Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: NqwiAzGqfX4wK5tDRwTHk5m2DiX9n5oUbW0hjTWnQfk=
Subject key identifier: A8:E4:C7:C8:B9:BF:E6:F0:4A:9A:C1:52:B9:C0:1A:58:F8:37:97:2D
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 019DF9F237C0F045A65177F2130276D028C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 136C
Signing time: Tue 05 May 2026 21:01:33 +0000
Manifest this update: Tue 05 May 2026 21:01:33 +0000
Manifest next update: Wed 06 May 2026 21:01:33 +0000
Files and hashes: 1: CWHHJeYwgvu_DkfFEA9PpyyrrFU.roa (hash: oofrp1EIh2uZ/w767SyVcjsAPCoRcbFcavREaGG+ayc=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: E2s5Kp50RdV5Pc7P726kYE671FiucAbZEZflVCzAl/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f2:37:c0:f0:45:a6:51:77:f2:13:02:76:d0:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: May 5 21:01:33 2026 GMT
Not After : May 6 21:01:33 2026 GMT
Subject: CN=a8e4c7c8b9bfe6f04a9ac152b9c01a58f837972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:51:47:78:44:54:db:db:4f:4b:f5:46:bb:
5d:c3:6f:3f:f4:9a:fa:09:ac:83:62:3f:14:3b:49:
36:8d:55:4c:01:07:b2:dc:92:24:61:62:1d:cf:b2:
39:57:70:af:65:68:ca:29:c4:3c:88:16:a6:74:55:
4f:15:2d:9a:e7:37:47:a4:33:48:b2:62:b7:74:10:
b2:53:9a:d7:31:14:11:6b:4d:22:97:2b:55:1e:44:
2a:2d:da:4b:ca:a6:94:57:0f:fd:d5:03:72:aa:d1:
48:75:48:c5:f2:ef:0e:cb:ff:95:2c:ac:20:08:e5:
ce:4c:6e:28:a3:51:83:c6:70:aa:b2:5a:2f:97:dd:
55:4c:7a:2a:90:ea:5a:be:77:e0:52:94:93:8f:0b:
d6:c6:45:c2:70:2a:3a:8f:92:91:c2:61:fe:e0:9e:
e6:0a:8f:9b:ac:a8:85:a3:9d:f5:15:3b:f5:c9:e1:
ca:6d:3e:a9:fc:b4:da:6c:a9:67:cb:8e:a7:8a:82:
4c:a2:bf:82:6e:63:84:93:7f:34:69:87:09:d9:96:
78:73:7d:45:13:19:a4:37:3d:ff:51:93:41:09:8f:
db:7b:de:71:f6:1c:e7:a3:fa:9d:65:42:2a:19:17:
b5:a3:85:e0:1b:0f:3e:c9:3d:ab:cd:9c:ce:f9:b0:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:C7:C8:B9:BF:E6:F0:4A:9A:C1:52:B9:C0:1A:58:F8:37:97:2D
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0f:48:3b:d5:47:89:d9:9a:d8:63:a0:67:4a:78:97:ba:f2:
b2:6c:c4:fc:80:7b:78:ad:80:6c:c3:cc:36:55:00:0b:9e:9c:
a4:13:b1:f2:c7:b7:ab:d0:ed:e4:4c:67:8d:82:91:51:29:43:
a9:a9:6c:12:16:17:0d:32:42:d2:72:a2:ba:e6:54:31:b8:f6:
b4:3b:4a:4b:a3:81:df:3a:03:54:c4:78:fa:b4:38:b9:1b:82:
96:67:2b:12:c2:dc:81:20:c3:d1:c2:4b:00:e5:f3:05:9a:96:
56:27:fa:9e:f9:7f:db:a9:2b:c9:c2:b3:5f:20:a1:d4:73:54:
75:58:0f:d8:28:19:05:a9:60:10:73:2c:8d:41:7e:d5:b7:56:
65:64:8f:ca:5e:58:72:48:36:4d:a5:b0:b6:e4:d3:fe:bf:cd:
39:0d:4c:2b:d3:be:29:03:dd:88:f9:7c:97:d7:f9:df:30:a0:
bf:c3:bc:60:49:4f:d5:4d:3a:b0:05:32:f8:67:0b:ea:3f:20:
33:d2:e6:db:0f:d7:6b:f7:09:0a:e0:8e:48:d3:1e:a0:8b:99:
34:4d:90:1b:03:e8:46:56:71:fa:7e:1a:61:86:c5:f6:eb:c9:
d8:8b:48:a9:94:ec:c2:c7:d2:24:0e:db:be:27:65:19:6c:d6:
a3:dc:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:52 2026 by rpki-client