Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: RHSrDC4pWOzZEM0vPfxwdWRDNQLToWVKqQmuCU+Pfvs=
Subject key identifier: 44:30:BF:15:6F:ED:F5:E3:D7:04:33:9A:83:02:B1:38:CE:6B:3C:FB
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 01A001DCEB5C4B038E7F9D96F2FB1313AC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 1500
Signing time: Fri 14 Aug 2026 20:00:50 +0000
Manifest this update: Fri 14 Aug 2026 20:00:50 +0000
Manifest next update: Sat 15 Aug 2026 20:00:50 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: tYbYwZSD4Rh1nZbaievSllVO/NBuHpNh9zHw9rvY8DA=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:eb:5c:4b:03:8e:7f:9d:96:f2:fb:13:13:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Aug 14 20:00:50 2026 GMT
Not After : Aug 15 20:00:50 2026 GMT
Subject: CN=4430bf156fedf5e3d704339a8302b138ce6b3cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:59:1f:5c:31:5f:7b:26:26:92:39:5a:2e:
c0:93:4b:2a:7f:6a:87:2f:da:cb:98:cf:01:db:e6:
21:4e:f2:d3:78:23:6a:93:9e:3f:f2:ea:79:4a:4d:
04:f5:f1:a5:0d:fc:65:0a:65:8f:f4:22:7d:61:c7:
82:54:05:fc:58:7e:d3:5f:37:94:36:dc:34:76:1c:
cc:71:83:49:58:54:1f:be:0f:be:9b:11:7f:ec:59:
71:d3:2b:93:ae:b6:89:8f:c8:d1:5c:88:98:9b:0d:
71:d6:81:9c:67:8a:d3:fb:9e:af:33:29:77:1c:83:
d3:58:7b:ec:87:d1:48:c9:51:54:db:fd:b9:92:76:
b3:5b:c7:74:2f:e0:32:d4:0f:22:da:8c:4c:3a:f3:
1e:5f:21:7c:bb:f8:fd:5a:41:0f:43:24:e6:40:c3:
b7:16:d3:13:8c:8a:e0:68:ea:f1:05:91:db:95:38:
92:4f:49:9e:4d:17:00:25:91:7a:1d:2f:ee:bf:d5:
81:ae:45:ea:a3:98:56:e0:d3:c7:bb:48:5d:62:0b:
c4:f7:8d:43:88:a2:a1:05:84:c4:bb:83:1b:31:a4:
bf:e0:e8:4d:3e:44:bb:fc:70:69:0e:96:c0:f0:b1:
9d:99:32:46:35:4c:cc:c5:0d:8e:7d:71:8d:5d:a7:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:BF:15:6F:ED:F5:E3:D7:04:33:9A:83:02:B1:38:CE:6B:3C:FB
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ba:7a:83:85:60:be:41:58:a6:25:1c:b7:9e:13:f3:65:3d:
5c:b9:88:a6:68:b0:6d:49:87:02:53:4d:33:26:93:e7:e1:91:
66:5f:c3:c3:29:4e:2c:cd:ea:df:57:18:f2:2a:8f:d0:ae:4f:
07:4e:c0:15:33:a0:83:28:77:43:51:df:f0:8e:4d:95:75:92:
f1:47:39:f8:13:10:37:2c:9d:3c:39:9b:2a:16:a9:09:99:95:
31:b5:72:a1:3c:30:73:8c:ff:c2:b2:31:52:80:f9:89:6a:25:
e6:4e:07:d7:91:02:53:7e:10:67:e6:26:0c:fc:58:93:9d:49:
94:e9:fc:43:85:a8:6c:2b:1c:18:29:56:4a:18:62:d8:d1:ef:
0f:6b:ae:0a:71:f9:2c:8e:cc:ae:19:1f:71:4f:db:57:e4:8f:
87:2c:da:97:5a:69:ed:dc:5c:28:5a:f1:17:c1:4c:cc:07:cd:
f7:bd:c2:e2:1e:07:e6:1d:31:0b:0f:18:72:cc:e2:34:e0:4b:
29:81:ea:15:2c:53:9f:ef:1d:c3:40:a0:b2:b4:6e:01:e8:35:
fd:32:79:78:e2:20:5e:34:c5:8c:9e:dd:41:18:77:70:bf:6e:
17:d4:6e:9d:c9:a6:fa:80:51:b9:72:5f:89:0a:b8:6d:f8:18:
29:39:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:06:48 2026 by rpki-client