Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: 9hfoLmCdy/qHfn0HZwiFCreT1xG2XxaLtOed3Vb2e78=
Subject key identifier: 4A:22:50:61:F7:0A:98:CD:CC:BE:33:B2:DE:D1:AE:6F:90:0A:BE:09
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 01A0BD9E59A5C4143C9F6D66D8A470968725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 04E0
Signing time: Sun 20 Sep 2026 07:01:06 +0000
Manifest this update: Sun 20 Sep 2026 07:01:06 +0000
Manifest next update: Mon 21 Sep 2026 07:01:06 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: WaYwkHGcVwQSOhPtop7ZlwaBWsOri+jt9zjUuMnCYek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:59:a5:c4:14:3c:9f:6d:66:d8:a4:70:96:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Sep 20 07:01:06 2026 GMT
Not After : Sep 21 07:01:06 2026 GMT
Subject: CN=4a225061f70a98cdccbe33b2ded1ae6f900abe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:60:d1:bd:2c:38:5b:91:2e:9e:17:ad:3c:
93:32:4e:dd:7f:5d:f4:cc:3c:8a:02:12:fd:e2:99:
d2:fc:ca:7e:7c:1b:b5:4c:3d:34:8f:dc:8b:f4:d5:
62:a0:64:8a:5f:98:bc:d4:e8:c2:82:60:16:48:26:
87:7b:a5:74:78:6f:fc:1d:26:85:a7:89:7b:54:07:
ee:c4:ce:bf:7a:7c:d8:b6:a7:83:09:81:dc:76:01:
9a:3f:a6:c7:af:b2:94:50:29:51:07:42:d1:6f:c9:
7e:07:d1:da:e0:90:a9:56:8f:e6:6e:4f:76:f9:2f:
58:8d:2d:a6:73:65:ae:0d:de:02:d7:1c:a2:07:ba:
9a:cc:e5:35:25:d4:38:38:5f:d3:c9:2d:92:5c:f2:
c9:e2:3c:bb:1f:b1:06:b7:6b:9c:7d:ed:69:95:30:
f8:3e:d7:3a:c4:61:ba:0a:b6:b5:79:0a:e7:17:3b:
da:ed:31:96:b4:d4:27:a8:f7:34:2d:c0:0f:db:2a:
06:75:5a:78:79:02:56:d8:08:14:24:31:42:d7:0b:
16:04:0d:44:71:05:26:3d:ff:64:b5:38:c5:c7:1b:
73:b8:81:ce:80:ad:f2:69:95:6c:81:a7:21:8c:b6:
b6:95:2e:75:76:f1:3a:34:10:92:2d:5e:c7:cd:a9:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:50:61:F7:0A:98:CD:CC:BE:33:B2:DE:D1:AE:6F:90:0A:BE:09
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f8:fa:41:b6:67:1f:3d:ba:59:3d:b4:67:f0:db:c3:70:60:
47:4d:77:e3:7c:dd:96:5d:b4:3b:b5:90:e6:8f:17:70:42:2c:
78:d1:66:cb:8f:55:ab:55:e3:5b:9c:dd:2b:d0:8f:a5:c3:e0:
b3:d6:3c:b9:3d:0e:27:a9:db:a5:29:ef:5f:04:1d:6d:73:4e:
29:ca:4c:45:d4:4f:87:d5:c6:91:77:7f:f7:b8:b1:2f:cc:09:
c2:de:68:41:50:c4:b4:41:47:17:fb:23:21:f1:b7:77:ca:25:
89:c0:12:98:46:af:c3:26:47:88:ea:5a:a9:9d:37:a5:bc:fb:
b9:57:2b:d2:2b:e0:34:2f:b6:3a:24:78:0e:20:30:38:f2:46:
98:78:36:f8:71:89:c0:0f:d8:bb:23:b2:2f:c8:c1:df:39:64:
3c:c1:20:d0:3c:f7:5c:01:91:e9:a3:c5:00:cb:be:09:e6:1c:
85:ca:3b:5f:74:8e:ae:a6:60:41:b7:f3:cf:ac:7f:91:04:a4:
d5:a5:8f:a0:07:84:bb:56:fa:5b:38:22:df:d9:f5:e3:de:f3:
7c:a9:28:22:f3:88:15:45:c1:db:db:ea:37:dd:2b:7f:26:ce:
99:02:61:b7:99:d2:f2:2d:6f:07:54:39:4f:9f:5a:10:93:9c:
5d:e8:2f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9nlmlxBQ8n21m2KRwloclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2
Yzg0NDEwHhcNMjYwOTIwMDcwMTA2WhcNMjYwOTIxMDcwMTA2WjAzMTEwLwYDVQQD
Eyg0YTIyNTA2MWY3MGE5OGNkY2NiZTMzYjJkZWQxYWU2ZjkwMGFiZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NNg0b0sOFuRLp4XrTyTMk7df130
zDyKAhL94pnS/Mp+fBu1TD00j9yL9NVioGSKX5i81OjCgmAWSCaHe6V0eG/8HSaF
p4l7VAfuxM6/enzYtqeDCYHcdgGaP6bHr7KUUClRB0LRb8l+B9Ha4JCpVo/mbk92
+S9YjS2mc2WuDd4C1xyiB7qazOU1JdQ4OF/TyS2SXPLJ4jy7H7EGt2ucfe1plTD4
Ptc6xGG6Cra1eQrnFzva7TGWtNQnqPc0LcAP2yoGdVp4eQJW2AgUJDFC1wsWBA1E
cQUmPf9ktTjFxxtzuIHOgK3yaZVsgachjLa2lS51dvE6NBCSLV7HzanfxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoiUGH3CpjNzL4zst7Rrm+QCr4JMB8GA1UdIwQY
MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt
NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi
LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPj6QbZn
Hz26WT20Z/Dbw3BgR01343zdll20O7WQ5o8XcEIseNFmy49Vq1XjW5zdK9CPpcPg
s9Y8uT0OJ6nbpSnvXwQdbXNOKcpMRdRPh9XGkXd/97ixL8wJwt5oQVDEtEFHF/sj
IfG3d8olicASmEavwyZHiOpaqZ03pbz7uVcr0ivgNC+2OiR4DiAwOPJGmHg2+HGJ
wA/YuyOyL8jB3zlkPMEg0Dz3XAGR6aPFAMu+CeYchco7X3SOrqZgQbfzz6x/kQSk
1aWPoAeEu1b6Wzgi39n1497zfKkoIvOIFUXB29vqN90rfybOmQJht5nS8i1vB1Q5
T59aEJOcXegvhw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:59:58 2026 by rpki-client