Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: /QQt3xKocaG8AemxHB+nIU14FQ2KAm6QyRqtjWGx7x4=
Subject key identifier: 42:04:0F:95:26:EB:4B:4C:1A:8B:4C:F8:AB:9D:C4:0F:7A:27:EB:C2
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019CE7ED96295284BCD61039756C4E2F3856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 148C
Signing time: Fri 13 Mar 2026 16:00:32 +0000
Manifest this update: Fri 13 Mar 2026 16:00:32 +0000
Manifest next update: Sat 14 Mar 2026 16:00:32 +0000
Files and hashes: 1: 4eHXKjznACVbndG6iFpTFVUVkDU.roa (hash: OQWOo0J8qNH07VKmKOXFET9I4K0zlOhgBlJo3WSTOP8=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: vRqOxBbnosD1HENESSnD1iQMzKd9mH+4mu0LyFZCo78=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:96:29:52:84:bc:d6:10:39:75:6c:4e:2f:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Mar 13 16:00:32 2026 GMT
Not After : Mar 14 16:00:32 2026 GMT
Subject: CN=42040f9526eb4b4c1a8b4cf8ab9dc40f7a27ebc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:17:c7:29:37:bd:63:13:7a:a9:b6:1f:26:
af:3b:a0:e3:cb:67:05:ec:62:67:f7:cf:ab:aa:72:
63:ac:c2:8c:eb:fe:9e:de:4c:b7:b3:cf:f2:e5:4d:
d2:b6:17:9a:35:de:b9:c5:12:92:44:f1:bb:ed:fc:
6f:2f:6a:88:68:33:3c:22:57:c4:13:ab:ba:37:6c:
af:bb:1e:fc:3a:88:6f:5a:96:f5:04:66:1f:16:87:
2b:8b:60:d4:0e:d6:c0:a2:4a:c9:71:99:b8:e7:d3:
cc:08:8a:23:50:0d:65:b1:7c:b7:fd:55:9d:5e:6b:
fe:23:b9:59:35:dd:01:04:ac:ef:80:8a:dd:9e:e3:
16:24:c3:49:ac:31:d8:dd:52:38:43:54:79:c9:b7:
d0:fb:cd:cd:f4:e8:38:70:d5:45:d9:e8:61:1d:19:
da:c4:c8:49:09:a0:5b:e7:20:3d:52:eb:28:eb:75:
be:2d:5e:4b:21:34:32:9b:ce:f3:1d:f7:d5:7b:39:
de:7c:ba:4a:1f:52:89:5d:78:65:bd:dc:15:26:49:
af:1e:50:f4:b3:70:b7:4e:ec:3f:fe:84:46:1c:e7:
19:2c:48:dc:b2:d4:03:25:b0:eb:2c:27:25:54:a0:
5a:ba:f0:db:6a:51:7a:8a:bd:6d:8c:45:ef:95:d5:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:0F:95:26:EB:4B:4C:1A:8B:4C:F8:AB:9D:C4:0F:7A:27:EB:C2
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:96:d3:e0:7b:d8:e8:ae:9c:41:27:02:4a:a2:bb:37:11:26:
33:08:35:43:8e:3f:08:7f:c4:bc:82:2b:ab:83:81:45:9d:41:
48:98:9c:da:bd:2e:76:ab:6e:d5:e3:da:86:16:24:3e:3f:d1:
1c:db:a8:80:ee:a8:41:9d:fe:ce:84:9e:24:71:6d:e8:42:6e:
a1:26:b9:57:46:f7:8a:b0:45:fc:39:d4:24:55:e6:be:ff:b3:
6c:c6:c3:7c:54:c7:4f:19:48:a4:b5:b6:19:a7:1f:70:a5:ed:
02:70:b6:70:1f:0c:96:2a:be:b4:7b:fa:7b:4b:27:f1:a9:d5:
3b:69:e1:9c:40:d9:ef:f8:64:59:bb:bf:6d:d4:38:84:99:59:
e1:d7:14:41:a8:24:d8:9c:75:81:63:1d:ff:79:5f:14:9e:7c:
7d:3a:1f:27:e9:fc:0b:7d:83:c9:42:e1:a7:30:c6:ff:b6:09:
c0:02:1c:5f:83:99:c8:93:a8:4c:10:a4:f1:fa:82:b8:84:c8:
a4:a8:6e:36:20:f3:4c:45:bc:96:ff:07:16:08:67:cd:c0:54:
d0:01:29:76:8e:2b:ed:bc:8f:20:aa:1f:1c:a5:fd:48:91:e5:
5c:02:ff:40:44:61:23:89:2e:f3:a3:f4:cb:9c:2e:52:d3:f2:
52:ee:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:33:59 2026 by rpki-client