Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: DRpAAAUK7g5DO20BK6U0x0f7h18sG/K5iqjSNLkw0CY=
Subject key identifier: A0:FE:79:66:FE:E4:74:8A:D1:7E:41:3A:B3:2F:47:2A:A8:6F:4E:CE
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019DD7659901151FDB16B84D167413374A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1509
Signing time: Wed 29 Apr 2026 04:00:52 +0000
Manifest this update: Wed 29 Apr 2026 04:00:52 +0000
Manifest next update: Thu 30 Apr 2026 04:00:52 +0000
Files and hashes: 1: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (hash: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: 7yD/XNvmf6ST6ocUuolxr3L+kN6tSgoq9SSsnyJ+5aI=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:65:99:01:15:1f:db:16:b8:4d:16:74:13:37:4a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Apr 29 04:00:52 2026 GMT
Not After : Apr 30 04:00:52 2026 GMT
Subject: CN=a0fe7966fee4748ad17e413ab32f472aa86f4ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:1b:65:18:18:20:52:1e:b6:28:84:5d:e5:
c3:90:31:0c:3b:e8:c7:9b:3b:84:cc:69:0c:c3:b9:
57:e7:5a:fe:9f:3c:97:20:31:37:19:79:7c:2d:60:
05:a1:66:13:1e:4b:3c:19:ba:31:e9:8a:aa:c1:a6:
49:af:7e:5b:27:ef:09:2c:33:4b:2d:14:a6:9c:70:
4c:26:9c:db:d9:c0:d0:e5:0e:cb:d5:5a:78:bd:e6:
25:55:a4:51:49:b7:94:c9:d8:eb:ee:ff:2d:70:ae:
31:8f:44:de:71:bc:5b:7d:bc:48:10:73:52:d7:64:
90:57:fe:66:31:71:72:92:17:5f:91:fa:2d:39:37:
e6:78:35:a2:f7:02:f8:85:cd:f7:de:fc:ab:19:33:
36:dd:e5:ba:ef:41:eb:b6:da:f5:8b:79:9d:c0:7f:
f1:33:30:2c:7d:13:24:fe:cd:55:f2:8e:e4:59:86:
e5:b5:d1:a3:21:1b:03:d1:63:47:f5:af:c6:c3:9c:
38:03:47:59:16:9d:cf:75:b8:8a:b4:b1:b0:65:6c:
e7:cd:9d:e3:dd:58:8a:b4:33:cc:5c:86:bf:4f:ed:
b5:a8:df:b2:30:df:03:96:1c:ac:9e:55:26:e3:7e:
e6:a8:38:b9:3b:ee:0f:6c:8e:65:f6:30:a0:fb:f5:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:79:66:FE:E4:74:8A:D1:7E:41:3A:B3:2F:47:2A:A8:6F:4E:CE
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:d2:1f:bd:78:4a:2e:4b:2e:05:95:90:be:16:07:40:fb:
a3:a6:0a:5b:f8:d6:f6:d5:01:c0:97:47:19:31:32:a0:ea:e9:
e9:43:48:84:10:76:d8:02:82:f8:85:c0:ae:4b:02:e6:14:43:
cd:ee:6a:0a:35:38:2a:c5:5e:05:92:ea:8c:fa:ff:25:ad:a7:
3f:01:ae:b5:e5:b2:1b:db:f2:33:5c:ac:d3:39:e0:8d:55:41:
43:45:66:4f:e9:96:02:e1:28:9b:9b:02:76:09:47:35:92:5f:
83:4a:b8:fa:b5:d9:00:47:de:4c:d1:0a:2b:88:a7:02:f6:18:
9d:73:38:da:43:3c:82:3a:b3:41:f1:40:f3:f2:ce:6c:65:0d:
c3:73:63:a1:34:2a:3d:56:7d:7a:18:b3:3c:6a:2e:da:ba:72:
63:28:99:7c:0f:9d:a7:38:62:39:4d:c9:5a:e6:4a:5a:9b:7a:
f0:eb:b6:b6:21:f0:cc:93:56:99:fb:e7:e0:d1:7b:af:5e:e8:
b0:c2:ed:91:ed:b5:a9:ab:1d:de:0a:a5:79:d4:16:4a:84:8a:
de:84:b9:02:d9:29:8b:7b:6c:3d:2d:87:42:84:54:68:84:6c:
02:75:28:48:95:ef:a8:0b:30:4f:10:9b:98:2d:37:fb:89:82:
e4:df:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:34:39 2026 by rpki-client