Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: T9FR9WXS5JiKSqcvukWBPNJgwQZoQUp8rjFHr4cRoZ8=
Subject key identifier: B8:BF:12:F6:D4:05:15:36:EF:59:FF:1F:AC:DC:92:0B:F1:EE:14:43
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019F18301D5837480CA2ADC83F1D294A3FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 11:00:34 +0000
Manifest this update: Tue 30 Jun 2026 11:00:34 +0000
Manifest next update: Wed 01 Jul 2026 11:00:34 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: k8Tq5BG7FfoZ8nmgog8lhSd26bQcOakZGchkOygxR3I=)
2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:1d:58:37:48:0c:a2:ad:c8:3f:1d:29:4a:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jun 30 11:00:34 2026 GMT
Not After : Jul 1 11:00:34 2026 GMT
Subject: CN=b8bf12f6d4051536ef59ff1facdc920bf1ee1443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:0b:ee:51:48:3c:66:7e:92:df:d7:c9:20:
23:3d:9d:c4:1e:ee:54:4b:2c:75:31:1d:2a:1c:d1:
ed:e1:03:04:94:d3:f7:7d:51:10:d9:b5:2a:27:ac:
36:fe:de:6f:a3:61:d4:bd:52:2e:7c:31:3b:c1:55:
59:56:41:f7:b4:cf:85:38:2f:ec:26:cd:37:f7:3b:
db:1c:b0:3f:6e:5c:13:30:87:ff:05:85:9d:a6:1b:
a0:9a:89:8b:f5:55:9b:4c:0f:32:7f:2a:4f:e9:e2:
a6:13:63:5c:29:9f:ec:21:4c:ac:2a:3e:35:de:05:
53:5b:32:02:75:66:4c:2c:e2:b6:7f:5f:45:01:5c:
be:c6:11:95:ba:0b:79:43:d5:86:fd:34:5c:5e:51:
8f:30:7b:48:37:fa:28:70:2c:3a:41:10:3f:72:15:
28:b6:27:b5:68:b3:f8:a1:c4:aa:23:66:bc:83:88:
3e:ea:e6:fb:86:9b:52:1b:1e:a3:58:7b:79:5f:e3:
ae:35:31:cf:91:7b:61:04:6f:48:b5:72:e9:6a:23:
d1:46:fd:60:7e:d5:2f:12:3d:58:58:98:b1:44:10:
8b:d2:b7:e6:01:53:1a:5d:a3:69:f1:a2:68:52:14:
c0:62:02:76:ae:3e:32:de:0e:5b:84:c7:2e:be:52:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:12:F6:D4:05:15:36:EF:59:FF:1F:AC:DC:92:0B:F1:EE:14:43
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c5:2f:4e:37:de:eb:04:f3:12:42:14:bc:b5:4c:74:00:4e:
04:26:0e:50:14:33:85:e5:29:d8:45:ea:f7:54:9d:b3:89:5c:
ae:10:83:89:91:a5:d7:79:a7:18:2f:92:f7:f8:73:bb:2a:49:
45:41:c6:ba:f2:4b:fe:eb:63:c9:57:99:23:e5:db:e1:83:17:
5f:27:ab:f7:46:88:a5:ee:15:9e:6a:95:79:3e:1e:7e:75:77:
f0:78:bc:40:b1:d4:84:bf:e4:b5:43:bc:d1:ab:ab:f8:c2:d3:
83:0b:4b:35:eb:bd:e7:ff:38:38:ec:6f:bd:85:6d:3b:93:a6:
c0:41:d8:dc:aa:37:e9:2a:5a:de:c3:51:5c:f4:13:be:05:49:
86:57:a6:62:ad:9d:d2:fa:84:dc:18:e0:a6:34:6e:e4:ea:be:
d2:85:68:d4:f6:20:be:36:ec:95:4a:23:f5:74:67:c9:e9:19:
02:df:dd:57:96:09:ef:88:b5:2d:66:e5:05:70:2f:c7:84:b4:
6f:2a:7f:5a:4a:ce:83:22:35:a4:89:dd:0a:f3:2c:16:e3:66:
67:52:01:70:6d:41:41:5d:42:9a:81:6c:83:61:51:79:77:4e:
25:f5:f6:28:00:d4:cb:bb:19:c0:fc:b0:94:fb:67:25:03:32:
6a:74:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:01 2026 by rpki-client