Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: FXiEo1WSNVo+po0zzRtUCHK4XvS5H0o5CAwMEjLDS3A=
Subject key identifier: 6B:74:9F:56:29:E7:98:2A:4C:70:3F:84:12:60:89:5E:A6:F9:C8:BD
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019D386673D5AFC126523BB8548C760855DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 058B
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: RI9Kh5lvHgyhvji1jlnQ2soT2140k0Nv2mccQb9k0mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:73:d5:af:c1:26:52:3b:b8:54:8c:76:08:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=6b749f5629e7982a4c703f841260895ea6f9c8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:da:08:2d:45:bd:4b:59:ff:10:d7:45:3e:
78:69:f6:60:72:77:01:70:68:1e:fc:59:e3:79:3d:
4b:a0:31:42:56:d5:f4:32:32:dd:3e:64:cc:6e:87:
db:2a:de:3e:03:43:61:8d:a1:0c:fb:16:82:c4:bc:
13:e5:a7:42:56:79:3b:10:9f:a1:54:bb:be:68:dd:
d0:98:7a:0e:75:88:58:0b:c1:55:cb:f3:f3:4a:a2:
45:6e:0c:57:54:22:d5:90:68:3d:56:9d:2e:a2:e0:
87:8a:4d:78:df:36:cb:c7:50:a8:b0:92:33:de:96:
64:b4:e1:43:8f:67:fe:c4:d0:a5:19:46:ef:78:91:
a3:d9:64:10:3f:ce:71:2a:55:84:81:12:32:18:fc:
d3:e7:bf:25:ea:34:df:7f:25:31:35:ab:b2:03:00:
7b:c9:67:f8:a0:2f:8f:7d:36:6e:ed:c6:2a:66:9a:
b0:2e:b4:63:dd:fa:f2:a3:de:80:e3:ba:de:76:c8:
2b:93:22:bb:b3:55:99:fe:97:be:26:cc:68:6e:d4:
74:78:a5:89:ac:66:92:25:d5:25:16:19:5a:4c:d8:
4d:24:a2:74:7c:a4:96:16:27:15:31:a3:4d:b6:55:
3c:dc:2c:0e:0f:cd:08:64:ef:61:54:ac:89:99:55:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:9F:56:29:E7:98:2A:4C:70:3F:84:12:60:89:5E:A6:F9:C8:BD
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:fd:b3:c0:67:db:ab:09:99:0a:e3:03:b6:94:36:9d:60:
00:a8:09:ac:a3:ce:fd:24:19:7e:1b:7d:96:4e:c7:31:02:f7:
a5:d1:0b:01:07:0b:a2:af:75:3b:48:6f:d9:33:18:a6:fa:ac:
de:b7:2e:5b:23:7f:29:2f:f7:eb:93:82:d0:04:8f:85:da:23:
36:1f:d5:f3:33:d0:29:ec:92:cf:77:0a:15:2e:9c:06:d4:b9:
be:a1:52:98:7e:d2:43:24:11:25:20:08:e1:65:e8:b6:0b:29:
b3:a9:74:0f:00:a2:60:0e:8c:04:ba:c6:28:74:70:44:e6:ca:
52:12:5b:2a:ed:cc:96:59:0c:cc:e8:ce:c9:df:b1:8a:11:cb:
ed:61:70:25:48:91:72:94:fb:6e:d6:60:9b:12:2d:11:96:90:
80:4d:8f:cb:c5:01:ef:89:57:66:a5:d8:0a:fb:a1:9c:9b:47:
94:59:50:fc:f5:36:08:c0:90:b8:e9:e8:eb:d8:0b:13:60:89:
d1:4e:39:cb:6b:0b:03:a5:db:13:b1:06:05:d8:bb:9f:4f:26:
6e:ba:36:48:52:ff:57:ab:1f:a8:7f:97:d9:c2:9c:3c:51:35:
34:7e:86:8b:de:97:34:ac:52:86:88:4b:a8:da:87:37:d9:da:
b6:61:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:49 2026 by rpki-client