Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: Py1L2GoLd5tjvIoJIc0emkD6WfCL9qbSRQZpNia9nE0=
Subject key identifier: 53:03:24:D6:CB:85:5A:D0:63:C7:C1:E2:76:C7:2D:42:3D:5E:FB:A7
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019DCDBD69A0EE2427B75F687EAD238EE78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0FF6
Signing time: Mon 27 Apr 2026 07:00:35 +0000
Manifest this update: Mon 27 Apr 2026 07:00:35 +0000
Manifest next update: Tue 28 Apr 2026 07:00:35 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: C+7v+srLBsKMFk2LQsuRqfLFadKvBRe+C2W1F65O3NU=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:69:a0:ee:24:27:b7:5f:68:7e:ad:23:8e:e7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Apr 27 07:00:35 2026 GMT
Not After : Apr 28 07:00:35 2026 GMT
Subject: CN=530324d6cb855ad063c7c1e276c72d423d5efba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:33:c4:e8:fb:3f:c3:c4:72:5b:ca:f4:7c:
9d:c7:ba:ae:81:ea:cc:b5:f6:1a:48:c5:ce:a3:32:
51:6b:7a:35:78:56:04:fc:24:e6:5d:f8:ff:f0:57:
2f:42:a6:78:81:22:fa:3f:0e:67:7c:f3:a2:fc:0d:
ff:01:8c:8a:d9:33:50:46:5c:69:c8:73:ec:51:4b:
71:e9:5b:45:f7:1d:78:f3:a4:cd:42:de:4e:21:cd:
2e:e5:dc:97:12:cc:6a:7a:01:d2:e2:40:9b:93:95:
32:b3:03:68:2b:ee:07:d8:30:54:2a:2c:da:08:66:
10:7b:56:15:d5:54:0a:54:92:8d:ef:2f:de:32:21:
29:72:02:75:e4:9e:e1:fd:a7:62:b5:c8:63:ec:51:
4b:70:b9:1b:8d:79:90:ca:a8:48:26:2f:cf:17:78:
11:05:98:ce:69:6d:70:be:fc:ad:dd:76:35:14:42:
c7:cc:04:1c:67:9b:de:98:b1:17:7a:2b:d8:2a:17:
e7:41:a8:59:5e:44:cb:b5:99:b1:2a:8e:39:6c:a5:
07:af:af:c2:67:b1:f6:19:03:14:b0:50:c7:c2:67:
f8:f4:98:62:95:24:04:88:26:1b:06:f4:8d:0c:b2:
0d:b3:2c:14:5d:bb:ad:30:dd:c8:a0:44:80:1a:fa:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:24:D6:CB:85:5A:D0:63:C7:C1:E2:76:C7:2D:42:3D:5E:FB:A7
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:21:53:8f:1a:d6:5c:18:a8:46:a9:38:52:30:cc:c7:f6:
e6:c1:11:6c:65:87:4d:00:ca:00:10:da:1a:34:e9:72:f9:7a:
fe:23:d9:ba:bf:71:f2:0c:50:00:86:f6:9b:3a:7d:47:19:3b:
11:b7:39:1a:41:09:17:8d:aa:47:1a:d4:b9:5c:e2:83:06:79:
45:54:80:7d:70:a9:09:28:f8:4a:cd:cd:d5:38:0a:8f:d1:ea:
5c:93:af:ed:b4:c6:23:98:c8:5f:0f:ce:cb:15:14:61:c7:53:
ee:39:51:77:6f:cc:53:5b:b5:9d:1c:50:ac:a6:33:3f:bb:4f:
6e:0e:6c:f5:3a:f4:a9:6a:c7:0a:fd:b1:6d:d5:08:a4:79:88:
c9:63:73:89:f8:e1:ed:a4:da:00:94:16:94:59:5e:fc:16:50:
cc:0f:9f:37:6d:9e:0e:de:7f:26:73:2e:7e:50:39:3a:59:ee:
75:72:8e:19:be:ee:a6:9c:c1:a3:5f:6b:e6:2e:29:0c:88:23:
c5:03:c1:34:1f:6c:87:33:67:54:01:70:36:b9:b3:27:05:96:
70:14:48:d8:e3:bf:15:87:15:b7:da:ea:df:30:6c:e5:b8:d5:
25:51:96:1c:4f:ca:61:67:16:6e:7a:35:10:16:8d:62:81:31:
cb:98:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:00 2026 by rpki-client