Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: z9HAMv5Tn7ENyef91qW91+HXt+CsxHA0DRaYGK9c3iE=
Subject key identifier: 1E:B6:84:FD:0A:1C:8E:BB:D1:BC:39:7F:C7:8A:70:59:41:79:FC:B6
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019D9AE35B8196019251BF1599699947AF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 05BE
Signing time: Fri 17 Apr 2026 10:01:24 +0000
Manifest this update: Fri 17 Apr 2026 10:01:24 +0000
Manifest next update: Sat 18 Apr 2026 10:01:24 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: hLvIaFF+tvERcS8tDmZbi/WFWTM0JXMt9HUtQThi9OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5b:81:96:01:92:51:bf:15:99:69:99:47:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Apr 17 10:01:24 2026 GMT
Not After : Apr 18 10:01:24 2026 GMT
Subject: CN=1eb684fd0a1c8ebbd1bc397fc78a70594179fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:96:9b:32:20:cc:ec:41:1f:f2:3e:ff:37:
09:14:4f:49:2e:6a:dd:03:fb:21:55:86:21:0c:9e:
03:8c:68:17:15:a9:c0:40:79:7a:27:c6:72:c2:2a:
9f:c6:ad:3b:f8:6d:fa:9a:13:b3:f2:e8:57:4d:11:
ea:cd:07:8e:bb:a1:f0:6a:39:9c:ed:4a:9c:2b:b1:
06:f6:90:77:a0:fa:54:8f:30:94:dd:2d:ae:53:8e:
bb:a5:f8:9a:1f:de:2f:73:bf:a9:43:ea:6b:e9:09:
dd:ee:6c:b8:51:d3:bb:28:85:ec:31:b1:4b:ab:be:
07:8c:47:b1:82:dc:4d:56:b1:a7:91:59:7c:26:6d:
0a:c8:94:9b:e4:49:81:0a:01:62:88:a0:f0:1f:27:
f3:0e:d7:df:1e:58:e9:e6:2e:29:e6:63:e2:82:2a:
97:8a:7c:29:a2:fa:09:3f:60:3a:12:90:78:00:91:
18:a7:e6:5e:ad:6b:77:d1:2a:f0:b7:2f:a7:5e:31:
0c:b4:8c:fa:1e:b1:24:68:d1:e9:b2:77:6e:0d:1a:
02:52:b7:7a:37:8b:81:37:82:54:75:f5:4d:c4:2e:
fa:2b:b4:a9:41:9f:6a:f1:36:37:7a:3b:ce:b1:be:
f7:ef:23:5d:13:c3:30:c3:ee:ac:89:6c:1e:4b:6b:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:84:FD:0A:1C:8E:BB:D1:BC:39:7F:C7:8A:70:59:41:79:FC:B6
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:51:04:07:e6:9a:2c:45:ba:7b:77:63:19:37:a8:38:55:
01:62:38:2e:0c:23:48:a4:01:c3:03:02:38:ee:c5:00:76:21:
b2:fe:82:70:e8:9d:58:e6:ff:45:cd:5a:d3:ad:54:d1:0c:3c:
ea:d7:f4:fd:1d:fe:ce:d4:a3:d6:e1:b3:1f:ab:5d:50:b5:48:
1f:00:a8:31:25:82:52:e0:ff:62:4f:dc:14:2b:8c:4f:78:35:
a9:0f:54:0a:c0:ff:cf:74:21:1b:5e:4b:aa:72:c9:c5:61:6e:
63:6a:0a:28:81:65:e6:47:ca:be:fe:57:f3:72:73:63:93:61:
d5:62:25:66:76:f5:aa:b7:d6:89:13:01:37:60:03:d8:c7:ea:
a9:17:9d:3c:be:9d:bb:9e:a2:c0:89:bb:34:2e:92:a9:71:d2:
94:5a:c0:9b:cd:47:d7:a5:00:83:89:c7:57:13:51:5e:6f:94:
57:5b:83:c2:cd:db:c7:f1:b7:a2:94:a8:44:e4:0e:e1:9c:96:
64:76:24:f4:ab:8a:8e:9e:aa:12:5e:89:82:db:27:ff:eb:c2:
3c:3f:a9:76:8c:fd:41:80:74:20:30:af:cd:1c:05:c3:58:d3:
be:8e:9f:89:c0:c6:84:d9:ab:67:ea:ef:6d:03:08:4c:fe:c9:
6d:d8:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:33 2026 by rpki-client