Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 1RKd4JxSjC9Xt8bEBaImgT9d+m4EBKHFNVZsIQqYvIY=
Subject key identifier: DC:66:4F:B4:62:7D:1B:EE:A4:01:86:2F:3E:BF:6C:C2:F4:F5:26:9B
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019EB57C02F3BBAD9BBF4A83E2E3D7DB3FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 106E
Signing time: Thu 11 Jun 2026 07:01:03 +0000
Manifest this update: Thu 11 Jun 2026 07:01:03 +0000
Manifest next update: Fri 12 Jun 2026 07:01:03 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: 5dcMAC2nIq9rJuX40//yr5H31Esc5DVSBbT1KI29PTw=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:7c:02:f3:bb:ad:9b:bf:4a:83:e2:e3:d7:db:3f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jun 11 07:01:03 2026 GMT
Not After : Jun 12 07:01:03 2026 GMT
Subject: CN=dc664fb4627d1beea401862f3ebf6cc2f4f5269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:0c:7e:53:24:e3:b9:db:cd:cc:d4:45:f8:
0f:61:68:d6:8d:89:28:12:c4:92:85:6c:9c:24:79:
13:44:72:d6:c3:61:d7:06:19:29:73:7a:a6:74:e5:
01:9e:14:ac:5e:95:39:aa:fe:97:05:91:f1:e9:ff:
32:fd:87:79:ee:29:bf:51:a6:b3:db:e2:b2:19:48:
9b:3a:2a:13:74:a1:11:b6:57:b3:94:f7:c2:9c:02:
58:ec:77:bd:98:12:29:bc:15:6d:c9:41:d9:1c:9e:
7a:0b:5b:97:03:f1:11:09:48:cc:1a:f8:74:10:7a:
ef:9f:05:3a:2f:53:d5:54:f4:51:42:30:fa:bd:2f:
d3:34:4d:e7:c0:d0:ed:34:76:04:d7:ac:46:6c:fd:
65:ed:e9:b0:87:39:d2:b4:9e:a0:0a:e2:7b:c0:3c:
47:81:03:d0:37:ab:c3:c1:ee:d8:49:77:48:aa:ea:
5f:25:42:20:8b:93:1b:db:29:ae:8f:1a:1e:35:2a:
d5:08:b6:7e:97:c7:29:a2:7e:ce:0d:5c:21:c6:a7:
15:94:7c:02:ea:a7:d6:f7:f6:09:88:55:48:00:2a:
6e:62:54:fb:fc:59:a1:55:65:d1:b5:38:b0:75:ae:
c1:3f:a9:26:04:a5:f9:5b:73:53:e9:1c:b2:8a:a2:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:4F:B4:62:7D:1B:EE:A4:01:86:2F:3E:BF:6C:C2:F4:F5:26:9B
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:44:8e:09:4a:c9:e9:3b:e1:e2:dd:91:12:eb:0f:0a:3d:
23:6a:3c:7d:90:c9:97:cc:3f:6e:b9:da:e0:3b:7b:1e:ad:33:
3f:b4:da:79:04:3a:8a:37:e8:ab:61:ed:94:5c:6b:a6:33:a1:
f1:c3:72:d4:ec:45:51:34:80:32:ea:e8:5e:eb:0b:7e:40:13:
8f:41:c7:a5:8c:ae:35:fd:be:fd:62:87:a2:8b:86:d9:5c:27:
ca:a4:f6:17:56:03:28:31:d1:fd:99:52:a1:b4:50:b9:b5:49:
7d:a2:33:0a:7f:1f:2c:a2:cf:50:21:5e:cc:7a:0a:7d:3d:bf:
6d:f1:69:dc:33:7c:63:0d:ba:03:60:c4:f9:c8:60:b9:ca:9a:
06:69:a8:95:0d:62:8a:28:a3:b3:0a:02:c4:55:12:df:6b:71:
ae:21:51:c7:35:23:e7:f6:08:36:ea:01:63:8f:94:4b:47:05:
b1:b9:a4:3c:68:39:5d:2a:b3:c0:f4:ec:41:16:56:28:56:59:
25:43:85:37:bd:68:88:f8:a9:4f:1c:cd:f4:de:d7:51:d6:3b:
fb:dc:45:ae:38:d3:ae:37:44:52:00:dc:71:3f:d6:1f:23:21:
c7:cc:c7:c9:8d:61:1b:ae:90:c6:80:95:1a:c0:97:cb:f6:4c:
0b:8f:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:31:11 2026 by rpki-client