Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 508CAtAj8OgWJbkgqgb/utzBNacl+RBaT8FM6zi7CwQ=
Subject key identifier: 11:A7:9A:04:A8:C3:10:CA:EA:8E:73:B7:B5:CC:7A:28:C4:00:36:9A
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019D25BA1EC78147F20572AA564449273D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0F9F
Signing time: Wed 25 Mar 2026 16:00:47 +0000
Manifest this update: Wed 25 Mar 2026 16:00:47 +0000
Manifest next update: Thu 26 Mar 2026 16:00:47 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: KF2ojSvbaFERMe6/Y04Ua/M2O3sXa4BtKOsACU7wEw4=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1e:c7:81:47:f2:05:72:aa:56:44:49:27:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Mar 25 16:00:47 2026 GMT
Not After : Mar 26 16:00:47 2026 GMT
Subject: CN=11a79a04a8c310caea8e73b7b5cc7a28c400369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:7f:1c:26:c6:ac:b0:aa:10:78:f9:48:64:
4d:10:20:58:9f:ec:10:08:5a:c1:d5:f7:18:a5:7c:
f3:a4:b1:ec:55:e3:25:a4:68:5c:ab:56:e2:1e:00:
b6:eb:40:83:6b:48:fd:1f:33:50:ef:a5:42:c4:da:
fe:35:d5:a0:80:be:6f:ac:ca:46:76:5d:f6:b1:60:
75:15:94:09:25:c9:ac:3e:c8:14:ec:ca:39:21:d2:
f9:12:5a:ba:6a:0c:be:14:68:a6:fe:e6:01:58:ef:
49:86:a6:19:9a:1a:e9:94:7d:c7:73:42:2f:59:6d:
53:1d:b0:83:9b:48:b3:10:e0:fc:b1:c4:80:80:11:
1b:e6:b0:fe:6a:41:ee:6b:11:50:ee:53:a3:e3:c0:
2b:cb:b8:77:56:8f:aa:72:5d:78:7a:a1:6f:46:a5:
8f:85:78:da:ad:3f:cd:84:f9:04:42:bf:05:f2:08:
9c:79:5c:8b:c5:6f:43:ad:95:15:6a:ae:e5:cc:ab:
9e:80:d7:8e:c4:6d:6b:67:6b:fd:70:6d:65:e4:89:
63:3c:d1:76:f6:9b:bf:a8:c9:7c:5d:0b:ba:28:59:
82:63:0b:c5:4c:7a:34:32:25:cb:5c:1b:27:4d:f1:
00:9b:e6:76:6d:98:1c:48:f9:df:8e:9d:56:a8:fd:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:9A:04:A8:C3:10:CA:EA:8E:73:B7:B5:CC:7A:28:C4:00:36:9A
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:21:25:d1:35:92:fa:58:ef:22:f3:40:a7:90:2a:98:c9:23:
7f:bf:1b:4d:1e:a7:4f:c5:2c:c6:61:38:82:03:e1:5b:bd:38:
25:28:f5:c0:7d:c4:46:41:bb:c5:89:9b:25:e8:3f:2c:da:78:
0e:a3:a8:5d:56:1d:0f:e1:fe:5a:ca:63:1b:19:6e:ce:e7:21:
ab:7d:a4:df:5e:fb:07:49:f6:be:71:e9:f9:e8:7a:2b:53:82:
3b:f6:6c:71:e6:a2:2a:66:1f:da:5e:9b:84:01:9b:c6:f2:16:
a4:1b:53:16:2c:5c:9a:03:26:3a:da:fc:4d:95:3a:50:66:48:
95:8d:1d:9e:78:3f:da:86:55:58:0f:a7:1b:c5:b1:d4:5c:3d:
a6:60:88:6e:b8:dc:6f:a0:e6:99:91:30:07:24:0c:85:08:13:
9c:48:70:48:7b:cb:8e:ef:99:cb:47:55:ed:e8:66:a0:8f:ed:
2b:e5:cf:c8:ab:5d:42:52:43:7e:cd:ae:3a:bd:ad:1d:42:54:
1d:85:86:2d:7b:47:b0:aa:26:6b:dc:ce:07:94:86:52:05:fd:
cc:82:39:69:3e:ca:72:9a:3d:a7:97:83:37:d1:04:2d:81:e6:
16:7e:9d:e6:3c:6f:6a:e9:3a:24:86:15:b6:b2:e2:ce:24:f4:
6a:00:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:08 2026 by rpki-client