Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: vrGqWm/gpdmguWRudI46aeDgGubrWvmuNYpzwhZyZYY=
Subject key identifier: 87:4E:36:FA:ED:1E:3C:D3:C9:2D:4F:87:F6:E2:FF:58:B8:A5:ED:9A
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019F9D3997147BCEB897E82A982A006990AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 10E6
Signing time: Sun 26 Jul 2026 07:00:24 +0000
Manifest this update: Sun 26 Jul 2026 07:00:24 +0000
Manifest next update: Mon 27 Jul 2026 07:00:24 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: hSp7Y1HagLk+7VCpZtVDJYDti22z9EDnEnNjUFK9zvQ=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:39:97:14:7b:ce:b8:97:e8:2a:98:2a:00:69:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jul 26 07:00:24 2026 GMT
Not After : Jul 27 07:00:24 2026 GMT
Subject: CN=874e36faed1e3cd3c92d4f87f6e2ff58b8a5ed9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:0a:69:7f:c9:a9:0e:c3:40:d4:6d:82:60:
33:71:1f:64:bb:5d:20:fc:67:86:09:e6:f0:10:72:
52:fe:c4:f0:8f:a0:42:40:20:d1:e7:2f:3c:e4:09:
7f:60:fa:c4:9f:ef:0d:6e:06:03:18:91:7c:a8:db:
c7:53:1d:e9:21:c1:a0:f3:e3:04:52:3c:18:a3:99:
a5:35:26:f5:ff:61:af:bc:d6:b0:ae:03:be:ea:13:
43:60:57:02:06:c1:4f:15:53:d2:72:5b:eb:14:a1:
54:22:82:8e:15:7b:76:8d:4f:56:c5:82:22:9f:c7:
ff:3b:8d:f4:8b:82:d6:6b:01:58:75:8d:62:8c:75:
6a:b4:9e:47:cc:a9:13:85:f5:2e:28:bd:5e:c9:28:
ff:25:31:a2:d4:ed:1c:b0:7d:e4:b4:6c:54:0a:e7:
af:7b:7c:07:cd:cf:df:04:17:a7:1f:7c:e1:19:fc:
6a:b8:0e:4f:46:10:86:34:5a:8e:65:3a:0f:69:01:
07:f0:b1:bc:70:cb:14:c1:b7:10:14:19:41:b7:49:
45:e5:7c:95:7c:bd:a8:20:df:4f:37:dc:a2:66:ce:
e4:4c:c4:ed:28:7f:0c:63:73:c7:1d:7a:3d:e9:74:
14:32:57:29:8b:85:8c:af:66:47:f5:a0:a8:b0:5d:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4E:36:FA:ED:1E:3C:D3:C9:2D:4F:87:F6:E2:FF:58:B8:A5:ED:9A
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8d:91:e4:67:78:b9:c8:20:ba:25:43:85:a5:19:9e:4a:7a:
e6:12:45:f1:7f:f3:48:6b:d4:54:73:51:f3:2d:4d:75:db:1e:
7f:c1:71:e2:2e:f8:b2:e1:6c:94:9a:c1:43:32:8b:9c:25:a1:
46:54:e5:fe:db:bd:b1:da:0e:07:89:fc:71:86:0f:19:08:73:
3f:0d:39:d4:6e:51:ef:7a:fc:1e:4b:e6:3e:6f:ae:a0:77:80:
87:3b:f1:2d:c2:a2:11:79:5f:6f:d1:c1:80:94:23:b3:f5:02:
7d:46:41:50:ea:b7:be:18:7b:60:bd:9d:08:fd:46:1d:ad:27:
23:27:62:86:09:82:ab:bf:ad:06:9e:2c:64:3b:28:ac:29:fb:
dd:57:20:6a:b5:f0:ba:06:1f:3c:c9:40:94:40:11:f4:1b:12:
29:ed:ae:3f:b2:ee:50:cb:81:b0:5a:1e:c4:b7:16:21:26:fb:
ab:87:c7:83:4e:bd:01:61:7f:30:fc:52:41:e6:dd:45:16:5a:
ea:19:ef:ca:c7:a5:3f:d6:78:c3:a6:c0:ac:05:ee:07:c9:6f:
ae:70:a5:68:56:2e:13:5c:3c:03:40:ef:e5:7f:69:7b:8f:64:
88:c5:30:42:2d:76:15:a1:a6:7a:a7:09:d6:c3:18:61:4d:52:
46:5f:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:58:35 2026 by rpki-client