Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: +wIgMdFdjdDxSINuxEv34XnKjWOxArhac8D2tBBUB4s=
Subject key identifier: 63:A0:8C:94:87:45:B6:67:ED:92:B1:05:3B:F3:E6:B2:D5:B9:6A:85
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019D37F6EC663423635D6B3C3398B8E6B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 14A2
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: ipR91oJPd0wwlYrVq7EMYGDLhGMt/79h2DSrlXtDuww=)
2: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (hash: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ec:66:34:23:63:5d:6b:3c:33:98:b8:e6:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=63a08c948745b667ed92b1053bf3e6b2d5b96a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:28:69:d2:7a:7d:ff:0e:5e:45:17:d7:ec:
5c:1f:d0:4a:7a:03:ae:5d:d5:60:20:43:95:68:f1:
33:3c:bf:bc:a6:83:58:e2:00:59:cc:c4:3b:84:3f:
68:3f:bb:00:b7:0b:02:90:1b:d5:9f:cf:f6:40:9d:
01:cb:17:b4:d1:54:b7:fd:3c:b1:15:04:09:43:5e:
24:7c:72:0e:6b:a4:0e:a9:70:42:47:0b:9b:26:4b:
81:a6:01:13:74:37:18:95:1a:62:0e:df:01:81:08:
9d:9a:cd:86:7f:09:a7:7b:e2:ad:e1:fb:7c:36:41:
33:f3:6f:5d:46:41:d1:e0:eb:84:42:06:d9:94:7d:
76:eb:09:e8:1b:5f:89:3f:4e:fa:a8:b4:13:88:c0:
c6:61:03:ec:35:af:65:66:6d:5a:1b:cd:94:b9:ed:
76:2c:f5:29:82:9d:64:b4:07:72:69:31:c0:58:d5:
9d:fa:96:36:57:57:6b:f8:ca:74:41:84:cd:c7:85:
75:13:fc:38:38:b9:d7:e0:f8:49:20:1d:d6:98:b2:
4b:75:67:1a:73:de:57:b5:83:60:47:3f:cc:fb:b8:
c0:61:77:a0:c8:d0:84:60:67:83:f4:0f:55:8a:28:
01:c1:67:42:8a:67:9e:e2:d8:f9:7a:37:36:b2:33:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:8C:94:87:45:B6:67:ED:92:B1:05:3B:F3:E6:B2:D5:B9:6A:85
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:91:33:4a:73:ab:33:e3:fe:18:cf:2e:e3:7a:52:98:8d:
27:b7:51:23:bd:56:93:8e:80:e9:f6:f0:d8:d4:59:00:f0:64:
89:c4:c7:81:24:be:f8:21:b7:fd:4a:78:0f:c5:f4:40:38:5f:
0c:62:2f:07:3b:f2:29:98:80:81:b3:c1:2b:c7:d4:1c:94:57:
f7:aa:54:46:a8:3a:ff:22:46:ef:62:a6:4c:7d:21:e9:9e:9a:
4c:fb:d8:a4:64:cf:56:c1:c2:2b:0f:6f:ba:ca:58:48:9c:f1:
b3:f9:fc:7d:80:82:66:03:d6:63:e3:0e:b9:70:2c:0a:73:f4:
fe:19:84:10:33:b9:9b:8a:01:87:95:48:18:e1:8e:df:bd:2a:
a4:a8:5f:79:28:2d:d9:97:9d:b3:60:26:a4:a6:5e:00:14:ed:
f3:ca:0a:f0:1c:b0:9d:42:a7:aa:72:ff:6e:bd:8c:d1:eb:ab:
9e:4d:73:3b:a6:0a:bf:05:0c:ab:67:9d:df:1a:30:5e:d4:ff:
48:66:48:bc:16:82:df:ec:49:83:26:20:a6:c7:35:76:2f:39:
5f:b2:ce:37:eb:a7:49:1e:e4:e6:0c:11:df:9c:d5:1c:89:b2:
e4:4f:a6:17:80:7c:65:4a:41:91:24:ef:ee:29:02:83:80:c9:
d7:c2:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:44 2026 by rpki-client