Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: ceH8mg1GoxywrwRjqPP6UFiD5W8SgBL04GA05CEGgV0=
Subject key identifier: 7D:09:F8:24:32:15:FB:65:74:52:89:CC:46:9E:ED:38:26:EE:B8:3A
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019CAAFDA1066D1503252B8BB2144753907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 11AD
Signing time: Sun 01 Mar 2026 20:01:14 +0000
Manifest this update: Sun 01 Mar 2026 20:01:14 +0000
Manifest next update: Mon 02 Mar 2026 20:01:14 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: 91q8LTybZTCgxCUO6fbakDfrA6wwhibg8TFAatcHytY=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:a1:06:6d:15:03:25:2b:8b:b2:14:47:53:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Mar 1 20:01:14 2026 GMT
Not After : Mar 2 20:01:14 2026 GMT
Subject: CN=7d09f8243215fb65745289cc469eed3826eeb83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:ad:1d:23:85:af:6d:22:71:ff:e4:c6:3c:
05:ae:32:fd:7c:dc:1d:0f:f9:4a:88:2a:2c:55:98:
26:1c:12:d3:c8:c5:be:cc:7c:0f:76:bf:67:64:40:
8b:f4:80:84:be:80:98:23:68:17:ad:9e:ea:fb:a5:
ec:c6:27:b1:ec:01:51:bd:85:f5:fe:9c:85:81:fa:
62:54:9f:9d:9b:3b:5f:2c:f4:d8:54:f5:c7:74:b7:
1f:99:35:66:24:39:d2:32:a8:3a:a0:ff:df:2e:2a:
32:68:be:3f:b7:7e:f8:2a:31:8b:32:eb:8c:1f:db:
2c:75:fb:54:9d:fa:ed:5b:bb:ca:f2:8d:87:1f:c8:
b8:87:fa:20:1b:90:31:62:0e:37:2c:14:bb:80:85:
51:80:6e:3b:6f:31:d7:8f:e0:7c:bc:f7:94:f3:c1:
be:dc:f3:75:8b:7e:5d:c3:8f:34:a4:f3:de:1c:da:
e8:b4:bc:9a:c5:aa:05:d6:6f:c8:de:df:14:9f:97:
af:93:9a:83:91:26:35:d5:ad:d0:10:63:26:bd:12:
87:fd:36:7a:2c:64:56:ec:da:92:e1:3f:90:11:db:
b2:35:f3:8a:5f:bc:73:da:01:b5:e9:32:ea:73:4a:
9c:1a:c3:6d:d9:01:76:bf:a6:ca:2c:af:52:ef:7d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:F8:24:32:15:FB:65:74:52:89:CC:46:9E:ED:38:26:EE:B8:3A
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:f9:11:2a:97:ae:fb:66:b7:d1:7e:ba:e4:e3:23:ea:b5:
f1:5b:00:41:67:bf:c5:20:1d:21:7c:85:75:5d:5f:5c:b4:ce:
a5:48:d6:5b:26:59:69:fb:a2:9e:05:01:b1:45:8a:57:62:3e:
eb:f8:be:11:d3:c1:e8:90:b3:79:3f:89:c2:53:5c:4f:ae:ad:
de:52:a7:22:f2:a7:35:17:59:ed:c2:c4:6e:87:c2:24:32:78:
6f:89:2a:27:54:ef:96:4e:80:b8:97:bb:b7:be:e9:99:84:38:
35:ef:3d:89:52:88:82:b9:56:2b:d2:0a:41:73:d5:9d:6f:7a:
14:9c:03:e5:27:74:f5:97:1f:e3:df:90:97:a7:34:57:47:3e:
df:05:cb:1e:db:07:01:50:59:36:f6:00:29:1f:fa:5d:c0:a7:
cd:f6:57:eb:77:f5:74:9a:26:94:8b:5a:31:09:e0:60:93:12:
70:74:5f:62:ea:11:84:1b:ee:dd:59:92:1e:b5:c0:57:a0:9c:
de:05:51:c0:cc:f0:15:9e:c0:c2:08:69:bc:24:35:f1:92:d5:
69:7c:f7:39:c4:f1:c4:7c:4b:88:3f:14:58:c5:40:5a:b4:0d:
88:73:61:26:25:42:2c:b5:8a:35:5b:89:4c:88:8e:88:b7:f7:
52:8f:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:50 2026 by rpki-client