Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: XM0By1DMDCmODOey4LJqeWclYysUhTYHCH8jievXe1E=
Subject key identifier: 6C:AE:84:63:9E:74:AC:10:B7:16:0E:A9:F0:D1:9B:80:8E:34:1C:23
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019D9A7523B7263ED0FC239526B7D0A2A688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 1229
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: OxPfROgRQoBbGErstPkUdCRtN1MIrliP4A0si3QZKy8=)
2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:23:b7:26:3e:d0:fc:23:95:26:b7:d0:a2:a6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=6cae84639e74ac10b7160ea9f0d19b808e341c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:3c:2f:cb:88:1b:dc:b8:ff:23:c3:a2:17:
9f:98:7e:23:c2:c6:26:e1:f0:61:c0:70:aa:74:c1:
bc:36:ea:19:7c:68:f2:73:8f:f8:24:43:ff:a5:bf:
bf:75:eb:f1:41:e2:ae:0a:a4:85:8b:3b:f7:f3:0a:
a8:d6:87:b1:52:e8:42:e3:74:13:71:59:db:9c:ad:
0b:67:b8:16:7a:d0:eb:61:87:7b:2c:b6:13:5e:21:
15:1c:f4:ce:40:3a:4d:8c:1f:93:07:2a:e3:71:77:
d1:89:9d:53:6d:43:5c:fd:2c:ae:de:c7:e8:e8:9c:
e5:52:57:43:4d:be:36:3b:1a:71:71:f1:16:2d:3c:
f7:5d:77:31:71:51:79:14:a2:53:d8:07:7b:a7:f4:
20:fe:53:ce:c5:28:35:d9:d1:fa:4d:c3:3d:cc:06:
b7:c8:52:64:36:8d:21:11:d5:28:a8:2d:85:50:45:
70:4c:af:bd:58:cd:15:5d:e9:0c:02:38:1b:57:3e:
86:3d:08:81:db:ae:af:32:03:ad:b5:fb:0c:ff:77:
64:b3:65:24:9d:e2:af:59:80:0c:d9:0f:c9:20:10:
ba:a9:ce:35:68:98:28:e9:7c:5f:e3:3a:96:8e:84:
f2:29:fd:ab:06:80:51:24:7e:9a:1d:55:90:cf:b6:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:84:63:9E:74:AC:10:B7:16:0E:A9:F0:D1:9B:80:8E:34:1C:23
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:86:2a:44:22:e4:8f:1d:aa:4d:d5:8d:e3:6b:bd:02:80:
42:8f:fd:ad:40:03:51:ed:b0:e1:07:da:b2:b6:7e:95:e8:3d:
0d:c9:e3:4a:11:cd:f7:7b:1c:b2:bc:00:ab:18:47:a0:72:f6:
47:17:2c:c4:3f:3d:9a:0e:7a:a6:75:b3:2a:62:40:77:9d:30:
6f:ac:d2:74:08:32:f0:c5:5c:db:39:b3:9d:cd:95:e8:c3:2a:
c7:a5:27:ad:7d:fd:6a:73:32:81:61:99:f3:e0:2b:03:f6:0f:
33:04:ac:f9:50:62:38:e9:0a:2f:21:85:2a:c0:11:82:24:46:
b3:80:37:20:c1:6e:e0:b8:8b:e2:04:e4:e6:41:45:8d:19:76:
3e:20:f0:75:32:ee:9f:87:ba:86:4f:44:3a:bc:1e:69:40:f4:
13:87:12:f1:76:3c:40:0f:36:15:2a:37:70:3c:6e:bb:1d:1a:
5e:70:5c:79:f6:95:39:68:41:a8:86:52:c4:92:d3:44:5e:ba:
48:cd:be:87:e1:ca:29:30:82:38:9c:47:94:bc:3f:d5:5d:d0:
c9:0a:4e:64:e3:ec:a8:16:ed:b7:cd:3b:b2:f2:44:ad:c3:74:
46:ea:1c:f6:10:cf:0a:ea:2f:d4:4f:bb:10:aa:fe:e4:19:c5:
23:90:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:48 2026 by rpki-client