Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: 78FxKX+h2bkWiTPkOjC55T8OzGJpAICasQzA03qi0NA=
Subject key identifier: E7:F2:8D:FA:DC:A3:F3:B0:97:A8:16:17:CD:AB:69:DD:35:2F:22:9D
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019CACB4CEADF190535019C30D9422A4E8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 02C5
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: lxD/3Vo3fR1Q3O6BJfgyNP93jf72ixPa/smxdbba1/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ce:ad:f1:90:53:50:19:c3:0d:94:22:a4:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=e7f28dfadca3f3b097a81617cdab69dd352f229d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:83:64:e0:9a:17:a5:a4:d6:68:39:00:32:
df:ba:9f:e5:4c:78:12:22:23:cf:c2:cf:e1:55:67:
ea:a8:b5:d6:cd:62:f6:d2:8d:70:2b:49:d9:c7:11:
10:ef:ab:30:68:4e:7d:b9:a9:98:e3:3a:0f:b8:54:
0e:6c:84:42:88:36:4d:a6:3f:12:22:71:5d:fb:f1:
6a:52:56:ef:19:ac:f2:2d:49:72:85:59:e3:ca:c1:
ff:98:dd:0c:d4:f3:d0:6c:4e:86:79:fc:5d:87:c2:
34:43:b0:b3:7b:ca:a5:f4:aa:50:f3:bb:31:b3:68:
0a:3b:35:7b:a1:cb:31:b9:7d:c8:e0:5e:2f:2c:d8:
46:86:36:21:20:73:f2:bb:b8:f0:67:cb:11:2b:91:
cc:3d:6b:89:29:c8:e4:a8:f8:8d:5d:37:d5:36:a5:
d0:bf:6f:6b:55:15:8c:bc:96:64:a4:22:54:78:be:
4d:6e:6f:c0:e4:eb:63:b2:10:e5:21:37:7b:0a:81:
4b:e9:5c:90:6b:3f:2c:d9:4f:06:51:f4:f1:a3:cc:
a6:15:e3:e7:67:51:97:81:5e:d5:73:2d:da:19:1d:
40:61:8b:73:6d:aa:21:2d:68:cf:d8:19:4a:c3:87:
16:6d:a9:ad:c1:0f:c4:2b:2b:01:94:c3:0a:20:ce:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:8D:FA:DC:A3:F3:B0:97:A8:16:17:CD:AB:69:DD:35:2F:22:9D
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ce:39:60:1e:cd:66:31:36:54:c4:d1:c0:6b:24:f3:5c:ca:
44:e5:72:33:f5:5b:34:dd:38:f2:98:3c:65:8c:5b:e3:69:3e:
b2:b6:9f:c5:e4:25:9c:55:b9:34:12:ac:60:34:4b:22:a1:6a:
cf:5d:30:59:ed:75:01:59:cb:68:50:f3:8b:f6:83:f4:e6:f4:
3a:66:41:23:a1:75:e0:1b:66:4a:73:b4:c3:bc:77:19:15:c7:
b8:96:35:db:3d:83:e8:42:65:d2:7c:e0:a5:59:50:90:23:f6:
0e:57:fb:4b:36:6b:1f:79:df:f2:95:66:98:0b:6a:bc:9b:89:
d3:8c:f8:22:36:fe:47:fc:34:14:91:dd:9f:95:62:81:95:08:
11:67:f3:7a:dd:5e:7f:02:7d:f2:b8:c7:2e:23:3d:d6:d6:08:
90:45:ee:c2:49:3c:dd:98:e9:3a:2b:10:00:3c:8e:fe:42:98:
1d:f5:ee:9e:ce:71:1a:51:d6:17:d6:5a:14:3f:41:b2:6e:03:
2c:1c:a0:ea:6f:65:5d:80:c7:23:5b:63:3f:72:b5:96:b9:f2:
b8:97:71:f9:41:9e:76:19:5c:ba:50:4c:e0:68:38:89:43:33:
c7:ef:2b:84:1c:db:09:64:2f:c5:b8:b3:06:d1:8e:a5:4b:ff:
8b:a7:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:46 2026 by rpki-client