Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File: EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier: blRQaBH4vVHOCqNz4NxXnXNJFgxK9fYSU4SfxJ6PXJc=
Subject key identifier: 85:19:FA:D6:B7:62:A2:DF:4C:74:A8:D7:26:A0:1F:87:0D:2A:9B:DF
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 01A17D3CDDCE908671D0CA46A5C196CDE464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 12:01:43 +0000
Manifest this update: Tue 27 Oct 2026 12:01:43 +0000
Manifest next update: Wed 28 Oct 2026 12:01:43 +0000
Files and hashes: 1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: ykLa90ZVp+qeOMLHh9PrRaAQFrvswUcQ42UB6Rdbhuk=)
3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:dd:ce:90:86:71:d0:ca:46:a5:c1:96:cd:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Oct 27 12:01:43 2026 GMT
Not After : Oct 28 12:01:43 2026 GMT
Subject: CN=8519fad6b762a2df4c74a8d726a01f870d2a9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:f2:ac:e9:e0:77:b8:db:5d:d4:f4:e8:2f:
ef:6e:e0:d3:03:78:aa:4b:1d:d9:b5:fa:9f:5f:d0:
0f:1c:93:15:ac:b8:3e:47:19:dd:7e:bd:5c:01:b4:
3d:26:eb:c0:96:95:63:b2:dc:9b:57:c5:4e:21:a3:
87:cf:fd:12:4f:00:1c:f3:66:80:e3:3e:b6:50:eb:
06:fb:65:e9:75:30:53:94:f4:47:62:0b:c4:36:aa:
ff:a8:98:fb:ca:c1:dc:b9:51:e7:38:51:b3:a3:d0:
fc:bf:7b:8f:e7:80:d7:bd:2b:89:87:96:37:80:6e:
8d:f3:a4:84:61:c9:eb:d7:b7:fa:78:ab:60:1a:6d:
57:d1:ad:30:90:ca:d7:3f:7a:71:bf:b2:8c:36:d8:
6f:35:42:6a:86:79:a8:97:f2:c5:07:ff:ed:f4:e5:
c3:9a:a8:5d:6a:88:fb:3f:5d:a8:df:fe:c1:30:63:
4f:43:02:b5:61:cc:29:7e:b5:96:fb:40:9f:e3:9c:
00:50:d1:03:e2:0c:6c:c4:09:70:f6:d9:64:b4:d8:
7f:7d:0f:70:89:b9:03:22:d1:a6:3e:b3:58:65:9c:
05:82:a5:8a:4d:16:87:02:0d:e8:e9:30:51:d8:a0:
18:3d:1b:a9:14:72:01:52:b0:6b:07:f0:5c:7e:15:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:FA:D6:B7:62:A2:DF:4C:74:A8:D7:26:A0:1F:87:0D:2A:9B:DF
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:18:dd:f7:71:40:ae:43:8b:86:e5:56:41:0d:7f:6a:66:99:
33:3b:99:a3:9c:23:fd:b4:a6:c4:37:78:f2:d9:6b:c1:fc:90:
92:da:ae:9f:70:0c:d8:b4:df:95:50:5c:04:e4:f1:3f:72:8a:
ff:bd:d2:ad:f6:cc:1b:8b:f6:bd:fd:91:77:47:f7:8c:7e:40:
39:1a:08:9d:bf:b4:ac:78:e0:6f:dd:a7:74:55:47:7b:fb:35:
bd:7c:22:1b:1e:ff:c4:c8:d7:4c:c1:c7:f9:5b:91:22:6d:48:
24:55:5a:bf:24:3e:29:7b:28:b9:5e:fa:55:a4:9f:ea:14:9f:
53:b9:b1:82:d8:71:c9:51:ef:b4:7c:46:e5:4b:e6:25:f3:89:
e5:35:b5:5f:db:a9:2d:59:6d:6a:b0:c0:c7:7f:da:a0:f9:06:
5e:ef:8f:f0:05:6c:c0:84:00:b0:bd:a8:fe:a0:a4:dc:56:35:
1c:e0:3b:f3:99:e9:a6:e7:dc:f0:66:46:cd:a1:e2:6d:73:6f:
0e:6d:96:2c:5c:e6:26:2f:ce:a7:de:ce:e7:29:7b:5b:2e:84:
fe:d4:9c:a9:0b:c5:b4:45:12:f6:02:c5:59:2c:57:9b:79:77:
a3:4b:17:b7:c9:16:ad:d4:55:4c:5e:24:73:08:ca:00:07:bc:
57:2c:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:27 2026 by rpki-client