Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: X8OUwkbG6l3eSE1VX0zc+7llM2rauspp6UyIujoR6aA=
Subject key identifier: 22:7F:39:CB:56:4F:AB:50:08:49:21:5C:5B:F8:B6:DA:73:53:A1:6F
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 019D9A0721131A9396B8343ECEA05E1123D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:51 +0000
Manifest this update: Fri 17 Apr 2026 06:00:51 +0000
Manifest next update: Sat 18 Apr 2026 06:00:51 +0000
Files and hashes: 1: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: NEYATBsMH9xIA6y24iBmM5PpcoMFC+YIb2GkFemdaXY=)
2: KTLrylbaPZVc2tcqKn9wzCh_kXU.roa (hash: fYS788ZlufFWPud3/HvTQbZGHC7LPz9v9l4mgngmvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:21:13:1a:93:96:b8:34:3e:ce:a0:5e:11:23:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Apr 17 06:00:51 2026 GMT
Not After : Apr 18 06:00:51 2026 GMT
Subject: CN=227f39cb564fab500849215c5bf8b6da7353a16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:fe:6e:2e:71:38:9d:b7:da:19:c5:0a:21:
0e:2b:a6:27:bb:de:3e:fa:83:cf:02:7e:02:4c:cb:
3f:f4:ce:5d:e2:5f:2d:be:90:e2:fa:cf:2a:2a:a7:
ec:f6:41:ce:d9:5f:62:1f:06:57:f1:48:a0:fe:da:
3c:e1:85:c7:43:43:00:72:3f:46:bf:db:84:7f:d8:
39:c7:5e:7c:a5:ff:d7:97:e8:ff:97:94:b9:a0:a3:
27:ba:0f:da:2a:89:57:a9:48:96:d0:64:b7:f0:39:
db:0d:bc:d7:94:73:aa:6a:d9:e6:f2:aa:eb:0e:bf:
38:e8:33:8d:4c:1d:64:a6:2c:fc:b0:8f:1f:9f:f9:
e2:02:2c:f1:8e:c7:ed:aa:fe:34:71:17:90:54:c4:
ee:78:2d:bb:13:6b:bf:41:d7:5a:89:d6:73:4c:5a:
ee:96:dd:64:35:73:34:45:81:45:48:e7:89:f4:3b:
99:ee:8d:60:cc:e3:d9:c8:af:ca:47:62:2f:8e:9b:
47:a0:19:b2:4a:eb:49:06:8b:ad:50:50:fa:bf:1a:
21:88:47:c3:63:43:11:13:81:ce:42:50:f9:c9:60:
00:6c:bd:a2:63:de:d7:d1:b4:79:a2:c6:e4:80:3a:
ce:69:04:a3:44:ea:4f:1c:e6:53:ac:b2:e4:33:be:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:39:CB:56:4F:AB:50:08:49:21:5C:5B:F8:B6:DA:73:53:A1:6F
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:ad:b7:f3:6d:9c:1b:06:0e:a0:e0:33:77:e3:e0:e7:46:
2a:76:4e:c5:e8:10:95:bc:f6:a2:c1:11:38:76:98:87:68:1a:
1a:57:01:0d:ae:77:94:ba:02:09:9f:17:cf:be:84:fc:a8:4a:
f2:64:7c:61:b5:34:94:38:1a:6a:96:79:9e:fe:43:37:c6:61:
70:81:4d:5b:6d:48:04:81:3f:ca:38:87:8a:a9:29:aa:04:ca:
28:2b:d0:c2:18:72:39:7c:64:61:ae:9d:07:22:c3:d4:ab:e3:
f7:f2:73:57:12:44:7c:48:0c:98:4b:e9:8f:f4:38:69:34:82:
80:79:62:f6:7c:18:75:ef:58:16:72:58:8f:fe:84:08:f6:54:
fd:63:78:3a:90:10:f8:43:08:f1:83:1a:99:66:a6:5c:e5:25:
c5:ee:83:1d:94:91:c1:6a:41:50:bd:cf:b9:63:2d:5b:83:0a:
b2:f9:23:e8:bd:e3:2a:2f:30:6a:0e:30:7e:ea:b8:ce:c9:65:
d7:b6:61:72:4b:58:40:75:65:f4:47:8c:e6:18:59:f3:be:47:
77:0a:0b:32:00:f4:f0:fd:4e:15:42:90:93:2d:3a:55:ff:90:
87:1e:91:b1:bf:94:7e:1b:c9:c3:03:f6:f6:dd:4e:71:f2:af:
68:d5:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:35 2026 by rpki-client