Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: Dce0156FL2ZAYj81I7CncmKp1nPl7T7cwlkcd1sVvmg=
Subject key identifier: 11:B3:B2:07:53:9C:A7:38:57:66:11:72:7F:88:B4:6C:07:A4:1D:4A
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019D9B8750B4EC84FF30F17D4F93D3039B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 14E9
Signing time: Fri 17 Apr 2026 13:00:29 +0000
Manifest this update: Fri 17 Apr 2026 13:00:29 +0000
Manifest next update: Sat 18 Apr 2026 13:00:29 +0000
Files and hashes: 1: 4eHXKjznACVbndG6iFpTFVUVkDU.roa (hash: OQWOo0J8qNH07VKmKOXFET9I4K0zlOhgBlJo3WSTOP8=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: EhKLkrdJzw+3t1Ot31YCOg2EXJAACz/HFHZNIjDgK2E=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:50:b4:ec:84:ff:30:f1:7d:4f:93:d3:03:9b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Apr 17 13:00:29 2026 GMT
Not After : Apr 18 13:00:29 2026 GMT
Subject: CN=11b3b207539ca738576611727f88b46c07a41d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:f2:03:a7:93:69:a9:d1:dd:f1:11:74:b2:
b3:93:8f:d9:be:b9:be:dc:2d:dc:a5:32:f1:66:8a:
9e:9a:03:d0:d9:37:13:b0:2b:6e:fa:83:99:fe:9e:
6e:a1:cb:55:9b:a8:54:ea:eb:4f:fe:a6:24:c2:34:
ba:f1:3d:99:bf:f7:e8:41:7f:a0:3c:d0:09:ea:34:
27:ff:02:a4:e0:f8:5e:e2:ff:f8:45:1f:e7:2c:ac:
40:54:59:9c:c6:f8:3b:fe:82:fe:a9:ac:cc:1f:18:
ae:25:86:a3:2a:2c:de:d4:85:a8:23:10:6c:83:68:
29:7f:3c:82:5d:ff:1c:a2:55:d1:c6:76:fd:d1:fe:
ee:4b:9e:12:94:f9:e4:26:e5:cf:94:c2:bf:f7:a4:
c1:f7:f4:fa:cb:1b:7d:46:83:fd:56:6f:47:67:a0:
ae:67:8f:e0:76:dc:6f:ec:a3:ac:77:88:9c:ef:bd:
81:f3:87:44:b3:6b:86:1d:c0:ea:43:b4:a0:36:ca:
60:f1:3e:0d:c5:a3:bf:bf:40:c9:2f:2e:fe:7b:83:
ea:c3:98:e0:97:9c:b2:64:4c:0c:7c:20:ad:de:cf:
e0:57:ea:67:29:a7:c9:e5:c5:53:19:7b:bf:8c:54:
bf:b8:3c:6f:a1:d8:dc:a7:94:21:67:32:d0:65:e8:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:B2:07:53:9C:A7:38:57:66:11:72:7F:88:B4:6C:07:A4:1D:4A
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:00:b8:a7:ff:66:b2:22:51:5f:3c:d0:61:6d:4b:98:72:
0d:7e:6e:41:79:49:4f:ba:10:35:f4:a5:d9:bd:27:53:04:15:
03:a0:43:02:3b:f3:35:0e:04:82:10:e2:69:56:87:50:99:45:
8a:42:61:01:9d:1e:4a:94:b6:21:c7:7d:69:05:75:9d:95:7f:
15:44:32:c1:82:27:9a:e8:b5:2f:60:09:84:6e:fa:06:ed:bd:
bf:93:f9:aa:83:9d:2d:5e:fc:94:97:85:21:a9:55:a2:4a:7e:
73:fe:e2:6f:e2:18:99:32:14:94:b3:d5:8b:6f:c8:50:f8:63:
2c:3b:69:f0:70:60:f5:41:5d:2c:2c:29:b8:59:e0:0f:d4:ff:
0b:6f:50:66:43:ad:ac:d4:ee:65:5c:f8:57:00:d9:39:b7:42:
fb:b5:df:26:4a:5f:05:e4:8c:ac:a5:bb:b5:31:50:ce:c6:f9:
bb:0e:73:16:00:d9:d5:e4:98:fe:3b:ef:33:4a:f9:40:f7:90:
e4:27:38:6c:e6:36:63:db:de:6e:b0:d8:54:f2:43:38:43:a7:
3c:f3:1d:24:60:ba:b7:57:f9:8f:f4:67:37:dd:76:76:85:08:
84:16:2c:76:b2:33:55:65:29:6e:06:cb:60:76:5b:f1:8e:ae:
14:ec:7d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh1C07IT/MPF9T5PTA5tvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjYwNDE3MTMwMDI5WhcNMjYwNDE4MTMwMDI5WjAzMTEwLwYDVQQD
EygxMWIzYjIwNzUzOWNhNzM4NTc2NjExNzI3Zjg4YjQ2YzA3YTQxZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAminyA6eTaanR3fERdLKzk4/Zvrm+
3C3cpTLxZoqemgPQ2TcTsCtu+oOZ/p5uoctVm6hU6utP/qYkwjS68T2Zv/foQX+g
PNAJ6jQn/wKk4Phe4v/4RR/nLKxAVFmcxvg7/oL+qazMHxiuJYajKize1IWoIxBs
g2gpfzyCXf8colXRxnb90f7uS54SlPnkJuXPlMK/96TB9/T6yxt9RoP9Vm9HZ6Cu
Z4/gdtxv7KOsd4ic772B84dEs2uGHcDqQ7SgNspg8T4NxaO/v0DJLy7+e4Pqw5jg
l5yyZEwMfCCt3s/gV+pnKafJ5cVTGXu/jFS/uDxvodjcp5QhZzLQZejXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGzsgdTnKc4V2YRcn+ItGwHpB1KMB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxIAuKf/
ZrIiUV880GFtS5hyDX5uQXlJT7oQNfSl2b0nUwQVA6BDAjvzNQ4EghDiaVaHUJlF
ikJhAZ0eSpS2Icd9aQV1nZV/FUQywYInmui1L2AJhG76Bu29v5P5qoOdLV78lJeF
IalVokp+c/7ib+IYmTIUlLPVi2/IUPhjLDtp8HBg9UFdLCwpuFngD9T/C29QZkOt
rNTuZVz4VwDZObdC+7XfJkpfBeSMrKW7tTFQzsb5uw5zFgDZ1eSY/jvvM0r5QPeQ
5Cc4bOY2Y9vebrDYVPJDOEOnPPMdJGC6t1f5j/RnN912doUIhBYsdrIzVWUpbgbL
YHZb8Y6uFOx97Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:58 2026 by rpki-client