Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: 6mjRB9vI18GRS1srK+iAcNaUADFcIee28oh3sYeyErQ=
Subject key identifier: F2:A0:80:77:D6:85:C2:76:70:2E:81:4E:A9:63:17:2E:45:C9:CB:17
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019FAB6312EFE1C0EFCD4D9D9CE9EDDA7224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0452
Signing time: Wed 29 Jul 2026 01:00:24 +0000
Manifest this update: Wed 29 Jul 2026 01:00:24 +0000
Manifest next update: Thu 30 Jul 2026 01:00:24 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: dA6Rn76btgphC5ldFz+F+jt9mwezTdLAW2yiUIWDZG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:12:ef:e1:c0:ef:cd:4d:9d:9c:e9:ed:da:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jul 29 01:00:24 2026 GMT
Not After : Jul 30 01:00:24 2026 GMT
Subject: CN=f2a08077d685c276702e814ea963172e45c9cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:4e:c6:cd:b5:61:fa:7f:0c:71:de:6c:c7:
ba:b7:c4:7d:2d:4a:fa:75:fa:2e:eb:67:f2:36:df:
97:4e:70:a4:83:75:2b:fe:5e:81:ad:07:58:50:c7:
65:ae:59:9e:35:d1:2a:03:08:81:d2:af:08:7b:ed:
ac:3d:24:d1:7e:59:98:28:12:e6:c6:d4:95:27:3f:
41:c1:2c:97:71:eb:4e:db:89:13:05:38:a2:73:95:
06:ec:49:bd:68:0d:ba:00:73:6d:a0:50:07:98:2d:
16:1b:26:15:c3:d6:08:2d:46:22:4a:56:db:e4:19:
48:de:bc:ac:5b:12:b5:09:14:0e:45:27:68:0c:17:
53:e8:3e:1e:1f:b5:8d:b7:51:e7:52:64:fd:18:e8:
07:f6:cd:e9:5f:ea:06:1a:38:b5:8c:fa:3b:56:e7:
e6:aa:fd:9d:cc:b4:85:49:82:a5:b6:85:06:9c:3a:
7a:66:00:1b:a1:85:bd:af:d0:3f:57:92:f1:28:f1:
ac:74:23:db:e3:e2:a5:d4:75:57:58:3c:a1:fc:92:
b8:03:8d:c2:05:7a:36:97:fb:f2:49:db:4b:57:11:
2c:3c:b6:c0:73:a2:17:06:90:6e:1d:a3:02:23:6f:
f4:13:59:b2:79:e8:b0:c9:85:3c:73:27:b9:a4:ec:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:80:77:D6:85:C2:76:70:2E:81:4E:A9:63:17:2E:45:C9:CB:17
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2f:23:58:08:44:57:2c:66:72:92:0e:e2:7e:76:d2:8e:01:
bb:86:a2:f7:f9:b2:0b:83:63:58:c5:6a:80:0c:bc:24:7a:8d:
ae:34:3f:77:87:1f:c7:d4:8c:99:48:8f:55:0b:8f:de:5c:b3:
ba:6d:8c:2f:d4:c1:d4:4c:b1:15:d3:5b:cf:c7:3b:07:34:a4:
4b:e7:4a:b7:14:e8:a8:26:56:70:14:83:2b:b5:02:15:8b:79:
d7:0d:f5:a2:ea:b8:e5:d7:e4:5a:e6:01:77:22:12:cd:87:d6:
66:1e:67:22:86:74:ee:2b:a7:7e:2c:f5:b1:62:5b:2c:31:91:
36:73:a7:3d:fa:ba:e6:55:62:f1:4e:e8:3a:32:93:ed:f8:14:
8e:11:2e:b9:a6:d6:10:81:23:a2:16:49:92:ff:40:22:c7:c2:
bf:d7:5b:0d:fe:7b:6e:38:83:c8:47:a9:6c:45:51:0d:ff:20:
da:d5:42:55:1d:84:8d:9f:93:1e:76:f2:f1:4d:4c:81:c2:d9:
91:d9:48:4d:f2:2f:17:69:fa:2c:b0:2e:62:07:c5:64:57:04:
19:30:97:54:06:b3:0f:e8:b7:87:57:21:61:f5:18:72:b9:cc:
c6:43:94:eb:9a:d2:ed:c1:bb:11:d1:46:31:19:4c:93:d6:24:
5c:e8:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:08 2026 by rpki-client