Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: qzOifZGLKYljM9OgyLsExaRpTup4Qlb6ouuZfP1OR6s=
Subject key identifier: FB:72:DE:40:8C:39:F3:F5:9D:D3:35:33:93:BE:DF:E2:5F:13:66:02
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01A1DACAA641414B8E8379A972592DB267FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 120F
Signing time: Sat 14 Nov 2026 16:01:16 +0000
Manifest this update: Sat 14 Nov 2026 16:01:16 +0000
Manifest next update: Sun 15 Nov 2026 16:01:16 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: 7OyxFaVsi5KK6dw1rLQwxhB4JdshTzdSodnsQPu8/SE=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:a6:41:41:4b:8e:83:79:a9:72:59:2d:b2:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Nov 14 16:01:16 2026 GMT
Not After : Nov 15 16:01:16 2026 GMT
Subject: CN=fb72de408c39f3f59dd3353393bedfe25f136602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:2e:44:a5:18:58:a3:2d:82:52:cc:5a:d6:
f5:a6:4a:8e:2a:07:35:af:4e:81:fb:53:72:55:a4:
fb:cd:d1:5f:2d:23:32:ef:78:15:8c:3a:82:46:7d:
56:d2:45:d5:c8:7d:ae:b2:33:65:a8:90:17:14:b6:
6e:e1:01:ad:bf:5c:85:67:2b:7a:6c:cb:7c:82:b9:
1c:96:9a:39:90:bd:92:4f:8f:0c:85:a9:59:12:8e:
27:83:04:50:dc:75:9b:40:c9:7f:89:e7:f1:f4:b4:
cf:43:3c:33:64:8a:88:58:ef:93:fc:1b:8d:5f:84:
5f:42:de:63:50:e7:0e:c8:33:40:26:0f:8e:4f:68:
7b:e8:96:20:7a:bb:8a:6f:65:fb:4b:67:c5:04:32:
c2:93:2b:48:1c:b8:a5:ba:76:3c:41:48:cf:97:85:
97:dd:03:46:4a:0a:02:a3:33:ac:69:32:fa:98:7c:
fe:07:02:b8:46:fb:41:8d:0a:9e:35:38:91:26:80:
64:5b:ae:2e:e0:51:90:76:a1:38:3f:08:bc:6f:29:
bd:0f:23:dd:54:e1:dc:ac:ea:09:d2:12:eb:ee:a5:
67:2a:c8:f6:28:12:9b:96:fc:ae:70:7b:63:cc:11:
15:75:5f:9c:61:e0:91:80:bf:40:16:57:98:73:37:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:DE:40:8C:39:F3:F5:9D:D3:35:33:93:BE:DF:E2:5F:13:66:02
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:44:89:e1:a9:bf:7f:91:d8:ec:a7:f1:f8:a8:28:a7:f5:
c0:99:47:31:46:a3:81:92:54:79:9f:b3:bc:af:11:4c:6f:a0:
b9:8f:67:b0:43:77:96:43:25:ba:9c:3e:04:f2:ae:75:eb:f1:
f9:e9:35:dc:1e:7c:96:0c:93:6c:35:97:33:28:8f:4c:0f:82:
de:4f:9d:e3:96:2a:b0:56:40:84:04:19:2c:6c:07:70:45:90:
08:2f:9e:aa:dd:11:ae:b3:85:b2:d4:24:ae:35:1c:a4:f2:3b:
9c:40:aa:26:04:4b:8b:6f:9e:97:6e:f3:30:bb:a6:3f:a2:32:
e4:12:21:2e:77:63:62:b1:94:c7:8f:b9:f6:d4:24:d4:91:f1:
c9:b4:f3:bd:9a:aa:19:9b:95:9f:ae:86:70:05:bd:69:9b:0f:
76:d3:dd:8b:e7:85:a4:42:94:a7:13:f9:5d:72:4b:4f:bb:6e:
40:e3:f7:ab:33:f1:12:2a:f0:e3:5c:8e:a9:bd:28:ce:92:dc:
2a:2d:9e:ca:20:2a:ed:6c:8a:02:f0:3f:05:12:81:b9:6e:75:
97:62:74:ae:a7:1c:59:5b:00:d5:cc:1c:70:7d:31:80:a3:ea:
a3:6f:0a:0b:4a:f0:c5:22:52:ff:24:c5:bb:ac:b0:72:12:52:
ac:70:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:45:22 2026 by rpki-client