Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: A6H3SCLnvKgyPsp39APt8aVESfNB+eTVhUER40DWBj4=
Subject key identifier: 6F:D7:F7:C2:23:73:62:7F:B3:B1:2E:1F:F9:16:23:D4:F3:D1:8E:4C
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 019CAC7E25A51F5FD3C9598C799480B78C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: QVgqL4Q8K0axE7a2icczvwJzSLn8UmKo5OQLCc9wMTU=)
2: KTLrylbaPZVc2tcqKn9wzCh_kXU.roa (hash: fYS788ZlufFWPud3/HvTQbZGHC7LPz9v9l4mgngmvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:25:a5:1f:5f:d3:c9:59:8c:79:94:80:b7:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=6fd7f7c22373627fb3b12e1ff91623d4f3d18e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:fb:70:61:ac:04:05:f5:0d:0f:ae:57:51:
fb:09:96:e6:90:9b:c1:dd:d7:93:96:e9:ae:79:91:
2a:be:35:7f:da:c6:80:b6:7c:b3:71:c0:89:ca:d1:
35:ef:2a:1a:47:a3:24:8d:e7:82:89:e6:ce:3b:45:
71:1f:c0:7f:46:ab:0f:91:ed:fc:e6:22:8b:d7:b1:
09:77:54:93:39:2c:d9:12:ce:35:18:51:d8:e1:84:
59:ba:e2:98:5f:da:d2:2a:73:14:0b:3e:8a:20:98:
e0:af:30:a1:7c:d6:b9:e1:79:f9:7f:83:72:4c:04:
ad:e7:ca:bd:15:d5:7f:7c:36:1a:c6:54:33:9e:a8:
ed:40:87:e4:e1:11:ce:16:bb:8d:a7:a7:77:28:b6:
ec:72:2a:f6:14:e0:05:03:1d:74:6e:06:81:0b:a7:
7d:5b:9d:2d:ed:a2:97:96:4d:7b:66:d1:1e:12:8a:
14:7e:d1:fa:13:0c:a5:df:07:b5:36:5a:a5:b3:64:
03:8b:80:5a:7d:b6:3d:8d:b0:03:16:5a:12:9d:43:
34:1d:df:5f:4e:27:34:68:32:c1:52:4f:df:6e:79:
55:7b:35:5e:af:36:2f:99:85:21:18:61:33:64:c9:
b1:b7:08:49:48:d0:26:25:48:2d:cb:d0:5b:48:e6:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:F7:C2:23:73:62:7F:B3:B1:2E:1F:F9:16:23:D4:F3:D1:8E:4C
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:16:80:70:ac:10:64:b1:f4:84:aa:e0:bb:fb:5a:14:1b:
6e:08:a6:ef:4d:56:d8:7b:37:65:8b:6e:4c:e8:34:81:c9:80:
7d:c0:f1:49:e8:0a:85:f1:86:2b:5d:78:5d:1d:ea:50:d1:77:
f3:da:3b:a6:1b:24:d6:88:3f:c2:77:87:5b:06:b5:95:19:34:
18:4d:51:e7:a3:57:e3:37:13:d0:f8:a9:d0:02:c6:6b:7d:df:
e3:4c:c3:41:31:58:f5:bf:a3:4a:c5:28:5a:f5:73:2f:60:19:
7d:d9:25:26:5c:3a:8d:c6:c3:f3:22:86:63:c6:55:c8:c0:23:
5e:d0:3f:b8:5e:d4:0d:ec:2f:d8:c1:d0:66:1e:a2:53:e3:98:
70:53:12:26:24:51:d3:3a:0f:1e:a7:c8:3a:37:89:23:6f:73:
2b:34:22:f9:aa:02:46:d3:19:96:24:79:2b:45:e3:a6:55:ca:
4f:5e:db:4f:e5:54:94:4a:51:ac:a5:c7:37:d1:02:6e:bf:57:
1f:d0:91:ac:8a:c1:6c:90:b3:09:89:19:49:b1:9a:9a:2a:4a:
e2:9f:3e:90:93:88:94:3a:b4:5d:5d:b7:17:5f:ab:22:20:76:
b7:59:06:d9:0b:38:71:90:69:f5:3f:ad:56:01:4e:a7:23:3f:
2b:d4:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:29 2026 by rpki-client