Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: wzLzXNEdKOJeHgAKr/Ihz6+rAxhJn6Upl75Yy5P2dg8=
Subject key identifier: 3B:64:43:51:E7:D1:25:CF:55:C9:92:1B:E5:D0:39:08:C8:7B:2D:CA
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019D39AEFE938893AD0EA879994A05034AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 030E
Signing time: Sun 29 Mar 2026 13:01:02 +0000
Manifest this update: Sun 29 Mar 2026 13:01:02 +0000
Manifest next update: Mon 30 Mar 2026 13:01:02 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: Tu8zsQDBCUWkI3XtogzaGr7QmjCuOe2dv/0x1xd4U60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fe:93:88:93:ad:0e:a8:79:99:4a:05:03:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Mar 29 13:01:02 2026 GMT
Not After : Mar 30 13:01:02 2026 GMT
Subject: CN=3b644351e7d125cf55c9921be5d03908c87b2dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:83:32:02:7a:32:a0:41:66:f1:ed:46:12:
a3:8c:01:0a:79:56:62:65:ac:50:c1:50:6d:22:af:
4d:43:5f:23:47:25:05:b1:30:54:88:ee:8a:b8:c7:
04:7e:0e:79:ad:e5:07:a0:8a:06:f7:8c:20:6d:ce:
09:9f:4f:f9:4e:0b:95:bb:af:2d:1e:8b:a7:de:02:
61:1c:0d:66:03:58:4a:d6:31:7b:90:f2:24:16:63:
cd:26:d8:5e:20:79:8e:83:6d:4c:88:2b:fb:2a:eb:
e9:fa:f7:c0:2e:e1:bf:db:46:4f:90:ad:25:32:b3:
1e:52:57:fd:84:b0:72:02:44:ae:db:be:57:71:6c:
e9:47:10:ca:6a:4d:d1:e1:e3:67:d6:e5:1c:92:0f:
80:d1:e1:e2:fb:a5:cc:1f:fa:f1:1b:12:51:b1:d9:
54:fa:8e:6c:21:70:84:4a:26:c8:b0:c9:43:97:50:
ce:46:a6:17:0c:22:76:0e:07:f1:b0:fe:ab:09:07:
e1:f2:ab:33:25:b1:63:01:66:9c:10:11:fd:58:a4:
ee:56:9f:b3:3e:b3:c4:ad:05:c4:22:28:c1:04:92:
6a:af:1b:70:95:80:fc:9b:d1:3c:8d:88:18:d4:b1:
0e:3f:68:4f:90:3d:cd:d6:44:8f:f3:30:5c:07:7c:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:43:51:E7:D1:25:CF:55:C9:92:1B:E5:D0:39:08:C8:7B:2D:CA
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d4:64:2d:2a:91:8d:f4:d2:13:64:18:4f:cb:8b:1c:d1:13:
6a:98:b4:16:6b:f7:e7:5c:d1:5b:6e:f8:7f:55:f8:9b:83:66:
71:20:c5:73:d0:78:1d:55:c5:7b:18:e6:eb:49:17:2a:8c:8e:
7a:d6:d7:4a:73:61:92:e2:d5:e6:d8:33:31:6a:68:a4:6b:89:
18:14:b5:04:ac:db:af:b9:c6:88:29:40:2c:a7:26:3e:87:7b:
0e:76:47:8e:df:4f:97:19:a2:f8:56:8a:e5:ed:89:91:ea:78:
85:f2:36:b4:b1:de:03:63:b5:f2:0d:ea:77:09:3d:7c:6c:8d:
d6:5d:7b:f8:9d:69:68:c4:c8:45:02:7e:72:0b:1b:17:89:a4:
79:f7:50:b9:31:74:29:b5:50:63:04:27:3b:ab:a7:9d:28:d6:
70:4f:6e:8d:3e:68:b7:8f:35:a0:5a:28:5e:62:76:36:45:c6:
8a:5f:66:92:03:bc:02:02:ca:73:c8:18:0b:66:62:4c:58:76:
65:c5:8a:39:33:67:31:79:65:ff:4b:cf:0e:d8:bb:52:1d:7f:
5f:a8:ac:75:d2:79:56:02:eb:4e:3d:97:a0:15:d6:75:4e:66:
19:6c:d3:48:89:93:13:a9:ea:a0:25:a6:af:ac:ec:2f:e0:37:
3e:f2:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:17:49 2026 by rpki-client