Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: yjN5T2PnKt0SfGiXCWvqkN9eg6cXOWf7x2kJ6jV82n8=
Subject key identifier: 61:D8:52:57:D8:3E:CF:F4:83:58:CD:CA:33:E9:9E:4C:3C:55:9F:15
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019D27E054A8E9EE603E50184CA202FF8C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 1386
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: Oqeh59PYsxrr+S3K8mMX+TCJs79gkbLez3EGlUc0QQg=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:a8:e9:ee:60:3e:50:18:4c:a2:02:ff:8c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=61d85257d83ecff48358cdca33e99e4c3c559f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:02:79:81:56:f7:70:b2:3c:b5:f5:7a:67:
b0:28:7e:b4:7a:3a:af:eb:30:2b:43:e3:dc:f9:3f:
41:b6:27:63:0b:a7:01:91:19:0e:7d:cc:49:e6:0f:
b7:5a:4c:57:86:e2:78:81:ac:07:e6:05:63:d4:9c:
ed:0f:f9:bd:7b:e9:bc:92:8a:cf:ed:bd:3b:00:0b:
7e:0e:46:a6:70:fb:77:6d:04:77:dd:85:d5:92:4c:
4d:a5:54:8a:b6:aa:05:d0:b1:52:ed:4f:8a:fd:4b:
3e:6b:ef:a5:9b:56:f2:ee:d2:df:f5:26:ab:07:74:
2f:f3:8d:d2:30:fa:28:57:02:fa:44:43:24:9f:5d:
c8:54:a5:a2:3c:89:0c:b3:79:a6:b7:0b:b6:70:28:
f9:34:01:fc:03:83:b3:7a:9a:6f:10:d2:47:69:29:
aa:8c:c8:11:a6:02:5c:65:bf:8d:0c:00:c9:36:0a:
6c:5b:f4:15:42:59:f9:fd:66:ad:62:f7:1f:1c:5a:
78:f9:8a:e9:63:31:42:d9:86:71:4f:dd:14:50:0c:
32:be:2e:4e:a6:0c:47:ed:c9:50:a8:2a:bf:88:90:
1a:24:19:03:b6:7e:23:82:41:81:2d:1c:55:d8:7f:
09:91:cd:69:9f:96:e1:2d:3c:ef:8e:6f:79:b9:7f:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:52:57:D8:3E:CF:F4:83:58:CD:CA:33:E9:9E:4C:3C:55:9F:15
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:ca:48:d2:28:d9:64:d1:43:da:6a:c2:36:9b:1a:43:7d:
e9:66:b2:e6:76:93:d7:66:af:3c:e1:4a:b7:19:5b:9d:2d:5e:
d1:bc:b1:46:dd:b0:5e:5a:ed:19:3e:46:c9:a6:c4:ab:ae:10:
5c:f8:ed:f2:36:2e:61:7c:bc:87:23:cb:5d:67:aa:55:e5:48:
8d:97:c9:db:8e:b7:8f:24:1c:f3:7f:92:95:0c:63:1b:81:61:
73:24:c9:39:b4:0f:04:d3:65:e5:06:32:43:c2:30:1d:d9:f8:
d1:d2:de:ba:6f:2f:0e:a3:99:7d:8b:6a:d7:7c:7c:4b:7e:bb:
24:a9:c0:14:a8:fe:10:64:d3:4a:e5:47:91:c5:fe:9f:e4:3f:
0c:63:84:57:a7:57:f7:ef:82:46:c1:ac:7c:2a:9a:2e:63:93:
0f:7e:a3:04:33:de:cc:0a:d1:4e:4b:22:99:6b:fa:3c:39:3f:
f4:64:e9:d5:e8:4c:f9:f8:81:85:ee:a2:ea:2d:8f:07:8a:60:
61:f5:f8:df:0c:2d:2c:92:d8:ed:9a:11:ef:32:5d:3c:8b:da:
2c:e4:53:e1:5d:2e:58:8d:7e:43:6a:b0:fb:2c:7e:d9:da:c1:
10:e2:eb:14:0a:0b:92:8c:13:d6:ff:99:43:33:b5:bb:5c:d2:
eb:75:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:21 2026 by rpki-client