Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: ozhEgXpD0nZfugHK0DqeoepgDWn3h9a26TeToA57vGU=
Subject key identifier: DB:11:BB:A0:4B:05:A2:E6:62:46:1D:AA:79:2F:4A:03:CF:F9:37:36
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 01A1AC3A96BB1D040429421D0DA457A88B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 16ED
Signing time: Thu 05 Nov 2026 15:01:23 +0000
Manifest this update: Thu 05 Nov 2026 15:01:23 +0000
Manifest next update: Fri 06 Nov 2026 15:01:23 +0000
Files and hashes: 1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: EeRvX+CoSK3/IX5F6jHAL4ubMf4wX/Mjj4v9mYwyUpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:3a:96:bb:1d:04:04:29:42:1d:0d:a4:57:a8:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Nov 5 15:01:23 2026 GMT
Not After : Nov 6 15:01:23 2026 GMT
Subject: CN=db11bba04b05a2e662461daa792f4a03cff93736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:0c:18:32:70:80:91:1c:a5:f4:4b:f1:df:
d9:3f:33:27:cd:be:81:08:03:ae:a3:25:5b:8e:55:
63:11:27:e7:c4:a2:83:85:0a:d0:f6:21:1f:69:a8:
85:96:dd:08:10:63:0c:3e:4e:01:f1:18:5f:6c:e1:
a9:8a:2f:e0:34:a8:66:5a:d9:ff:81:59:8d:c2:1e:
94:86:a3:c5:44:eb:f6:1f:9b:bf:41:d0:a3:ad:49:
47:33:f2:4b:77:66:a6:17:01:b8:fc:a1:80:c6:ae:
3c:39:d2:00:68:7d:29:20:ac:15:c4:a9:e6:f4:5c:
ff:88:c7:9c:1d:cb:b4:e5:29:dd:c5:d5:c6:91:5e:
06:54:2a:dd:99:b0:d9:12:69:36:88:15:56:55:f8:
58:2f:be:76:52:3c:93:76:ee:90:e7:d1:4a:dc:c6:
d7:44:35:bc:1a:da:95:da:fa:30:8c:c4:25:6c:e7:
6b:d2:c1:85:a4:d5:14:3b:a3:36:0c:ca:8e:5b:5a:
1c:85:a7:df:13:f5:ba:ac:59:44:51:08:f6:0f:f6:
89:9f:f9:fa:9d:c0:84:2c:0d:82:9b:7f:ea:f0:3a:
a7:8c:d7:a0:a8:a1:20:2c:d7:bf:64:97:cd:b3:75:
c5:86:13:cd:0a:f9:78:92:c6:f5:9d:0d:23:8c:93:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:BB:A0:4B:05:A2:E6:62:46:1D:AA:79:2F:4A:03:CF:F9:37:36
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fc:7f:64:16:c7:ef:0a:5b:86:10:9c:3f:05:be:a6:96:79:
77:08:af:52:ac:47:23:3a:45:43:75:0d:2d:20:32:2b:92:80:
4d:95:fc:62:99:9f:e1:59:c5:4f:26:6c:a7:08:33:7b:7f:72:
06:d9:8b:52:a7:10:d9:47:8a:e4:02:57:44:20:ca:15:cf:05:
38:71:16:ed:92:8f:67:95:c6:cf:0a:c8:a4:57:31:ec:e8:e9:
89:fa:b3:39:47:d7:a0:d9:fd:21:09:b4:e3:47:60:2d:ec:1c:
6b:c7:ee:8d:6f:e2:db:e5:73:b8:9c:0c:76:89:d5:59:a7:a5:
3c:e4:3a:73:3f:02:61:e0:48:8e:84:9f:86:03:12:13:ac:a7:
5f:49:9e:da:9b:db:a5:8e:fc:10:d8:b1:45:e0:bf:01:ac:94:
e4:62:f3:9c:59:89:58:66:83:82:65:0f:8c:b9:ec:ec:44:63:
80:7c:18:6e:f6:24:6d:f7:5b:54:f9:19:df:c9:28:a9:07:4a:
44:a1:b2:a8:93:f6:fc:e9:c9:69:d4:3b:6b:13:2b:de:2c:d6:
a7:3b:c2:96:72:ac:92:e2:1e:40:36:bc:81:ad:f3:c0:70:b0:
7e:e2:6f:42:62:1b:05:8f:d6:5b:30:84:48:9c:27:05:0c:10:
ff:83:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:54:23 2026 by rpki-client