Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: aDAtcpzjkq59iqL3z3FXBLmgrxxSXxtneAENpCBIldY=
Subject key identifier: 7E:25:0F:F8:60:4F:78:6F:76:D2:04:F3:30:DE:04:0B:0B:FC:4D:A8
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019CE8C9DCDEEDA2DC42D90E4C15F01A3C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 11CD
Signing time: Fri 13 Mar 2026 20:01:09 +0000
Manifest this update: Fri 13 Mar 2026 20:01:09 +0000
Manifest next update: Sat 14 Mar 2026 20:01:09 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: az3+vyd6qcJuxt/5gS3MG8v6eU+QgoKAgWTulCNf3v0=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:dc:de:ed:a2:dc:42:d9:0e:4c:15:f0:1a:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Mar 13 20:01:09 2026 GMT
Not After : Mar 14 20:01:09 2026 GMT
Subject: CN=7e250ff8604f786f76d204f330de040b0bfc4da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:09:c4:2f:12:6f:80:e6:f8:f9:26:9c:be:
70:e3:3d:69:49:1f:7b:11:7c:d0:93:eb:82:b7:f2:
d6:ad:e9:48:31:18:83:3f:04:dd:eb:e8:ff:73:5e:
eb:cd:bc:ff:d2:f0:f0:80:cc:9e:88:82:a5:0f:76:
3d:5e:cf:7b:8a:01:e8:af:45:e9:b0:32:76:b9:74:
39:10:75:a4:83:ce:c5:cf:a1:8d:87:22:f9:79:f2:
f4:24:8b:d2:10:ed:bf:50:6b:61:dc:eb:34:3b:b9:
37:c6:f1:d4:f3:b2:ce:43:40:de:23:70:55:86:9e:
5b:47:5b:ff:4f:4f:57:af:5a:21:b0:71:42:90:92:
b3:7d:f7:17:93:b0:2c:99:37:2e:d8:2a:a1:49:d7:
8c:32:db:88:46:25:c1:9d:fa:11:17:1b:32:af:30:
a9:63:c2:4e:23:f9:42:42:b3:06:0b:8f:cb:32:97:
7b:4e:20:7a:45:b4:af:42:48:43:ad:14:10:4f:27:
d1:1d:97:7a:42:3f:ba:04:63:5d:5e:39:43:3e:10:
f9:f6:bc:7d:86:2d:20:30:54:2a:ed:20:a7:f2:ae:
26:92:5e:85:2c:76:5c:47:28:7f:cd:56:e7:b4:69:
5d:1d:41:49:f7:09:c3:e3:1b:0b:35:8f:2b:eb:ad:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:0F:F8:60:4F:78:6F:76:D2:04:F3:30:DE:04:0B:0B:FC:4D:A8
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:72:bb:d4:21:31:bf:34:b0:81:66:17:42:1b:b3:c5:6f:
92:bc:33:b1:d0:dd:d0:05:35:2f:92:f7:86:2c:8e:c8:eb:c9:
04:4b:f3:8d:33:dd:a2:82:68:db:50:85:e0:af:0c:ad:31:44:
c9:d0:a0:06:06:cb:13:ce:0c:69:c4:8d:c7:c4:29:7d:e5:31:
89:77:59:ba:a7:14:ac:00:c5:73:17:22:0f:6f:bb:5c:eb:0c:
d4:97:39:6b:d2:74:f0:a0:0f:21:12:5e:bb:a2:19:36:81:e2:
7f:ea:c3:c1:21:1d:f8:8b:d9:e6:ae:08:ca:da:ac:ab:4d:8a:
8a:73:73:ff:b6:78:0f:a0:7b:08:96:10:f4:4e:ae:0d:65:1f:
37:e6:25:c9:4a:d1:51:a9:aa:28:27:1f:86:e9:ef:5a:2d:b6:
86:c2:bb:dc:87:d8:16:04:68:bb:94:01:a0:8f:2b:01:a0:b6:
c8:58:5b:34:f4:c7:99:cd:b8:7b:3c:a0:67:0a:9d:c9:32:61:
cd:74:5f:e4:47:a4:d7:be:93:7d:bf:04:db:c3:10:ab:03:30:
dd:f0:e8:fc:d9:2b:73:c8:8f:c1:90:61:fc:b2:2b:3d:e3:7d:
2f:c8:83:f4:31:c2:82:f4:aa:f2:cb:20:de:68:85:dd:b0:ae:
1b:e3:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:37:16 2026 by rpki-client