Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 5rl5/GEgDjgmG1Y1fK6v/JxJvpGL57cUI0GsL0oWXIU=
Subject key identifier: 91:F8:5A:C6:6E:FE:C4:AF:2E:5A:EE:6A:58:F3:29:02:FA:EE:6E:CA
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019CE22253E069900222AA15B5663D1C60C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0F7C
Signing time: Thu 12 Mar 2026 13:00:26 +0000
Manifest this update: Thu 12 Mar 2026 13:00:26 +0000
Manifest next update: Fri 13 Mar 2026 13:00:26 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: O5HQEawe94IgFz0bJHuj7L69OIgAxzxRuG3ofauRFBg=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:53:e0:69:90:02:22:aa:15:b5:66:3d:1c:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Mar 12 13:00:26 2026 GMT
Not After : Mar 13 13:00:26 2026 GMT
Subject: CN=91f85ac66efec4af2e5aee6a58f32902faee6eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:0b:51:11:1f:5b:a2:55:ae:7f:5f:44:fd:
e7:5f:a2:80:99:fc:76:9f:3d:95:64:9d:33:37:1b:
66:d3:de:4f:90:0f:bf:5f:24:37:c9:28:13:3a:73:
85:70:23:ac:f0:b1:9d:ec:04:69:1e:32:66:2c:f8:
b3:01:42:fe:90:8b:b7:c6:ba:c6:bd:b8:d6:ab:32:
41:a6:e9:81:7a:ea:08:3f:90:73:c3:08:19:48:85:
02:6d:fa:d6:d6:f1:c3:ad:2f:8d:f3:1e:8a:40:5d:
85:77:e6:fd:15:b4:ff:a5:b0:73:30:42:43:87:46:
88:d4:46:a1:95:37:3b:17:fa:df:04:b6:dc:49:00:
dc:c8:71:0f:12:2a:ef:2d:e7:41:6b:fe:55:1b:eb:
3e:23:75:89:18:50:15:5f:87:b6:a0:5c:e6:d3:da:
35:24:61:3b:0f:94:cb:46:71:e9:9b:51:91:6a:96:
ea:53:ae:09:52:57:12:7d:89:87:c3:ac:29:ac:8f:
22:68:f2:83:5c:cf:e1:c6:98:42:2f:05:18:3a:36:
f7:66:0e:01:31:a0:c2:91:5e:a9:66:60:19:61:cc:
de:e0:2f:b4:f4:a5:c4:d3:94:a4:7c:e0:3f:a1:fa:
7b:f0:74:5a:17:c2:ac:f7:4f:b1:5c:ad:ba:fb:d4:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F8:5A:C6:6E:FE:C4:AF:2E:5A:EE:6A:58:F3:29:02:FA:EE:6E:CA
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:3b:33:b8:9e:5e:52:1e:42:6d:82:89:99:f0:0b:e0:ec:
59:e5:29:10:ea:11:70:65:62:1b:cd:61:3a:49:aa:5b:4e:40:
c3:17:88:a8:8b:9f:6b:db:79:71:4c:1e:62:b4:f1:9c:48:ac:
7c:81:8f:0a:41:be:3a:21:54:7e:03:d0:6e:ad:82:85:a3:37:
f1:2b:ed:cf:ba:55:e0:b7:36:cc:7b:c5:2d:d6:2b:96:8a:b1:
26:88:a3:cb:c1:61:97:0a:2d:4f:8f:7e:9b:10:32:58:13:ee:
ac:c0:25:fb:9e:f0:02:89:fe:d5:98:bf:47:e3:35:7f:76:e7:
4f:3d:bc:7a:17:e1:03:58:51:f5:47:b3:df:b5:59:68:95:03:
b4:02:fd:66:e4:91:99:37:6c:d7:19:e1:23:8a:15:f0:18:65:
cc:e8:cf:ee:e3:a1:da:8c:bb:be:3d:c1:c8:eb:57:9c:90:6b:
0a:a9:ce:56:a2:54:c9:43:a7:d5:39:9b:a9:41:7c:d6:b4:52:
e3:4b:e0:f3:e4:4f:77:c4:60:79:f4:4d:c1:54:99:e0:b5:d5:
79:30:9d:38:41:68:9c:13:a5:7b:8d:c0:1f:dd:cf:3a:8f:63:
84:f0:2e:6e:51:32:41:c4:a0:9c:c2:0f:b4:e4:fe:71:12:89:
af:df:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:55:59 2026 by rpki-client