Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File: EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier: QbHOIvx9NIvNR8Q+F6Cdee5TbqViyvBvXuu6/0VG2m0=
Subject key identifier: 14:71:0D:E7:91:6D:FB:12:93:46:24:19:2A:FE:B6:98:D7:C5:4E:20
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial: 01A06C13F0AD9FBA7E1E7338D530C396CC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 11:00:40 +0000
Manifest this update: Fri 04 Sep 2026 11:00:40 +0000
Manifest next update: Sat 05 Sep 2026 11:00:40 +0000
Files and hashes: 1: 78P8bg4fhDC941Z-sCKZX9vKz5c.roa (hash: 95blh8AcNCpkNeCFXQto2YGidkNS7zNlYdkmjlG4aOU=)
2: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: FhI0S+IXXKEH3rRm8MlD+b9XcvK1waH7ttFYlPaslhk=)
3: irfw5UW1_BtcJGyWmOKmkhAGuPM.roa (hash: KUrzlXQ0G9dX8hl6WHyNKm8JCOJt/8bKQDZ8bvI+eWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:13:f0:ad:9f:ba:7e:1e:73:38:d5:30:c3:96:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Validity
Not Before: Sep 4 11:00:40 2026 GMT
Not After : Sep 5 11:00:40 2026 GMT
Subject: CN=14710de7916dfb12934624192afeb698d7c54e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:44:95:94:43:1e:e3:b1:71:ae:ec:07:3c:
8b:0c:b9:2e:aa:d2:3d:6d:ce:5a:2f:17:e1:71:f2:
a7:0a:2e:51:bc:14:07:ca:3b:f1:00:88:6a:8c:b5:
9c:94:98:57:bf:b1:84:f1:b3:69:1e:d2:07:b2:41:
d1:a5:88:16:cf:6a:a8:00:c2:e7:1e:00:f3:19:17:
e4:3b:11:cb:5e:f9:ca:59:07:0a:1b:8c:87:e7:c9:
3d:2d:ca:e3:9e:3f:60:e3:a0:81:cd:09:52:6d:a2:
2f:bf:6c:da:17:d6:fa:71:80:6d:f2:d1:85:ea:65:
9f:70:2b:bc:be:47:27:9f:ec:37:e4:08:b7:e2:5e:
48:44:5a:8d:c9:21:ac:2e:44:6d:55:61:13:f0:01:
66:b6:1b:af:da:b5:20:1b:6c:cc:5e:bd:aa:d6:b0:
a0:0d:fb:a4:b5:25:bd:dd:63:ae:24:b8:e0:0d:27:
78:11:90:5b:4a:e8:1c:88:e4:50:06:f7:51:bc:32:
1a:5e:d3:25:4a:4b:51:b1:78:f3:21:ab:9a:6c:f1:
a7:35:9f:e7:14:ae:05:b7:45:01:38:0e:d1:54:bb:
e0:71:70:64:37:4f:ce:f5:a2:c8:84:cf:a9:bd:45:
98:5f:cd:c0:ed:c6:bd:46:d6:ae:5a:7b:65:b9:68:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:0D:E7:91:6D:FB:12:93:46:24:19:2A:FE:B6:98:D7:C5:4E:20
X509v3 Authority Key Identifier:
keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8b:af:ba:ab:6b:8b:2a:32:ca:8b:06:b6:6e:17:9b:d3:f7:
cd:5c:46:a0:8a:3c:c2:6a:d9:81:e1:b9:b1:33:5d:4b:08:ea:
a7:cd:02:5c:4b:5b:e5:a9:fa:5d:0e:44:dd:27:a3:69:09:b4:
c7:ec:b2:1e:33:60:ba:94:35:51:d2:0b:5f:c3:c2:19:44:bb:
77:33:27:f1:bb:39:44:73:f0:9f:88:5c:55:b3:67:33:81:55:
41:2e:1d:89:cc:10:2b:85:bc:c4:aa:5c:f7:cf:94:18:38:0f:
10:ae:c2:2c:3c:ce:2c:0a:ee:dc:30:90:32:1e:ea:b3:2b:6d:
72:47:fc:79:75:df:fa:07:f6:b4:51:22:11:b9:d1:9d:a7:ac:
4a:5e:81:ba:31:97:51:31:8b:0d:66:eb:ef:52:b9:22:cc:65:
b6:b5:c6:a8:72:67:88:2f:75:d6:6b:7a:7f:ec:03:eb:e0:72:
8a:f2:3b:08:bf:f9:03:98:a0:c0:d1:43:22:33:f6:57:45:8c:
dd:20:b2:f2:d6:94:5a:c2:4c:1a:00:07:11:a3:f2:ba:0a:53:
cb:bb:7f:3f:31:66:d0:ef:35:4c:2d:2e:dc:8d:b8:f8:20:a3:
52:6d:c6:a3:ec:9f:a7:50:f6:c5:61:1c:bc:5d:2b:04:de:89:
01:bf:5e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBsE/Ctn7p+HnM41TDDlswOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm
YWY0OTYwHhcNMjYwOTA0MTEwMDQwWhcNMjYwOTA1MTEwMDQwWjAzMTEwLwYDVQQD
EygxNDcxMGRlNzkxNmRmYjEyOTM0NjI0MTkyYWZlYjY5OGQ3YzU0ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MRElZRDHuOxca7sBzyLDLkuqtI9
bc5aLxfhcfKnCi5RvBQHyjvxAIhqjLWclJhXv7GE8bNpHtIHskHRpYgWz2qoAMLn
HgDzGRfkOxHLXvnKWQcKG4yH58k9Lcrjnj9g46CBzQlSbaIvv2zaF9b6cYBt8tGF
6mWfcCu8vkcnn+w35Ai34l5IRFqNySGsLkRtVWET8AFmthuv2rUgG2zMXr2q1rCg
DfuktSW93WOuJLjgDSd4EZBbSugciORQBvdRvDIaXtMlSktRsXjzIauabPGnNZ/n
FK4Ft0UBOA7RVLvgcXBkN0/O9aLIhM+pvUWYX83A7ca9RtauWntluWj9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRxDeeRbfsSk0YkGSr+tpjXxU4gMB8GA1UdIwQY
MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt
NzNhNDUyYmFmYjQ2LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2
LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlouvuqtr
iyoyyosGtm4Xm9P3zVxGoIo8wmrZgeG5sTNdSwjqp80CXEtb5an6XQ5E3SejaQm0
x+yyHjNgupQ1UdILX8PCGUS7dzMn8bs5RHPwn4hcVbNnM4FVQS4dicwQK4W8xKpc
98+UGDgPEK7CLDzOLAru3DCQMh7qsyttckf8eXXf+gf2tFEiEbnRnaesSl6BujGX
UTGLDWbr71K5IsxltrXGqHJniC911mt6f+wD6+ByivI7CL/5A5igwNFDIjP2V0WM
3SCy8taUWsJMGgAHEaPyugpTy7t/PzFm0O81TC0u3I24+CCjUm3Go+yfp1D2xWEc
vF0rBN6JAb9eNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:42:11 2026 by rpki-client