Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: V/8p85FAbkQmzZH8Bz9gT68//mY6sqqyJzuVX4mB6f0=
Subject key identifier: B9:24:84:4F:6F:30:04:3B:BB:FC:8E:72:A4:ED:A0:21:74:14:BF:61
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019CAB6B43E5B8BDBAAB7DBA2651CB3C7BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 0542
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: cK1xJcBo+24d+npELvskbyCFazN1LnVUQSoiMTe22e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:43:e5:b8:bd:ba:ab:7d:ba:26:51:cb:3c:7b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=b924844f6f30043bbbfc8e72a4eda0217414bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4d:e3:9b:98:f2:c4:92:18:5c:27:e8:a8:8a:
0b:b5:7b:a0:d4:83:48:62:ed:b6:a2:30:5e:d7:b0:
ff:17:9c:0c:5e:ce:46:f8:14:eb:35:12:1a:58:e0:
c3:c2:7a:13:bb:c4:79:39:10:5b:de:ad:d0:ce:39:
f9:bd:a1:8d:00:6c:a1:9c:6e:44:03:03:55:da:65:
c2:9d:33:43:c0:0b:5b:25:27:5e:c1:e9:1a:3c:37:
be:66:3b:ed:5b:23:97:23:65:38:c8:df:86:49:bc:
f6:a9:45:99:93:44:c3:f9:90:08:6b:b4:f2:54:09:
70:a4:ec:24:9a:fc:3c:f4:42:29:c7:dd:e6:a8:46:
ff:bc:54:34:61:3d:c7:19:63:9f:48:e3:c2:23:aa:
7b:aa:9a:7f:bc:fe:76:07:ff:72:9b:bf:a7:df:54:
e3:69:83:1d:1d:f4:a9:32:d5:b7:c7:cb:ba:ff:27:
58:82:48:86:26:28:7a:34:5b:b7:12:f2:07:99:2f:
1a:3f:8d:6d:33:8b:0f:1e:5c:29:f2:47:f8:2e:62:
9c:91:37:d6:ba:91:22:b8:8e:4e:8c:c1:43:a9:48:
34:98:cc:76:3a:30:ed:c9:cb:78:b5:b3:a4:d3:a1:
c3:90:17:ab:c4:19:ba:35:1c:e3:5b:95:62:06:66:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:84:4F:6F:30:04:3B:BB:FC:8E:72:A4:ED:A0:21:74:14:BF:61
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ac:24:f0:3a:93:7f:c7:9f:76:14:96:26:05:f9:14:a8:3d:
11:6e:74:ac:fb:39:e9:a2:a5:73:9d:a4:3a:45:89:26:9e:ac:
00:ba:f8:34:cc:b1:48:03:63:42:ce:a3:29:fc:94:8f:9b:ce:
02:44:dc:41:ec:32:3f:64:13:b8:29:b7:2e:43:1f:1f:3b:84:
c7:0f:dd:aa:bd:bf:ff:d8:ae:2a:be:c5:94:c3:8d:50:36:73:
27:c3:76:e4:04:20:46:38:61:47:41:a0:c3:98:b1:56:0f:d9:
fb:a2:e1:12:8b:f7:9a:8a:fa:1f:81:77:6b:37:75:59:d8:19:
57:5a:77:d3:5f:8a:0f:98:83:11:d5:89:06:1b:20:64:f3:c8:
8c:c7:1d:e2:c7:d3:57:11:55:42:c7:0b:07:61:de:6a:b9:f4:
00:e6:b3:80:28:f8:dc:c1:09:94:99:41:81:8a:ee:70:97:7d:
05:88:41:ba:1e:58:8b:33:7c:c8:48:f7:31:11:39:67:1c:01:
eb:07:c8:59:36:31:55:6a:00:c9:ed:62:6e:aa:10:0b:f2:52:
f8:b2:78:2e:a1:e6:3a:76:a3:15:ba:d5:4d:29:3e:e7:47:a3:
f4:23:83:33:f0:cc:44:f4:cf:09:cc:00:52:5f:86:00:e6:30:
8d:4f:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:57 2026 by rpki-client