Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 0xbgL8j1lSpGO8FVEcwGyw4clPCUsfkO6dBumypBbLM=
Subject key identifier: FC:4B:0A:B0:8A:00:50:C1:0A:FA:29:81:4F:A2:60:F5:65:DD:94:4F
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01A0D614D980ED170F377CB210B2E18EB5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 1188
Signing time: Fri 25 Sep 2026 01:01:25 +0000
Manifest this update: Fri 25 Sep 2026 01:01:25 +0000
Manifest next update: Sat 26 Sep 2026 01:01:25 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: vBztBiyRLNc683LtsG7fx/6R2yYwoWqP1XI8ALsIvVo=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:d9:80:ed:17:0f:37:7c:b2:10:b2:e1:8e:b5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Sep 25 01:01:25 2026 GMT
Not After : Sep 26 01:01:25 2026 GMT
Subject: CN=fc4b0ab08a0050c10afa29814fa260f565dd944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:5b:90:98:0e:6a:86:88:af:86:b0:a0:c4:
f6:d3:f4:84:ad:ba:5d:91:7a:29:84:6c:f5:2c:ac:
4c:20:24:dc:21:60:4f:5c:52:4a:f3:0e:f1:54:c5:
6f:63:26:ba:9a:da:04:18:9b:27:c7:f6:5d:fb:73:
52:f9:ec:c5:ac:19:77:b6:c1:c3:0e:0c:f0:ea:7b:
f3:fd:4b:7d:c4:99:1f:4c:98:d6:43:cc:54:18:b5:
31:62:ca:d8:1c:41:f0:cc:b9:72:c6:51:da:be:6f:
61:8a:16:6f:16:14:89:9a:9f:53:6b:9a:cf:d8:61:
2f:80:6d:60:33:74:4c:f7:33:02:4a:ee:8a:a5:fd:
4f:58:8f:ad:de:48:6e:68:48:95:4e:08:50:89:59:
c4:4f:bf:15:12:bd:69:c0:6e:95:e9:40:a3:86:2f:
76:a8:20:f3:81:36:c1:b0:51:eb:4d:47:59:d4:77:
06:bb:13:36:f9:80:ab:14:2a:43:cd:bc:23:75:99:
8f:fb:b1:57:53:d9:56:2a:64:12:50:b5:9e:35:fd:
d7:e6:ad:fd:d5:8c:16:fd:ce:f0:67:01:a1:b8:31:
0d:7f:32:6c:88:fb:c2:57:b3:ff:ef:bc:5c:55:75:
c5:e4:3a:c0:cf:b4:10:9b:84:5a:91:14:7d:eb:1a:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:0A:B0:8A:00:50:C1:0A:FA:29:81:4F:A2:60:F5:65:DD:94:4F
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:77:6b:11:4e:33:89:8d:4b:07:39:90:07:c6:47:9d:01:
48:6e:ed:33:0f:7e:72:68:19:86:0b:a1:f9:0e:fc:d0:43:99:
e8:47:f5:99:f5:19:0c:4c:61:ea:42:4e:f4:db:97:78:cc:ff:
0a:a6:e3:74:f8:86:b3:22:ae:a9:ae:43:ae:01:33:57:05:65:
02:af:51:aa:dd:d3:91:21:6b:f3:6b:cb:43:b2:c1:be:29:04:
f6:44:58:a1:48:e1:fa:44:3c:ad:18:b3:02:8b:c4:67:06:a3:
d2:06:ad:8e:d6:a0:ef:a6:3f:94:34:e3:69:8b:82:6c:7c:a5:
2b:cb:08:7b:c7:54:f0:3b:e5:ee:33:9c:16:95:6e:f6:3f:ba:
a5:07:2d:ae:2a:79:39:9b:98:bc:77:ca:01:02:e4:61:14:11:
43:49:84:c7:52:8b:f4:58:a1:7c:a8:4c:26:2a:44:77:a7:f6:
d8:df:42:76:67:76:b5:65:df:6b:c1:2a:88:00:e3:4f:48:6a:
7d:8f:f6:d5:c0:7f:dc:24:ec:2d:48:28:77:dd:b1:b6:f0:7d:
0d:1e:f5:d7:85:17:a2:10:20:06:f5:e7:83:44:2d:13:95:00:
07:24:46:ea:3d:be:b2:72:ba:7b:41:34:91:09:bb:a6:f2:10:
c6:25:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:24 2026 by rpki-client