
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: K8geuryPJs9yuSffAgVB7TSDoocv5Qt6zGHP1xNRPXQ=
Subject key identifier: 4A:5F:9A:32:D6:46:69:03:80:49:45:47:6F:D7:3D:5A:91:CF:68:B7
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 01A13CA5D5E529041BCB45098D35A2B97FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 15A3
Signing time: Wed 14 Oct 2026 23:01:03 +0000
Manifest this update: Wed 14 Oct 2026 23:01:03 +0000
Manifest next update: Thu 15 Oct 2026 23:01:03 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: OTE9GDLD8RGzBZKYbmq7MxZVuEOOUSFXB2Yp5PCKdjg=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:d5:e5:29:04:1b:cb:45:09:8d:35:a2:b9:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Oct 14 23:01:03 2026 GMT
Not After : Oct 15 23:01:03 2026 GMT
Subject: CN=4a5f9a32d6466903804945476fd73d5a91cf68b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:b0:b8:24:62:9d:a1:fb:d5:47:9a:cd:c8:
a2:20:dd:09:41:09:7b:33:c3:77:9a:9c:d1:60:16:
96:7c:58:64:61:9d:30:80:57:f0:4b:ed:4c:64:fe:
40:dc:02:42:3b:da:29:7d:b5:a8:10:e8:a1:75:fb:
3f:78:e1:17:3b:6f:f1:cd:ea:65:39:9c:d2:4e:45:
31:53:c8:b0:d3:6f:95:10:41:5a:bf:b5:e5:d7:58:
b4:f5:f0:e1:65:cb:67:98:2a:30:ea:02:c1:65:8f:
95:52:f8:c7:95:7e:31:07:27:ea:fb:c0:84:b2:69:
2c:97:b7:c2:62:37:8e:5b:c8:79:e8:3e:f9:ca:f9:
68:ee:e2:6b:4b:56:67:5f:18:5c:be:87:1c:b2:7e:
f2:62:f2:84:bd:0d:b2:ce:f5:d8:d5:0a:bd:81:a7:
0b:03:a8:ed:13:58:02:34:d1:a3:90:3e:ee:e9:d7:
83:ed:c3:58:75:3e:25:73:80:04:59:b6:87:57:1d:
91:97:89:94:98:94:ae:e8:27:64:6d:ef:4a:ae:f8:
e5:22:4c:73:86:67:b8:fd:1b:fc:dc:01:f9:1c:5b:
fa:e6:d2:1b:f6:a6:a4:3b:56:3d:b9:4d:54:9e:84:
bf:d4:bd:ad:cd:4a:9b:67:5d:a9:ef:0f:31:73:7b:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:9A:32:D6:46:69:03:80:49:45:47:6F:D7:3D:5A:91:CF:68:B7
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:23:44:1f:35:6f:0e:aa:1a:5b:ba:d2:6e:0e:10:bf:9e:4a:
21:cb:4c:dc:00:c8:42:d5:8a:38:49:31:4e:e8:a3:ba:b8:c5:
53:d6:39:ad:84:87:d3:09:fa:4e:ac:cf:bd:77:a1:cc:64:40:
4c:42:ca:09:31:4e:ec:05:8d:c3:57:cd:2a:0f:87:b4:32:fd:
69:dc:82:be:67:88:c0:c0:0f:f7:13:8d:d3:a6:c3:b5:c2:71:
2b:a3:48:0b:77:d9:0f:b8:95:90:9a:8d:a3:12:94:3a:d7:4d:
e3:60:16:e3:76:03:de:73:0e:97:8b:f7:09:57:32:66:a0:62:
30:0d:03:bb:af:30:cf:3c:9a:a9:6c:42:d5:e9:10:33:33:b0:
5e:ac:ff:28:4c:48:36:7e:0b:7d:f9:e9:77:6f:b7:c0:4f:98:
f6:95:d1:9b:bb:a6:12:74:ed:0e:87:76:cf:19:07:64:dc:2b:
6f:f9:98:ff:6e:ad:a5:9e:7a:fe:4a:fe:4b:13:74:81:1b:50:
32:c7:e3:fb:24:a3:8d:b2:c8:b1:09:0e:2b:3d:2f:84:11:75:
29:b8:ce:74:c5:01:97:26:f0:68:67:be:e3:51:b4:83:40:1d:
52:b3:e5:b0:c0:ac:f1:f3:03:55:33:ca:bb:7a:62:6d:f0:c8:
e7:9d:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:36 2026 by rpki-client