Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: LIBR2jFSQqB4aFy52cl04DtfWpnl3yZpcWsksXYyKEg=
Subject key identifier: A2:8A:78:F9:83:09:9E:9E:55:8B:EA:7A:2D:71:83:5E:C1:CD:8E:62
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 01A17137D9D038F1C7FDBC335077CCFCE992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 053D
Signing time: Sun 25 Oct 2026 04:00:47 +0000
Manifest this update: Sun 25 Oct 2026 04:00:47 +0000
Manifest next update: Mon 26 Oct 2026 04:00:47 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: 4h/VBHUYgOXYPFBBUyrRNPVuvVvc9mGp82Mb2csDZUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:d9:d0:38:f1:c7:fd:bc:33:50:77:cc:fc:e9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Oct 25 04:00:47 2026 GMT
Not After : Oct 26 04:00:47 2026 GMT
Subject: CN=a28a78f983099e9e558bea7a2d71835ec1cd8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:e1:3d:ac:ac:ea:5a:dc:61:ad:d4:a0:05:
6f:b7:9f:79:b0:7c:1d:af:7c:4b:93:ee:b3:7a:b6:
7e:c0:0e:43:a2:3f:73:db:8a:14:05:3c:cb:1d:be:
87:37:03:5e:41:40:7d:0b:0f:8e:81:29:4e:65:a8:
3c:3b:5c:69:55:bb:57:f1:19:00:69:ca:7d:71:d8:
b4:51:ac:3e:5a:1b:c9:48:c5:0a:fd:3d:fd:dc:b7:
44:c8:85:49:50:83:3a:0e:1f:58:7f:b8:42:33:39:
8f:c5:34:ff:1f:71:51:4a:e8:ef:16:49:5f:ab:3d:
ca:67:ee:b9:61:32:b3:45:8d:4b:54:11:db:14:9c:
1d:74:c9:52:02:0a:ed:52:23:3a:af:db:3f:7d:40:
18:0f:e7:71:26:ad:3e:e1:9f:a9:80:63:bc:2e:3d:
21:5f:ef:0c:6a:42:90:90:06:70:9d:70:6b:d4:b1:
fb:67:e4:2d:b7:0f:30:1c:cc:af:c6:c7:8c:58:b8:
b6:39:bf:4c:07:2a:e2:93:a3:1e:32:02:d2:e8:29:
44:b4:48:d4:d8:6b:d1:fb:38:6d:07:49:db:53:f9:
64:23:d9:6f:6e:89:38:56:5a:b7:19:2c:e7:d5:00:
6d:7b:f2:76:40:36:84:d5:b1:10:3b:51:7f:8d:d8:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:78:F9:83:09:9E:9E:55:8B:EA:7A:2D:71:83:5E:C1:CD:8E:62
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:7f:8f:ca:69:46:72:ee:c5:c6:a5:43:ee:6e:de:11:0f:
7a:60:95:dc:2d:9d:5c:bd:53:67:91:f5:3f:ca:3f:23:94:05:
41:d5:6d:16:a7:ff:a2:bd:25:60:ea:fa:66:7a:5c:94:9e:ed:
3f:4c:2f:94:c3:6c:fd:b2:b9:30:1c:6c:1d:bf:91:f4:8f:1c:
f8:85:fe:ef:2c:e2:03:df:78:e0:a1:79:be:74:89:ec:b2:8b:
21:3e:90:06:f5:02:67:20:25:ab:c9:2a:46:f8:ed:b0:2d:96:
61:3a:bb:a5:c0:b9:ab:82:45:28:2b:60:65:f9:cf:85:1d:26:
f6:ed:8a:c4:78:18:19:54:e7:eb:b7:34:02:9b:07:1d:8f:c5:
5e:f9:b0:aa:74:2e:9d:8f:d5:cc:0a:f3:f8:70:e2:70:c8:ca:
04:84:87:ed:d5:9e:e6:fd:96:43:93:88:13:5e:5a:e0:d4:a6:
0d:83:03:c8:07:f8:e3:d5:0f:82:37:63:32:ce:5c:43:5c:6b:
50:d1:c5:de:f4:91:05:6e:ff:dc:a1:57:fe:58:eb:1f:c9:de:
86:16:96:80:5b:9a:a3:c6:f3:9e:04:be:b6:93:e6:06:f2:59:
89:96:59:ef:80:32:d1:66:f1:e4:e3:ff:b6:22:16:9f:a5:d5:
cb:29:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:55:56 2026 by rpki-client