Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: cvye5tckG7sr4FkXnUTBtwXRGirre69//PnK5Uej+b8=
Subject key identifier: 23:03:94:09:98:82:FE:BE:5D:C7:43:C8:47:4D:6E:86:89:0C:35:0A
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 01A06E708933842383B216A3EDF92CA2E5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 04B7
Signing time: Fri 04 Sep 2026 22:01:03 +0000
Manifest this update: Fri 04 Sep 2026 22:01:03 +0000
Manifest next update: Sat 05 Sep 2026 22:01:03 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: CZTltCOCqXNOB6IlBh7/YOItbwup+maS6Hw7x1xvfbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:89:33:84:23:83:b2:16:a3:ed:f9:2c:a2:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Sep 4 22:01:03 2026 GMT
Not After : Sep 5 22:01:03 2026 GMT
Subject: CN=230394099882febe5dc743c8474d6e86890c350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:4c:56:b0:fa:02:6d:99:b9:65:98:e8:09:
a8:ff:c7:5b:98:72:74:c9:a1:74:07:3a:6d:b2:93:
43:d4:1c:9a:05:ca:dd:59:af:cb:38:3b:4c:13:eb:
95:16:c1:dd:21:18:04:86:fc:e7:ce:b1:bd:57:46:
f4:46:d7:c5:45:06:dd:fe:90:45:ba:58:a0:e2:c4:
fa:1d:49:73:c3:59:4f:6a:f9:15:3f:35:45:f4:4f:
3b:d6:6e:d5:d6:27:d6:f0:32:52:ec:ad:55:85:5a:
60:e6:df:1d:fd:f5:32:da:0b:e3:bf:13:01:bd:62:
08:b6:5e:e5:9d:b8:12:ca:97:81:32:0c:3f:d6:5d:
dd:91:23:c4:e1:2b:e0:af:29:e8:b3:70:ab:48:89:
db:27:f1:d2:6f:44:a5:fe:2e:08:5d:3f:c2:fa:1a:
44:bc:29:3c:b3:05:90:2b:9d:82:fc:40:c8:33:43:
e1:18:dd:07:5f:1d:5d:2a:c3:1a:bd:1d:fd:25:e9:
96:a3:7f:4c:63:1a:d5:a4:80:ff:3f:28:14:30:fd:
15:5c:64:4c:cf:88:06:82:54:a8:22:40:8b:97:e2:
65:98:32:00:15:a3:e1:05:df:a2:f5:d7:ea:14:8e:
29:d6:e7:c3:10:29:41:ef:8f:ad:cf:4a:14:e2:fe:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:03:94:09:98:82:FE:BE:5D:C7:43:C8:47:4D:6E:86:89:0C:35:0A
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:0d:e9:30:f4:4f:dd:53:e2:8a:f6:b3:b5:26:10:0a:eb:
67:8d:c6:4a:71:53:4c:2a:b1:7c:76:c5:18:07:36:59:08:1b:
0e:c3:ba:f9:8a:2b:02:da:cf:e7:93:2b:52:e3:e7:57:72:86:
f3:6b:ec:7b:64:d7:f3:e3:c5:40:67:77:2b:b9:d5:5d:f9:8c:
8e:a3:c1:17:ad:d9:57:6e:b7:0f:d3:7b:7a:24:65:44:30:2e:
ec:d4:7f:05:75:3e:80:f7:37:ea:22:ee:29:fe:0a:c4:a2:db:
17:40:a9:6a:3c:87:0c:19:ce:f6:41:45:f8:30:03:5b:bc:ca:
9e:02:f7:45:3d:3a:67:e8:d4:8e:b4:b5:c3:98:1f:78:8a:5b:
d3:31:64:88:5e:62:02:a9:3e:7c:fc:83:da:90:49:b4:5c:c1:
9f:e3:74:8d:c9:84:88:8a:df:56:c2:5a:38:64:5b:00:61:10:
9d:63:d8:2e:0a:d1:08:08:69:51:2a:96:a0:7f:e0:77:90:76:
8a:02:e3:55:21:ed:71:4e:97:6c:f6:6c:35:d8:9d:d3:0a:44:
ff:02:a7:48:b2:80:2c:a0:1c:b7:58:b7:74:49:27:95:3b:5b:
17:e9:8a:c7:6a:01:d2:11:f6:6d:e8:44:65:f3:fa:95:24:68:
b6:14:38:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucIkzhCODshaj7fksouXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2
Yzg0NDEwHhcNMjYwOTA0MjIwMTAzWhcNMjYwOTA1MjIwMTAzWjAzMTEwLwYDVQQD
EygyMzAzOTQwOTk4ODJmZWJlNWRjNzQzYzg0NzRkNmU4Njg5MGMzNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbRMVrD6Am2ZuWWY6Amo/8dbmHJ0
yaF0BzptspND1ByaBcrdWa/LODtME+uVFsHdIRgEhvznzrG9V0b0RtfFRQbd/pBF
ulig4sT6HUlzw1lPavkVPzVF9E871m7V1ifW8DJS7K1VhVpg5t8d/fUy2gvjvxMB
vWIItl7lnbgSypeBMgw/1l3dkSPE4Svgrynos3CrSInbJ/HSb0Sl/i4IXT/C+hpE
vCk8swWQK52C/EDIM0PhGN0HXx1dKsMavR39JemWo39MYxrVpID/PygUMP0VXGRM
z4gGglSoIkCLl+JlmDIAFaPhBd+i9dfqFI4p1ufDEClB74+tz0oU4v5hUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMDlAmYgv6+XcdDyEdNboaJDDUKMB8GA1UdIwQY
MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt
NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi
LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt0N6TD0
T91T4or2s7UmEArrZ43GSnFTTCqxfHbFGAc2WQgbDsO6+YorAtrP55MrUuPnV3KG
82vse2TX8+PFQGd3K7nVXfmMjqPBF63ZV263D9N7eiRlRDAu7NR/BXU+gPc36iLu
Kf4KxKLbF0CpajyHDBnO9kFF+DADW7zKngL3RT06Z+jUjrS1w5gfeIpb0zFkiF5i
Aqk+fPyD2pBJtFzBn+N0jcmEiIrfVsJaOGRbAGEQnWPYLgrRCAhpUSqWoH/gd5B2
igLjVSHtcU6XbPZsNdid0wpE/wKnSLKALKAct1i3dEknlTtbF+mKx2oB0hH2behE
ZfP6lSRothQ4Rg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:47 2026 by rpki-client