Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: VynNJhlX9iqqx10lMG6sxEG807Rt1eXyuWaWpzDfag4=
Subject key identifier: 45:96:A4:DB:D3:7A:1F:D3:AA:CF:60:65:6C:ED:96:78:E3:D0:60:D3
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019E30728CE357643BE103BB3C1F21E2B3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 140F
Signing time: Sat 16 May 2026 11:01:13 +0000
Manifest this update: Sat 16 May 2026 11:01:13 +0000
Manifest next update: Sun 17 May 2026 11:01:13 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: 27Z6JhQk6JPo5hCAVMMK6rsDcQ93PJfiFSZ/NI6KYo0=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:8c:e3:57:64:3b:e1:03:bb:3c:1f:21:e2:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: May 16 11:01:13 2026 GMT
Not After : May 17 11:01:13 2026 GMT
Subject: CN=4596a4dbd37a1fd3aacf60656ced9678e3d060d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:76:cb:cb:22:3b:19:31:d7:de:db:1e:3e:
25:0e:3c:09:fb:ae:5b:a1:42:2d:1c:2a:63:59:65:
3b:61:69:de:9c:06:be:dd:5a:9f:ac:89:67:2c:63:
eb:1b:5c:09:c7:38:66:33:b6:2b:3e:9e:7e:d2:b4:
6f:d9:5b:10:12:37:09:2c:23:ef:29:5f:54:ce:ce:
3e:b7:e4:d1:07:dc:aa:10:9b:a4:33:b9:4e:d0:25:
8a:f9:18:68:13:d0:54:95:60:13:f2:ab:da:0f:15:
b3:31:9f:2d:9d:8b:3e:3e:4e:2e:54:25:4f:cd:13:
df:6b:19:6f:b3:d1:6c:09:01:5d:63:3f:3a:d4:47:
61:5e:fe:90:ca:81:d8:97:e9:a6:ad:84:44:7c:ba:
ac:34:8c:92:da:ea:3f:6d:0d:95:e4:98:4e:39:24:
94:3b:ce:17:63:e7:fc:0a:02:9e:5c:61:50:2a:9a:
34:d8:bb:d7:41:9b:f2:3e:29:5f:4d:53:e8:33:f0:
49:a8:79:48:86:b0:d6:49:6b:a0:ed:47:ef:ea:39:
cf:2c:d0:96:aa:14:53:2a:d4:af:ad:92:e0:53:94:
4c:54:cb:bd:e2:27:20:33:53:11:52:d0:7f:83:7d:
0e:9c:c9:18:16:6c:a8:0b:48:6e:04:0d:a2:9f:19:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:A4:DB:D3:7A:1F:D3:AA:CF:60:65:6C:ED:96:78:E3:D0:60:D3
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:2e:49:2b:f4:a4:91:82:f6:9d:54:ab:d7:0b:64:ba:c6:
76:db:33:1c:c5:19:27:14:97:c1:9e:52:6d:cb:a4:ee:c1:b5:
80:ec:2d:53:6d:f1:88:27:b2:34:fc:77:8b:29:66:8b:f1:f6:
fb:d8:00:76:07:36:39:f8:bf:0f:8b:6c:f8:6b:f0:7f:c3:a5:
c7:e3:99:e4:67:05:26:eb:21:01:fa:ee:2d:db:85:b5:7a:b4:
7f:f5:4b:78:b4:58:b5:2b:d9:18:9a:36:8a:ab:20:d8:89:19:
6c:4d:be:10:10:b4:0a:29:83:25:cb:2f:19:0c:1e:71:a5:42:
83:f6:d3:93:be:e3:d8:95:c6:0b:07:62:28:49:26:89:36:bf:
f0:39:7d:f0:95:16:77:b4:22:0c:16:25:2c:6e:86:34:23:f9:
74:92:2d:d1:62:61:90:89:e9:01:e9:b8:65:07:fd:13:5c:2b:
12:c3:f8:9a:dd:c9:a4:29:55:9d:ab:02:0e:0a:3d:8c:ba:78:
59:1f:27:15:be:2d:eb:d0:34:c3:42:6d:74:de:27:f8:0c:af:
70:80:f0:b7:49:70:be:7d:7f:bb:cc:e4:57:49:8f:91:27:cf:
d7:27:6a:fa:03:ac:52:8a:7f:b0:09:c2:55:53:3f:ec:4b:7b:
36:35:1f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcozjV2Q74QO7PB8h4rOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw
MDkxN2IwHhcNMjYwNTE2MTEwMTEzWhcNMjYwNTE3MTEwMTEzWjAzMTEwLwYDVQQD
Eyg0NTk2YTRkYmQzN2ExZmQzYWFjZjYwNjU2Y2VkOTY3OGUzZDA2MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbF2y8siOxkx197bHj4lDjwJ+65b
oUItHCpjWWU7YWnenAa+3VqfrIlnLGPrG1wJxzhmM7YrPp5+0rRv2VsQEjcJLCPv
KV9Uzs4+t+TRB9yqEJukM7lO0CWK+RhoE9BUlWAT8qvaDxWzMZ8tnYs+Pk4uVCVP
zRPfaxlvs9FsCQFdYz861EdhXv6QyoHYl+mmrYREfLqsNIyS2uo/bQ2V5JhOOSSU
O84XY+f8CgKeXGFQKpo02LvXQZvyPilfTVPoM/BJqHlIhrDWSWug7Ufv6jnPLNCW
qhRTKtSvrZLgU5RMVMu94icgM1MRUtB/g30OnMkYFmyoC0huBA2inxkywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWWpNvTeh/Tqs9gZWztlnjj0GDTMB8GA1UdIwQY
MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt
ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk
LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8IuSSv0
pJGC9p1Uq9cLZLrGdtszHMUZJxSXwZ5Sbcuk7sG1gOwtU23xiCeyNPx3iylmi/H2
+9gAdgc2Ofi/D4ts+Gvwf8Olx+OZ5GcFJushAfruLduFtXq0f/VLeLRYtSvZGJo2
iqsg2IkZbE2+EBC0CimDJcsvGQwecaVCg/bTk77j2JXGCwdiKEkmiTa/8Dl98JUW
d7QiDBYlLG6GNCP5dJIt0WJhkInpAem4ZQf9E1wrEsP4mt3JpClVnasCDgo9jLp4
WR8nFb4t69A0w0JtdN4n+AyvcIDwt0lwvn1/u8zkV0mPkSfP1ydq+gOsUop/sAnC
VVM/7Et7NjUf4w==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:51 2026 by rpki-client