Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
File: EkQqmE1AazYwQ34q7JxTDQ4blcg.mft (raw, json)
Hash identifier: iZ46xMUjA5U1adAsJsGgmT+dR4sLb+lltMayw06V8Tw=
Subject key identifier: 96:25:CF:AE:D7:74:CE:A2:87:CD:E8:68:CA:B4:08:66:BA:17:FD:00
Authority key identifier: 12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
Certificate issuer: /CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Certificate serial: 019D9D75C2DB281582E12B17E16100B4B5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
Manifest number: 0101
Signing time: Fri 17 Apr 2026 22:00:33 +0000
Manifest this update: Fri 17 Apr 2026 22:00:33 +0000
Manifest next update: Sat 18 Apr 2026 22:00:33 +0000
Files and hashes: 1: EkQqmE1AazYwQ34q7JxTDQ4blcg.crl (hash: y8qu40GbUTcgFW+BRNPJ3EvqPUZSJqNuWdFGmF4EX3s=)
2: sBKXIcug608LSZXfM5pwh9gFcaw.asa (hash: VeUI5iGSK0Bo8UBILEtAk5wSZzWuXJq+0/DHtWsVU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:c2:db:28:15:82:e1:2b:17:e1:61:00:b4:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Validity
Not Before: Apr 17 22:00:33 2026 GMT
Not After : Apr 18 22:00:33 2026 GMT
Subject: CN=9625cfaed774cea287cde868cab40866ba17fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:f8:8d:14:a8:0a:75:de:18:64:d4:a8:ee:
b7:7f:d0:87:d9:49:2c:cf:6f:02:08:bf:29:fb:57:
56:d4:be:38:7a:f1:40:c6:3f:8b:84:63:e3:6f:ff:
96:ec:2c:3c:1f:24:b1:04:96:a1:65:a0:69:b8:96:
c7:a7:61:dc:57:e5:ac:14:d0:5e:72:22:f7:bb:ab:
e7:70:33:b6:87:22:60:64:0c:43:6a:ae:b8:61:a7:
62:39:a5:9b:4e:aa:7a:04:e2:85:a3:4d:bf:9b:4e:
63:40:c2:f5:45:7d:e1:22:a6:37:c6:a1:a4:e3:b8:
c7:5a:ef:a3:9c:22:87:11:29:77:e7:46:a0:17:3f:
dc:7d:3b:89:8a:84:49:dc:a6:d4:94:e9:45:8c:30:
ec:45:55:fc:ed:d5:cb:ce:57:5f:c7:b8:20:fc:9d:
64:a7:4d:cc:27:f7:10:08:9d:f7:72:4d:c9:c0:05:
7c:3b:56:b5:a4:34:f6:0c:3f:a8:81:5c:13:ce:20:
e0:c9:47:36:a6:b2:5b:c2:b7:a9:76:38:41:9e:95:
0a:d2:b4:79:0c:97:ef:e0:26:d2:98:fe:67:8c:ed:
35:23:69:17:dc:e2:4a:9f:bb:a7:b0:d1:4d:e2:15:
07:01:8c:12:76:9c:a9:f6:b1:28:5d:97:94:5f:25:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:CF:AE:D7:74:CE:A2:87:CD:E8:68:CA:B4:08:66:BA:17:FD:00
X509v3 Authority Key Identifier:
keyid:12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:18:de:f5:9d:17:f6:57:6f:f6:be:be:de:a9:f0:5a:bc:
86:b2:fd:83:7f:ea:75:45:c4:1a:09:fe:5b:55:71:0b:88:2a:
ff:7f:66:46:d9:fc:2a:0f:74:e3:54:53:6e:42:51:92:a7:30:
8a:44:24:6e:54:1f:30:93:f0:2c:55:ef:64:1e:d5:3e:b6:8c:
84:9e:81:1b:24:2c:6f:a5:2e:38:87:5a:64:42:12:63:61:26:
f7:7a:b2:30:7e:44:5e:d3:67:ce:80:bc:6f:b9:4f:cb:f9:4d:
0d:4d:78:d7:b5:36:e7:7a:ff:ef:00:e2:b1:a6:0a:1f:c2:ca:
3b:26:5e:57:b6:18:59:13:9b:a8:8d:d1:56:79:55:3a:a2:eb:
5d:ec:36:25:f7:97:c9:fd:f6:0b:06:de:38:53:5a:a8:9e:62:
af:ae:31:5e:bc:3d:17:91:88:f4:8c:71:98:7f:5b:08:b2:87:
c1:12:cd:c0:0f:f0:34:e1:35:e5:0d:2a:6d:62:c0:d2:ea:5a:
c8:57:46:04:b3:a1:82:87:5f:f2:b0:8e:64:84:db:a1:0b:e3:
13:4f:ac:c1:0b:12:15:11:b6:47:94:0c:81:ff:55:11:c7:a9:
06:41:21:ba:0d:08:bb:fb:42:4a:cf:32:30:36:e9:dd:ac:d1:
d3:0b:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:40:28 2026 by rpki-client