Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: CLiKTym83yQzvyOiFIuCQolz1R+lrmQJxSVt6E0AGvE=
Subject key identifier: 40:DC:2C:67:0F:0E:CC:96:2F:04:CF:69:2E:36:47:F3:09:25:30:31
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019EBFFF930A13A20E3BFAA65D4C13C1A95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 12C1
Signing time: Sat 13 Jun 2026 08:00:57 +0000
Manifest this update: Sat 13 Jun 2026 08:00:57 +0000
Manifest next update: Sun 14 Jun 2026 08:00:57 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: DQyiXX/jO+fUn1/ZU7Hi2IFgCmzMNtTf2d2JKZ6Xgmo=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:93:0a:13:a2:0e:3b:fa:a6:5d:4c:13:c1:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Jun 13 08:00:57 2026 GMT
Not After : Jun 14 08:00:57 2026 GMT
Subject: CN=40dc2c670f0ecc962f04cf692e3647f309253031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:bd:6e:1a:d6:23:65:81:18:88:94:af:26:
c4:21:af:2d:27:91:11:52:4e:93:e3:9f:b6:9e:9b:
df:3a:9f:68:bd:88:1e:c4:ee:43:cc:7c:64:9d:16:
b3:53:87:41:a8:cf:b6:99:2d:28:f6:7f:1f:81:70:
bf:54:3a:a8:77:46:bc:40:a3:22:38:86:c9:37:6d:
33:b0:71:66:1d:25:47:62:0f:1a:68:08:fc:c2:7c:
9d:12:cc:71:eb:3b:8d:38:06:99:0e:dd:74:7d:36:
62:b1:ea:07:07:7d:89:ca:c2:35:4c:81:0e:84:cc:
b5:d9:18:84:6c:65:59:88:bd:81:73:44:9f:72:d2:
8f:0e:bc:45:6f:5d:da:b0:5c:88:9b:8f:ad:98:16:
20:c9:b7:ef:d9:8a:de:ba:76:46:f3:99:d5:37:e0:
42:06:e5:5a:34:01:05:77:05:25:06:2d:08:b3:b1:
a6:de:b3:b6:62:1b:d7:d1:98:d8:69:a4:5e:03:9d:
cc:9c:0d:5c:9c:11:fb:da:90:a8:a3:92:db:f6:2e:
35:ec:fc:63:e0:3d:de:8b:c0:a0:54:e1:fa:8d:80:
dd:8a:24:44:58:5d:9e:80:d7:ce:dc:33:bc:81:03:
16:85:a1:72:d6:17:4f:4e:5e:87:16:f9:51:10:b1:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:2C:67:0F:0E:CC:96:2F:04:CF:69:2E:36:47:F3:09:25:30:31
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:89:9d:3e:1f:d8:be:b3:45:41:3d:53:e6:22:eb:88:6e:7d:
a9:5e:3d:cf:59:a0:20:4f:b8:03:67:1d:e8:5b:5a:62:58:42:
6a:28:10:40:84:77:95:86:7b:68:88:96:8d:c2:24:d8:7a:69:
c6:69:87:ed:7c:9d:c1:3b:10:ec:1f:c2:67:af:1d:d2:97:b2:
b3:cc:e5:8b:e1:1e:40:e8:3b:2b:11:8a:57:66:7b:91:10:1e:
92:02:a7:63:99:f6:c1:9d:99:13:5b:08:64:94:1a:1c:93:9d:
1c:3a:9b:89:44:8d:e3:09:0c:f8:39:3f:77:9f:8b:87:4e:72:
3b:75:b9:f5:3e:96:5c:b7:3d:cd:37:35:a5:bd:cd:1d:0a:3e:
22:92:39:f6:49:bf:40:34:d1:91:51:5d:d9:f8:ca:6e:e4:3c:
c5:c0:b5:46:a2:ec:4f:a2:cb:e2:ec:a3:fe:3d:21:49:71:60:
7e:62:6a:ff:d0:d5:74:ad:88:31:d6:8c:8d:63:1e:a5:36:c2:
5d:e4:de:94:1e:4b:be:89:33:cc:26:d8:c4:4d:81:ca:17:a8:
15:4f:78:e8:c5:57:2d:55:1a:7c:9a:9c:3a:ac:42:a3:59:4a:
3a:f7:c3:32:ba:5b:9c:77:26:10:42:25:76:b2:96:22:d9:d8:
cd:d9:9f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//5MKE6IOO/qmXUwTwalfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjYwNjEzMDgwMDU3WhcNMjYwNjE0MDgwMDU3WjAzMTEwLwYDVQQD
Eyg0MGRjMmM2NzBmMGVjYzk2MmYwNGNmNjkyZTM2NDdmMzA5MjUzMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbK9bhrWI2WBGIiUrybEIa8tJ5ER
Uk6T45+2npvfOp9ovYgexO5DzHxknRazU4dBqM+2mS0o9n8fgXC/VDqod0a8QKMi
OIbJN20zsHFmHSVHYg8aaAj8wnydEsxx6zuNOAaZDt10fTZiseoHB32JysI1TIEO
hMy12RiEbGVZiL2Bc0SfctKPDrxFb13asFyIm4+tmBYgybfv2YreunZG85nVN+BC
BuVaNAEFdwUlBi0Is7Gm3rO2YhvX0ZjYaaReA53MnA1cnBH72pCoo5Lb9i417Pxj
4D3ei8CgVOH6jYDdiiREWF2egNfO3DO8gQMWhaFy1hdPTl6HFvlRELHVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDcLGcPDsyWLwTPaS42R/MJJTAxMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkImdPh/Y
vrNFQT1T5iLriG59qV49z1mgIE+4A2cd6FtaYlhCaigQQIR3lYZ7aIiWjcIk2Hpp
xmmH7XydwTsQ7B/CZ68d0peys8zli+EeQOg7KxGKV2Z7kRAekgKnY5n2wZ2ZE1sI
ZJQaHJOdHDqbiUSN4wkM+Dk/d5+Lh05yO3W59T6WXLc9zTc1pb3NHQo+IpI59km/
QDTRkVFd2fjKbuQ8xcC1RqLsT6LL4uyj/j0hSXFgfmJq/9DVdK2IMdaMjWMepTbC
XeTelB5LvokzzCbYxE2ByheoFU946MVXLVUafJqcOqxCo1lKOvfDMrpbnHcmEEIl
drKWItnYzdmfzg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:42 2026 by rpki-client