91:9f:57:71:bd:b7:e2:70:fa:
27:2c:4a:40:c3:87:c2:c8:00:7e:1f:b9:36:50:e8:f6:d2:e8:
07:8f:40:e8:27:cb:df:57:75:6d:0b:14:50:e0:f1:bc:1f:bb:
60:eb:03:b5:fc:6e:63:87:73:5d:3d:99:85:ad:c1:aa:03:ca:
95:f9:fa:80:f8:3f:3f:3b:b1:64:c6:78:06:4f:e7:1d:d2:52:
3e:ea:f4:da:0c:9a:40:ef:22:2d:21:20:58:77:8a:0d:31:e1:
57:be:48:27:79:4a:d0:c9:e0:2c:ed:f6:43:ab:d1:33:cb:42:
19:48:d4:70:96:58:91:96:e6:eb:4a:59:4e:7a:52:1c:e8:a0:
23:4f:24:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mliFZvqOKIdQWKOn2ySbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0
Njc5NjkwHhcNMjYwMzI1MjAwMTA2WhcNMjYwMzI2MjAwMTA2WjAzMTEwLwYDVQQD
EyhkOTI1OThhMDdiMThkNDYwNmNlYzVmNWY0YjQ1MmUyYzQwNTJjZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTzaNjvQi+FuvyjY/Co2SGB2Nk8Z
UaHq57hI92WC7qj22lIbyWSJHq8M/DJRWe35H7hFtD3pxu+5Ve7eFB8dr0PMueM3
LfDpSLJ3RlPmyIMazjiEsXT30puxPuxh6HZI2qv/Am43IW/zFWvz5Xi9cEawyjBZ
5d+u2cVi2fdbqG9D6v35DNT0SEjjsP2Dgyzi498o/QotFbIEJXU2Wq5AaxI9KkBs
h2hnmzYCBGhQLWS7NKO1Rv+JT9N3o4IVrExhB94y5liQx6Vy8tasCL/tiU4qjY7T
3ln9DZve0bBOIidNL2rVKQLxd9l26WKNvEigxu13Vo7q8IKhB6rzI7QTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNklmKB7GNRgbOxfX0tFLixAUs1qMB8GA1UdIwQY
MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct
MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm
LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMiD5AYr
Rk/nJRX+4uBRXWTYp51xGr73xNnTThFc764oc5BhCThZU3IMJjTgYqNSvSjoMTFQ
e3Y4E4auNh14LwKDMtB6juEb/83gad37XXRJofukB7lUk7Pc+NYH8D9RwNrz4oJh
uK53tOkrEREBOQvvrC6fkZ9Xcb234nD6JyxKQMOHwsgAfh+5NlDo9tLoB49A6CfL
31d1bQsUUODxvB+7YOsDtfxuY4dzXT2Zha3BqgPKlfn6gPg/PzuxZMZ4Bk/nHdJS
Pur02gyaQO8iLSEgWHeKDTHhV75IJ3lK0MngLO32Q6vRM8tCGUjUcJZYkZbm60pZ
TnpSHOigI08kBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:59 2026 by rpki-client