Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: dEJZ4rparKoi2hzthPJl8rgZwQxe/8NHFLfl1N0JZGE=
Subject key identifier: 48:29:1C:4D:11:EC:03:5B:A6:6E:3F:0F:D4:5C:FB:1F:24:04:6A:89
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019DD088160C29373197C4B453B90656941E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 1245
Signing time: Mon 27 Apr 2026 20:01:12 +0000
Manifest this update: Mon 27 Apr 2026 20:01:12 +0000
Manifest next update: Tue 28 Apr 2026 20:01:12 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: IXm1jHq584J+fuN81yzCv/zIemQ4nVLinKCMpWxSSgk=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:88:16:0c:29:37:31:97:c4:b4:53:b9:06:56:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Apr 27 20:01:12 2026 GMT
Not After : Apr 28 20:01:12 2026 GMT
Subject: CN=48291c4d11ec035ba66e3f0fd45cfb1f24046a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:01:7d:4b:65:cc:cb:d1:24:81:e0:de:86:
d7:56:14:f0:f6:1e:dd:d4:61:d8:ea:cf:ae:df:b9:
f8:33:22:6a:cd:77:c1:e6:17:30:83:11:5a:ac:ce:
a8:e0:44:6c:b2:f0:58:46:e1:58:e2:43:50:82:14:
b8:26:c7:fe:ef:41:4b:c7:c1:58:53:f0:6b:ea:7a:
ea:4a:2a:65:db:54:72:21:8b:50:28:bc:41:48:17:
7b:49:9b:7f:12:c2:c5:b7:03:b2:f0:7e:39:27:bf:
4b:c9:55:46:ae:d9:bc:7c:02:79:80:d4:80:24:23:
23:71:db:37:5c:43:5a:79:a9:cc:c9:ad:ef:a4:1b:
82:de:f0:a6:a0:cf:2a:ca:35:8b:88:f3:ba:9e:74:
0e:1a:60:ac:87:9f:83:17:db:fd:f9:b9:a5:e2:f7:
f5:00:13:1c:3c:28:72:2f:23:47:7c:68:e5:8b:80:
bb:21:36:66:5e:04:5d:00:e6:e2:23:73:06:47:d5:
1f:22:c2:60:53:4d:49:1f:bf:5b:fa:4b:78:af:3d:
c1:55:34:83:d0:5b:de:2e:b7:60:92:6f:a4:59:99:
a0:e4:11:49:6f:62:9e:1b:29:fa:6f:17:64:43:f9:
18:e5:a5:d5:1a:6f:c8:b0:2f:6f:5b:aa:98:4d:3f:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:1C:4D:11:EC:03:5B:A6:6E:3F:0F:D4:5C:FB:1F:24:04:6A:89
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d8:14:de:e3:f3:0e:78:e6:aa:98:7f:ff:0d:34:8e:78:8c:
c8:a0:bf:54:1b:71:3d:c1:ee:09:e5:15:fd:d4:57:44:33:98:
16:19:11:24:ea:dd:dd:83:02:e4:b6:c1:c8:e9:87:1e:5e:2b:
cb:ad:11:a1:5e:89:b2:e2:83:39:a2:06:00:8e:49:e7:63:28:
7d:9b:62:80:02:0a:34:6f:f8:d9:75:e1:6b:43:d7:97:dd:13:
be:60:47:e8:75:b0:52:a7:79:5d:e4:ba:ce:17:ea:07:e4:e7:
78:9e:d3:e3:6e:2d:c7:aa:ae:c2:8a:f5:dd:7f:c2:be:e7:13:
96:d7:5f:7c:d3:05:25:77:d5:2e:af:ca:9e:a5:1f:38:05:c3:
5f:88:9b:37:9e:10:2f:85:39:9f:f9:1f:79:38:58:99:61:b1:
a8:96:af:69:34:66:9e:17:80:f0:4d:66:9e:8c:75:e3:60:0c:
fd:09:e0:31:6b:ec:ae:81:10:d1:be:92:22:06:a8:c8:58:fd:
ce:18:bb:19:8d:a9:46:77:ce:6b:28:41:bd:e7:e3:ee:c4:70:
97:4b:1a:ce:8d:a8:e9:c0:1f:8a:70:33:4d:b7:44:b6:96:13:
c8:ce:af:5b:ff:08:cc:cb:3c:5a:64:4d:f3:b3:32:53:f0:c5:
5a:ad:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:32:22 2026 by rpki-client