Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: Z1XVkSOnZwm4jSwXf+dN6hrLId491CfYptzCvygcq+g=
Subject key identifier: ED:7D:6D:46:31:A4:93:22:1B:42:9C:46:B9:5F:81:D2:7C:03:28:42
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019D3752D98B6184719F3812A87DA7FC8E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: uNVFPOsZj51trdCXUw7iylYLicDzEsGXViigKG8sh8c=)
2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d9:8b:61:84:71:9f:38:12:a8:7d:a7:fc:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=ed7d6d4631a493221b429c46b95f81d27c032842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:68:b8:42:fc:8e:63:64:75:91:9b:40:97:
e5:d3:4b:eb:45:0b:34:d4:ec:7d:41:18:2b:db:8a:
35:ae:36:94:50:0f:59:b6:65:48:93:3c:84:75:00:
84:76:e5:f8:07:f4:19:57:e0:5b:0c:89:03:9f:6e:
34:b8:80:4c:6c:b6:1d:47:f7:30:c0:88:66:20:d9:
31:e3:b8:d5:26:c9:fc:14:4d:b2:0f:ff:35:50:37:
f9:fe:f7:36:1b:27:87:2f:64:b3:54:d0:ff:c8:41:
47:24:24:8a:96:b3:5a:3e:4f:81:42:6d:3d:a7:f6:
cc:77:0c:f7:4d:c2:9d:da:df:ec:50:11:3b:56:3f:
fa:e2:cd:9d:26:48:6e:ec:0f:08:c9:ab:5a:de:a6:
b1:40:8e:a2:d5:24:a2:e2:4b:d2:20:96:57:fe:9e:
04:69:5b:3a:f4:de:1c:24:f3:35:61:25:10:d2:4a:
db:62:0b:00:3b:7b:45:51:12:20:6b:0c:8c:cc:16:
ef:b4:3f:46:b9:64:2c:25:a5:7f:15:f3:46:ca:9e:
c1:97:b1:77:11:de:66:4e:72:0e:54:fe:5c:9b:60:
42:a3:a9:ed:bb:bf:42:53:79:74:6f:66:d3:a7:15:
00:b1:86:66:29:d7:d8:81:df:1c:11:6d:8f:08:75:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:6D:46:31:A4:93:22:1B:42:9C:46:B9:5F:81:D2:7C:03:28:42
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ee:68:5b:25:07:ec:1d:54:5b:ba:b3:77:35:24:d3:4b:9c:
04:6e:9e:4d:8a:a8:d6:85:d5:21:6c:56:4d:62:fb:4f:1a:6c:
62:52:7c:34:b8:a9:1c:d9:67:0f:03:c6:c6:24:16:10:d3:dc:
3a:f1:23:f4:48:e1:00:33:48:b2:a3:e3:27:df:0a:f5:fa:31:
a2:72:1e:65:54:de:68:4a:28:49:36:11:39:56:44:22:9e:22:
7b:2f:30:d2:93:f8:a3:0e:6e:9a:08:35:15:ee:fb:33:a8:51:
15:3c:29:90:fa:67:bd:66:89:a2:56:ea:cc:d9:41:fb:0f:0b:
b4:99:74:95:08:ff:ab:ca:38:3b:be:a2:50:5e:d0:c1:ed:e2:
2a:57:7d:04:7a:32:30:c7:0d:eb:cc:72:41:fe:4b:52:7f:e4:
88:23:41:e2:7a:91:5c:39:f5:b9:ce:f7:fb:8c:ff:2c:2f:f3:
89:07:ec:82:d9:a7:d1:2f:ed:bc:5a:7b:fd:7c:ef:98:51:2b:
05:c0:e6:a5:92:4a:7d:51:07:92:60:3b:97:df:2f:70:3b:5f:
79:46:f8:7e:91:dd:15:5f:d7:80:ec:dc:8f:88:d9:cd:8d:bf:
ce:85:ac:db:0a:46:38:d3:ac:e3:bc:ba:56:82:79:00:60:86:
5d:db:89:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtmLYYRxnzgSqH2n/I6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4
NTEyZTcwHhcNMjYwMzI5MDIwMTA5WhcNMjYwMzMwMDIwMTA5WjAzMTEwLwYDVQQD
EyhlZDdkNmQ0NjMxYTQ5MzIyMWI0MjljNDZiOTVmODFkMjdjMDMyODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIRouEL8jmNkdZGbQJfl00vrRQs0
1Ox9QRgr24o1rjaUUA9ZtmVIkzyEdQCEduX4B/QZV+BbDIkDn240uIBMbLYdR/cw
wIhmINkx47jVJsn8FE2yD/81UDf5/vc2GyeHL2SzVND/yEFHJCSKlrNaPk+BQm09
p/bMdwz3TcKd2t/sUBE7Vj/64s2dJkhu7A8Iyata3qaxQI6i1SSi4kvSIJZX/p4E
aVs69N4cJPM1YSUQ0krbYgsAO3tFURIgawyMzBbvtD9GuWQsJaV/FfNGyp7Bl7F3
Ed5mTnIOVP5cm2BCo6ntu79CU3l0b2bTpxUAsYZmKdfYgd8cEW2PCHVXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO19bUYxpJMiG0KcRrlfgdJ8AyhCMB8GA1UdIwQY
MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt
ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2
LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+5oWyUH
7B1UW7qzdzUk00ucBG6eTYqo1oXVIWxWTWL7TxpsYlJ8NLipHNlnDwPGxiQWENPc
OvEj9EjhADNIsqPjJ98K9foxonIeZVTeaEooSTYROVZEIp4iey8w0pP4ow5umgg1
Fe77M6hRFTwpkPpnvWaJolbqzNlB+w8LtJl0lQj/q8o4O76iUF7Qwe3iKld9BHoy
MMcN68xyQf5LUn/kiCNB4nqRXDn1uc73+4z/LC/ziQfsgtmn0S/tvFp7/XzvmFEr
BcDmpZJKfVEHkmA7l98vcDtfeUb4fpHdFV/XgOzcj4jZzY2/zoWs2wpGONOs47y6
VoJ5AGCGXduJJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:24 2026 by rpki-client