Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: 926MGSNaBza6JbVV1PmuXbeXTVjtlcLH+KiNgk7Vm5A=
Subject key identifier: 98:2C:74:39:88:C8:81:92:52:00:02:36:F2:85:BD:36:42:3B:F2:7A
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019D98F463932FFC22D4520F749F049E22F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: RVI7cIenCSGN6lJBSUs/FrIXm7UYk6xMZ5Cl75cV5uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:63:93:2f:fc:22:d4:52:0f:74:9f:04:9e:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=982c743988c8819252000236f285bd36423bf27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:02:90:ea:f6:d7:29:cc:b2:1d:12:bb:87:
bd:f4:7c:de:30:bc:ba:93:1a:0e:98:a7:91:61:be:
f1:93:8e:14:78:1d:bc:c5:7a:78:4f:f8:0b:5e:87:
31:7d:d7:c8:1f:99:13:cd:ca:25:d6:e3:f6:0f:87:
f0:bb:b2:d8:69:37:6d:da:4d:40:c7:cf:b6:a4:15:
1f:df:77:f9:17:53:bc:a4:85:21:0d:a5:eb:e5:fa:
1f:89:6c:0f:48:7e:23:99:6d:0c:42:e9:55:de:1d:
35:43:06:63:56:1b:3b:07:b1:63:7b:d8:be:55:35:
7e:c3:37:2a:cc:8a:40:6d:91:f5:de:7b:d7:cc:05:
de:50:5e:0c:4c:ca:b9:9a:47:f6:22:b5:9d:a3:3a:
87:80:64:10:af:c5:ba:90:00:aa:81:0e:71:97:4b:
32:89:e7:d3:72:24:54:58:bd:8f:68:3c:f9:4c:e4:
d4:3b:30:51:b2:3f:4b:ea:42:7b:8c:16:2b:1f:18:
cd:53:6b:be:20:88:c8:ec:35:96:21:bf:60:a6:b5:
da:a4:8e:b4:9e:98:8f:ce:02:bd:76:b7:b6:95:54:
a6:a9:c1:3d:bc:db:53:d5:b8:bb:7d:9c:b7:96:1c:
05:26:ba:ac:b0:59:95:ad:bd:7f:e3:90:1a:41:f8:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:74:39:88:C8:81:92:52:00:02:36:F2:85:BD:36:42:3B:F2:7A
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:53:61:c2:2a:9f:7c:20:8b:d8:9e:34:32:c2:df:c9:4f:a8:
0e:1c:30:1b:b8:80:9f:f1:b0:63:b5:85:23:a2:dc:fe:54:5b:
26:07:5f:18:de:57:98:0f:0f:c4:75:e1:f3:ce:74:a2:0a:ac:
95:9b:68:a3:19:bd:57:d5:d5:9b:cd:68:fc:2a:45:5a:b4:a8:
e5:5e:f4:79:60:1d:7c:78:a6:c3:74:2e:3c:f6:be:8a:42:f9:
dc:bd:3f:21:58:02:bb:16:66:3e:13:eb:cc:10:e6:09:77:d3:
8c:60:35:ae:6e:36:e8:a8:37:bf:37:30:da:9f:b4:b3:4a:b3:
e0:1e:8e:6d:59:17:d8:c1:cc:4b:96:ad:ea:b7:a9:bf:ac:b0:
cf:df:bb:0f:d6:7a:ae:9e:33:7a:c8:49:43:c1:9a:d5:57:95:
3f:06:e3:3d:47:2a:4d:c0:9f:04:42:17:3d:56:d7:6f:74:18:
65:2a:d5:36:6a:f3:1f:bd:7a:b8:96:68:19:df:f1:c5:db:12:
80:c2:ee:ef:cc:14:3c:bb:24:0a:ca:40:4d:50:a5:c1:32:fe:
05:2d:bb:4f:32:f6:d6:f3:d9:81:8e:7c:22:a7:91:84:d8:93:
05:23:5a:56:ec:6b:11:f0:14:ec:4c:58:61:d0:9b:66:a4:a9:
a7:90:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:30 2026 by rpki-client