Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: BA9S9qQGlmYZ8UNG1lv8FeekyS1Y29J1A2ggkG9zd4s=
Subject key identifier: 3E:FE:08:75:9E:AD:A4:39:C8:90:C9:A1:3B:E2:B8:A6:05:C8:09:59
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 019FCB5CEBEA094E7C9415D5A461F983533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 145D
Signing time: Tue 04 Aug 2026 06:01:32 +0000
Manifest this update: Tue 04 Aug 2026 06:01:32 +0000
Manifest next update: Wed 05 Aug 2026 06:01:32 +0000
Files and hashes: 1: CWHHJeYwgvu_DkfFEA9PpyyrrFU.roa (hash: oofrp1EIh2uZ/w767SyVcjsAPCoRcbFcavREaGG+ayc=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: /OZkF34X6n0mk3eBgYS0K1E1mYpzJpB9ujnNpQmbZz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5c:eb:ea:09:4e:7c:94:15:d5:a4:61:f9:83:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Aug 4 06:01:32 2026 GMT
Not After : Aug 5 06:01:32 2026 GMT
Subject: CN=3efe08759eada439c890c9a13be2b8a605c80959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:6f:4d:de:15:3c:3a:87:7e:98:0c:b5:90:35:
ce:45:c9:cb:9c:15:99:ee:43:7e:56:34:29:18:8d:
32:00:03:f4:96:77:9c:f8:f1:ce:fa:e4:e7:05:29:
83:03:c1:bd:dc:9a:01:ac:c4:7d:7e:98:af:84:87:
c5:e0:83:17:65:35:5c:46:e0:e0:c3:c3:f3:0f:71:
6b:82:c0:d3:63:c9:fe:74:59:b2:3c:45:a6:f9:69:
f4:11:ab:66:d5:fc:ab:15:09:6c:fe:37:f1:71:3b:
93:5a:b6:48:cf:36:6e:89:59:b9:e9:c3:f0:07:57:
6f:a1:36:ec:af:bf:ad:56:b2:75:c5:db:8a:c2:ae:
86:b8:4b:19:97:fb:b9:a2:87:1e:b5:c4:b6:bd:d6:
03:7a:74:47:10:04:f1:94:9e:32:6e:bf:3e:bd:1e:
7b:41:16:ce:1f:af:d9:94:13:7b:c7:69:f8:01:f2:
59:56:56:98:94:47:4e:15:ea:8c:e0:9a:89:42:91:
1a:80:ea:cd:0b:61:6d:35:66:74:bb:66:df:72:f9:
9f:5c:10:87:39:80:23:c6:79:57:a3:04:2b:40:e4:
ac:c2:80:83:c9:2f:78:3c:6a:b2:47:1c:bc:7d:f9:
e5:63:38:69:eb:e7:5a:91:ec:0d:e1:8a:f8:f2:25:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:08:75:9E:AD:A4:39:C8:90:C9:A1:3B:E2:B8:A6:05:C8:09:59
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:da:91:03:3e:d2:f9:c6:26:36:72:c9:e6:ae:d7:d3:c2:1b:
79:9d:3f:78:e2:20:26:9f:66:83:cf:43:ee:9e:6e:4a:cf:d5:
ab:7e:b9:a6:1d:4a:20:e1:39:9a:59:09:72:3d:c7:bf:68:da:
46:78:5d:3b:d0:00:ec:58:ef:91:5d:72:9e:96:a0:97:44:90:
04:92:77:a1:a6:2a:c5:bd:1b:ea:a9:ac:f0:19:7c:e1:cf:83:
70:55:49:69:d6:c2:36:75:73:9d:5f:ad:30:3a:7a:90:89:36:
a6:50:44:21:48:dc:00:09:56:f4:33:c1:3a:85:f6:99:03:8c:
ff:28:bd:62:1f:11:f0:95:a7:fa:ca:63:a4:3c:94:74:fa:64:
60:9b:50:70:61:d6:7b:c8:56:04:b2:32:c8:6a:c9:fd:de:c6:
7a:ac:4c:06:43:1f:23:91:ca:04:e6:68:54:cb:23:a3:e2:c1:
7c:19:3e:ac:e5:eb:7a:86:82:5e:c0:dc:24:d4:c9:1f:22:2c:
ed:3a:5c:c2:63:e8:7b:72:10:f5:86:b8:6c:3a:89:d9:4a:4e:
79:59:67:04:df:24:47:77:07:e0:3f:8c:90:08:c9:12:cc:bc:
01:0d:f3:73:c2:dc:45:f7:1d:6c:6b:a2:94:ab:85:d0:0c:f9:
5b:cf:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:37:30 2026 by rpki-client