Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: 3cjeF+PLa/8HA5RVR+V5S5e0rK63zZW2JoOfiy/NNfg=
Subject key identifier: 4D:FC:E7:C1:15:57:AE:68:71:91:D0:3A:C0:A4:D2:DA:F4:31:9B:9C
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019ED085FE5E01B5E4B22553A1EC30CFFE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 158A
Signing time: Tue 16 Jun 2026 13:01:42 +0000
Manifest this update: Tue 16 Jun 2026 13:01:42 +0000
Manifest next update: Wed 17 Jun 2026 13:01:42 +0000
Files and hashes: 1: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (hash: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: EMji88FJTsjbzPigE8F4B8R4f7QQ6lCtHKXhjWI/iQY=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:85:fe:5e:01:b5:e4:b2:25:53:a1:ec:30:cf:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jun 16 13:01:42 2026 GMT
Not After : Jun 17 13:01:42 2026 GMT
Subject: CN=4dfce7c11557ae687191d03ac0a4d2daf4319b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:de:d9:ff:2c:d9:52:36:fd:6d:57:1c:3f:
4f:c0:49:79:a8:74:6b:4f:55:31:d9:56:7f:e2:75:
7d:91:30:12:cc:fe:6a:03:9e:7b:0f:58:cb:03:02:
9b:13:66:e1:57:1c:4f:3e:9d:12:82:f6:10:6b:d5:
6a:9c:fd:d6:fd:ba:1e:00:69:06:3a:be:dc:dc:0a:
cb:17:1d:81:0d:78:78:1b:22:6f:0c:d9:35:f6:2d:
67:13:b1:37:f9:f6:b1:af:b2:5e:b7:8d:93:2d:c8:
67:ef:ea:da:33:a7:2b:a2:37:1f:2d:d5:ba:de:2e:
f3:62:62:d0:87:de:2d:91:08:76:13:d9:58:54:4d:
f2:03:e8:f3:a9:e5:59:d2:23:51:c0:2c:12:96:9f:
db:43:eb:a8:6b:54:7c:67:36:d4:ec:7f:91:cd:5e:
4d:b1:af:d3:05:6a:c1:1a:94:fa:91:43:ca:ae:6e:
44:53:2f:94:2a:e1:24:95:1b:30:6a:08:d6:19:f3:
26:91:da:11:ed:57:48:d3:00:91:c8:c3:3b:17:c3:
74:36:59:5b:b5:c4:43:df:b8:ae:f3:0d:fc:a3:62:
6e:2b:8c:a6:b0:34:62:76:30:71:1c:62:65:7a:19:
45:39:af:39:af:49:f5:30:e8:16:6d:ca:ab:74:f5:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:E7:C1:15:57:AE:68:71:91:D0:3A:C0:A4:D2:DA:F4:31:9B:9C
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:55:a2:58:08:b6:08:4f:1c:73:c9:f6:53:18:ed:13:50:
b5:35:c5:41:b2:3e:81:f2:4b:f5:30:87:ab:0a:96:c1:22:31:
e3:01:8b:28:3a:63:a2:a7:f8:86:be:3c:9c:69:fe:fb:59:26:
87:9a:ae:36:9e:1b:88:25:f4:67:7a:eb:2c:e4:cb:df:fe:16:
f6:a5:22:10:d5:f9:b7:57:b3:dc:7b:49:51:b6:fb:75:96:75:
53:ce:57:6b:46:4d:9d:9c:10:6d:33:45:b3:60:6e:d9:b8:88:
a9:c1:96:ad:4c:84:96:59:e0:8a:20:d8:b1:85:88:cf:cc:cf:
f6:e5:ac:a2:99:67:8a:55:b2:8b:50:ff:e3:aa:32:91:b7:ae:
3e:84:ad:59:cf:bc:3a:08:cd:d7:64:3f:30:ed:bd:76:37:77:
d6:bc:eb:f1:7c:37:b2:fc:01:cc:83:04:86:24:d4:94:fb:4b:
a0:37:c6:d8:5d:c1:9c:9d:55:45:87:e0:da:67:7c:12:d7:2d:
01:b3:49:40:89:21:d2:5e:9f:fc:48:91:84:a6:a6:56:d6:94:
df:4f:9e:40:95:26:4d:7e:06:76:b8:65:13:0d:a5:6e:6e:4d:
4d:4f:e2:35:89:60:85:ba:6f:c0:7b:6b:ac:1b:73:3b:d1:f5:
4f:d1:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 16:30:31 2026 by rpki-client