Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: Xw6SJY+8PfpSV61vDX5mZkVJlWE8ygENm/SH/zuDu2k=
Subject key identifier: C9:1A:0A:11:9A:BB:2B:01:89:C2:D9:C5:CD:E4:53:AD:59:CD:B6:92
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019D3752853A5F36840D78E337409351600B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 138E
Signing time: Sun 29 Mar 2026 02:00:48 +0000
Manifest this update: Sun 29 Mar 2026 02:00:48 +0000
Manifest next update: Mon 30 Mar 2026 02:00:48 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: ZCLlNnyw8mCOI7ZaLIFJIUmBLsB1KH1b+rzFmjilnZU=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:85:3a:5f:36:84:0d:78:e3:37:40:93:51:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Mar 29 02:00:48 2026 GMT
Not After : Mar 30 02:00:48 2026 GMT
Subject: CN=c91a0a119abb2b0189c2d9c5cde453ad59cdb692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:30:c8:57:3c:1a:f8:ab:ea:b9:90:26:3e:
ad:08:d2:80:ca:48:96:fa:97:cc:a7:be:68:5b:c2:
35:83:79:ea:bf:50:56:b5:25:c3:54:1c:2c:de:5f:
11:e6:47:13:bc:0d:61:0e:c2:c3:76:da:a8:56:02:
20:b9:a0:7f:b1:4d:6c:43:ee:6d:cf:3a:ab:67:d4:
69:3e:3b:26:e3:7f:56:46:c7:8b:26:c7:f4:01:3e:
12:06:f7:c4:85:cb:2a:8b:ff:20:41:7d:37:9c:e8:
c7:06:dd:5f:df:f6:bb:c0:49:ad:20:04:4a:59:1d:
73:ce:d5:b6:ea:dc:77:64:4c:6f:27:47:ce:3a:44:
b3:fd:7d:05:f5:84:e4:e5:4c:39:0d:cd:3d:02:37:
56:6f:a6:f5:a8:e1:1a:a2:4d:60:a4:9c:51:c6:f1:
7f:fb:07:d0:a6:de:8d:e1:2c:2d:1a:56:01:bc:0a:
f6:aa:f7:85:54:bc:69:db:ec:0d:a7:78:5f:19:5d:
81:e9:0c:05:24:4e:99:85:6c:23:62:4c:02:59:36:
b8:0d:45:75:54:a0:a4:0a:44:85:0c:aa:9c:72:d0:
4a:6f:4f:8d:36:14:1c:26:ad:34:d3:80:96:bd:4e:
b2:28:1e:60:2b:fa:91:aa:35:e6:77:87:b6:6f:d8:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:0A:11:9A:BB:2B:01:89:C2:D9:C5:CD:E4:53:AD:59:CD:B6:92
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8a:2d:b1:d7:81:89:7d:d6:22:e4:c2:bd:2b:20:61:67:63:
4d:8a:9a:87:c8:db:32:23:41:c9:54:12:70:9f:e3:89:1f:53:
b6:65:56:c8:83:ba:9e:2a:ab:a1:33:6b:f1:84:21:1a:0c:98:
0a:bc:8b:b6:75:49:4e:09:f4:df:bd:14:17:95:85:75:ec:86:
e0:a5:4c:09:bb:e4:01:48:70:99:b6:02:18:ff:eb:bf:46:11:
8e:b8:9f:31:d5:1d:d6:cc:04:92:3c:66:3d:81:23:fd:74:28:
e6:6d:5c:e1:58:b8:b4:ef:59:0e:c9:dc:9c:82:93:06:35:9a:
3c:56:65:07:c6:72:43:f8:c2:b3:c4:ce:98:54:80:e5:4b:e6:
e7:cd:0c:33:95:2f:4e:26:74:62:6b:f9:ad:4a:05:80:78:70:
ab:52:25:be:f1:9b:9d:15:06:aa:3c:62:6b:c0:9c:0c:c6:2e:
fa:c8:6d:e7:fe:fd:62:b4:6e:14:48:61:50:23:54:30:70:58:
c2:38:db:19:66:39:77:71:06:3b:64:da:29:26:12:6e:99:83:
b4:59:8d:f0:13:85:03:57:8e:77:ac:be:f7:bf:bc:c7:95:ec:
be:44:cb:0f:ad:6d:a9:d4:05:13:a4:62:40:29:e9:cc:87:6f:
73:eb:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:44 2026 by rpki-client