Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: yP+XMSvzy1fcSgUPj7JsZG3X7p7bsBcMoQ+zVLHSxk8=
Subject key identifier: 2B:6E:35:34:C7:73:15:C1:12:E6:AA:3A:1B:8C:0D:C8:83:A1:CD:F8
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019F84C350E5A36D917611F72568E81E0CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 043E
Signing time: Tue 21 Jul 2026 13:00:20 +0000
Manifest this update: Tue 21 Jul 2026 13:00:20 +0000
Manifest next update: Wed 22 Jul 2026 13:00:20 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: YamtIW5Opb/dUYZhBkwlv5wFi6qxvGSqxqEZFxCUuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:50:e5:a3:6d:91:76:11:f7:25:68:e8:1e:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jul 21 13:00:20 2026 GMT
Not After : Jul 22 13:00:20 2026 GMT
Subject: CN=2b6e3534c77315c112e6aa3a1b8c0dc883a1cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:0d:b4:c1:d2:68:9c:58:f4:6b:28:39:1c:
ea:05:27:b0:f9:17:7f:15:45:c1:ce:c0:c8:75:28:
90:9f:af:4d:b8:88:74:d0:40:09:8d:31:95:76:9e:
2f:b8:35:fe:a5:64:f3:35:04:e1:59:e1:9b:c0:b8:
a0:8c:bd:74:3d:a2:f3:84:cc:1f:37:0d:29:a2:35:
c8:48:68:2b:d4:7c:11:31:68:54:52:5b:23:79:5a:
1b:3e:6c:da:7d:59:37:d7:0e:68:ac:14:f3:5f:2e:
35:47:b9:c2:7f:4a:05:eb:d1:41:39:92:ae:26:7e:
d2:ac:f9:d3:3e:47:ae:0a:b9:d5:ff:fe:72:5c:4e:
15:9d:37:fb:ab:d2:8c:5e:d6:d8:ec:33:34:0a:bd:
84:55:ae:0e:d3:c9:b8:0f:67:28:19:65:29:e7:e2:
b6:d8:75:49:ae:4b:40:ef:42:8d:9c:2a:d3:09:60:
e8:80:62:2a:7c:bc:65:6c:21:0a:1b:4b:9d:84:69:
6c:ce:8e:1c:d1:45:68:8f:db:25:16:ac:f1:64:94:
62:e3:f4:69:ce:e8:8e:dc:a5:82:d2:5e:77:d7:41:
26:c0:c8:30:3d:db:03:b2:82:f8:d2:92:90:e9:f8:
d4:4d:9c:94:2f:0e:8c:1e:31:e5:7e:68:32:4c:8b:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:35:34:C7:73:15:C1:12:E6:AA:3A:1B:8C:0D:C8:83:A1:CD:F8
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:90:41:7b:30:d1:60:66:ea:8a:90:65:0e:77:03:df:8a:
2b:87:17:f9:7c:d1:3b:5f:f4:a0:3f:d0:28:f2:c1:49:ec:dc:
dd:f6:ba:66:ad:32:70:dc:ad:ee:64:52:22:f4:25:81:d7:50:
e1:b4:a7:ad:68:4a:01:67:8b:ac:f8:79:6d:f0:0f:6e:73:ad:
f1:28:a3:f0:d4:e3:13:35:49:8d:47:26:9b:f5:6b:0e:85:1c:
21:98:c7:8a:25:01:c2:ca:1c:18:da:4f:23:6c:4c:ee:39:b8:
98:74:26:66:63:50:22:74:c7:2f:70:03:32:15:27:87:2a:90:
19:8c:15:10:3c:5f:c5:04:da:93:94:12:32:5e:b9:3c:ef:1d:
45:a9:34:3a:cb:05:9d:e6:9f:9a:8d:d0:4a:ed:70:4a:92:94:
7a:5b:f1:81:5d:be:46:e0:03:1c:0d:20:d2:06:81:c1:41:ea:
85:b9:71:75:a4:bf:3f:cf:8e:5e:83:18:32:4f:72:e9:5a:80:
67:e2:5d:8c:2a:03:86:5b:96:e3:ff:f2:f3:26:49:9b:68:56:
2c:02:e3:f8:6f:af:a4:8c:d9:f7:21:60:c1:7c:27:a1:1b:03:
28:6d:06:cf:9f:b5:a6:b9:7f:15:0b:71:3c:c9:de:a7:3d:1d:
ba:42:65:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew1Dlo22RdhH3JWjoHgzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2
Yzg0NDEwHhcNMjYwNzIxMTMwMDIwWhcNMjYwNzIyMTMwMDIwWjAzMTEwLwYDVQQD
EygyYjZlMzUzNGM3NzMxNWMxMTJlNmFhM2ExYjhjMGRjODgzYTFjZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU0NtMHSaJxY9GsoORzqBSew+Rd/
FUXBzsDIdSiQn69NuIh00EAJjTGVdp4vuDX+pWTzNQThWeGbwLigjL10PaLzhMwf
Nw0pojXISGgr1HwRMWhUUlsjeVobPmzafVk31w5orBTzXy41R7nCf0oF69FBOZKu
Jn7SrPnTPkeuCrnV//5yXE4VnTf7q9KMXtbY7DM0Cr2EVa4O08m4D2coGWUp5+K2
2HVJrktA70KNnCrTCWDogGIqfLxlbCEKG0udhGlszo4c0UVoj9slFqzxZJRi4/Rp
zuiO3KWC0l5310EmwMgwPdsDsoL40pKQ6fjUTZyULw6MHjHlfmgyTIslXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtuNTTHcxXBEuaqOhuMDciDoc34MB8GA1UdIwQY
MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt
NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi
LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1+QQXsw
0WBm6oqQZQ53A9+KK4cX+XzRO1/0oD/QKPLBSezc3fa6Zq0ycNyt7mRSIvQlgddQ
4bSnrWhKAWeLrPh5bfAPbnOt8Sij8NTjEzVJjUcmm/VrDoUcIZjHiiUBwsocGNpP
I2xM7jm4mHQmZmNQInTHL3ADMhUnhyqQGYwVEDxfxQTak5QSMl65PO8dRak0OssF
neafmo3QSu1wSpKUelvxgV2+RuADHA0g0gaBwUHqhblxdaS/P8+OXoMYMk9y6VqA
Z+JdjCoDhluW4//y8yZJm2hWLALj+G+vpIzZ9yFgwXwnoRsDKG0Gz5+1prl/FQtx
PMnepz0dukJlSw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:19 2026 by rpki-client