Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: //QzQamYgDDijrLottqgxzggfqf7wtIA8syMwUN+O6w=
Subject key identifier: B3:75:A8:6C:CB:68:7B:8E:DA:9D:31:8B:A2:EC:23:AD:D0:DB:45:7E
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01A0D614AF3524292C43C89B8DF8A8DE006A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1696
Signing time: Fri 25 Sep 2026 01:01:14 +0000
Manifest this update: Fri 25 Sep 2026 01:01:14 +0000
Manifest next update: Sat 26 Sep 2026 01:01:14 +0000
Files and hashes: 1: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (hash: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: fD1I2i+tJ0+x/3mM+HVfgOUVehskapaMmRsgemLzSRw=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:af:35:24:29:2c:43:c8:9b:8d:f8:a8:de:00:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Sep 25 01:01:14 2026 GMT
Not After : Sep 26 01:01:14 2026 GMT
Subject: CN=b375a86ccb687b8eda9d318ba2ec23add0db457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:03:b2:1b:b9:40:0f:fc:cc:db:19:29:13:
33:b3:30:6d:7c:c0:28:01:e4:66:b1:16:c4:ae:4e:
b4:ac:bb:27:f3:8b:0c:10:62:9d:3d:76:7c:f9:13:
c8:de:b2:b6:e8:3f:74:58:56:33:23:2e:ad:73:eb:
35:bf:08:47:63:3b:50:cf:12:30:cb:95:ee:24:00:
19:42:a4:db:41:36:b8:32:6c:a3:78:d7:52:10:67:
dc:e8:84:24:9c:ee:13:74:1e:ab:ac:f3:55:df:14:
ad:6e:fc:68:d0:36:17:32:2e:0f:45:11:05:a3:31:
6a:08:68:74:51:9e:9e:16:ad:60:a5:81:08:da:4a:
1d:d1:89:07:c9:a1:2c:96:86:12:ba:1a:dd:8b:2f:
e4:63:2a:0d:85:f6:e7:43:f9:27:e0:69:04:54:80:
7a:8b:c9:97:0f:5c:b9:ff:c9:0f:1c:4f:92:a8:a1:
9c:41:51:1b:22:67:42:a4:0c:5b:50:96:17:23:23:
ed:aa:99:fb:d3:a8:a8:b0:6f:5a:50:d6:ce:a8:c6:
4c:1a:a5:96:f9:d8:29:9c:02:5d:93:e9:33:08:e8:
49:ed:7b:b1:90:08:21:c3:06:c8:ef:f8:b3:85:0c:
e0:35:c9:18:20:a5:0b:5b:dc:81:60:58:60:ca:e1:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:A8:6C:CB:68:7B:8E:DA:9D:31:8B:A2:EC:23:AD:D0:DB:45:7E
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:aa:a9:70:b4:de:95:6f:db:15:39:c9:4c:e3:29:9f:7b:
97:f6:48:57:48:30:cb:34:0a:4d:de:30:44:0b:85:e1:08:7d:
39:d0:2a:cf:e2:2c:fa:c8:91:49:00:ce:ce:2e:b7:44:08:b0:
0a:ec:74:7c:ca:b5:07:94:42:8b:fd:98:1a:7c:f8:5b:c5:1f:
15:68:ac:3b:dd:2b:60:cb:eb:ef:d3:f3:56:e3:54:6b:7e:1c:
a5:19:9f:d1:8f:a5:aa:54:73:63:95:48:4c:7c:16:d7:00:7a:
a4:28:d3:8b:65:8f:b8:2a:fb:99:a1:64:d5:61:47:80:4b:f3:
14:0c:b6:11:f5:f9:9f:77:32:c2:28:47:5d:4e:0a:74:c3:00:
fa:01:ea:75:a3:e0:50:62:c6:2e:53:79:63:40:95:00:65:15:
23:53:27:84:2f:1d:04:cb:de:22:53:b7:1f:53:9d:1d:cc:43:
05:9a:fc:6b:58:e0:1c:7a:cf:3b:f2:68:94:3c:51:c0:a6:74:
33:87:0d:f5:42:ee:ff:af:e5:f6:e3:bc:d9:4d:a3:cf:04:04:
6e:98:db:43:30:76:a1:d6:31:a9:fd:7b:14:fa:e1:bf:a9:89:
84:8f:a7:77:d4:0f:f6:52:93:c7:3b:19:73:97:d9:2b:1f:f3:
44:f5:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:23:50 2026 by rpki-client