Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: vDQW0PchQN3oEv6Zvvsgo6J6rAEhrOXI6yn3+8A0VRQ=
Subject key identifier: 2D:20:96:D6:7B:07:0E:93:45:11:7E:3A:63:35:FE:CF:4F:9A:F3:3E
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019D9C2D1EC3D2E19635CADCC951C3ED71DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0341
Signing time: Fri 17 Apr 2026 16:01:35 +0000
Manifest this update: Fri 17 Apr 2026 16:01:35 +0000
Manifest next update: Sat 18 Apr 2026 16:01:35 +0000
Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: /G5I+cWPccSt/n7ybysVIbIeaqd2gvdQxbxjbyMvEB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:1e:c3:d2:e1:96:35:ca:dc:c9:51:c3:ed:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Apr 17 16:01:35 2026 GMT
Not After : Apr 18 16:01:35 2026 GMT
Subject: CN=2d2096d67b070e9345117e3a6335fecf4f9af33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:90:31:5c:6b:4e:56:38:0c:ad:c0:6a:7b:
87:fc:f0:82:bf:34:c5:29:ec:99:bf:b5:6e:b9:3c:
b4:8b:fa:48:5c:bd:38:66:73:3c:77:4b:da:c1:75:
9f:31:65:8a:bd:b0:b6:b8:f8:ec:37:59:53:f6:78:
9f:1d:92:fd:5c:4e:c4:40:76:36:96:e4:a0:19:ad:
25:cf:24:4d:42:be:ab:14:a4:d2:9f:14:68:a8:3c:
ab:e4:ba:ca:86:87:94:d7:8d:3a:03:22:72:6f:24:
3d:a9:68:95:af:b2:ce:5a:a8:52:42:31:db:ab:85:
14:cc:ef:7a:04:51:20:e9:5b:98:e9:a4:47:8c:5f:
97:3a:2c:e9:9f:f2:d4:4e:70:e6:ef:4d:a8:b9:36:
79:a4:e9:d2:d8:40:d8:8a:0f:b7:c2:f7:6d:76:b4:
e8:35:ce:25:c7:39:d6:14:0c:e5:04:da:7c:2e:fd:
1d:06:d5:8d:5d:db:d1:cd:d4:bf:f4:b2:85:72:75:
dc:45:db:f7:cb:c8:a7:f6:fe:01:06:a0:8b:06:06:
3d:c7:89:89:80:e7:12:83:2b:c7:5f:2c:c6:f1:9d:
3c:c4:6b:0b:5f:1e:6a:7e:93:6b:6e:dc:40:ef:5c:
6d:58:11:0e:05:76:5c:c4:77:fb:68:fb:28:b6:ed:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:96:D6:7B:07:0E:93:45:11:7E:3A:63:35:FE:CF:4F:9A:F3:3E
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4c:fb:1b:97:03:b2:09:a1:43:42:5d:38:6f:39:9f:57:c6:
76:70:f1:fc:a7:48:9d:cf:1e:d5:4c:15:99:a2:27:51:19:c0:
d9:ef:9c:99:1f:c8:da:48:dc:51:38:f7:5f:c5:60:4e:fd:59:
91:22:ce:69:8b:24:56:24:3c:ea:e7:3c:e3:cb:cc:a3:09:15:
c1:a1:59:31:81:89:07:35:ff:86:d9:52:ea:24:40:a8:18:4d:
85:8c:49:4f:71:de:09:34:09:ea:83:90:84:ac:d6:9f:b3:29:
84:12:16:b5:65:0f:31:31:bb:b4:6e:88:a6:e9:5f:69:6f:27:
6b:f6:c0:e1:96:bc:50:4f:2f:a7:92:36:16:ca:e6:ec:96:00:
4c:88:b3:df:37:f4:e4:0f:75:49:34:f9:c4:b5:25:46:00:23:
42:7e:bd:8f:f8:a1:21:5e:b0:be:b0:48:8e:f1:b2:1c:9b:38:
7a:43:82:37:eb:39:8d:8b:93:d2:ea:4a:ed:db:e4:75:3f:ee:
ed:f3:43:98:d6:52:b7:e1:c6:6d:5d:07:22:84:c3:ca:da:86:
95:50:74:bc:26:23:eb:8e:2c:70:96:1d:7f:61:96:8d:81:58:
ec:8f:34:43:c8:10:db:41:52:bc:e4:45:80:62:b1:6f:bd:75:
2b:62:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:18 2026 by rpki-client