Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: zR2WiT2LAq4v2xikkupSd2OjrogZSIGdBc6kA4VmtAw=
Subject key identifier: 5E:CD:C7:30:31:D5:E0:E7:0C:C1:04:D1:11:10:6B:F7:A1:3D:6E:5D
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019D99D0D667933C3863B9BA81662ED87335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: 0tdaDLR7Pd8AdGDEqhpe0nB5k1dPOzluhFUwODbJFh4=)
2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d6:67:93:3c:38:63:b9:ba:81:66:2e:d8:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=5ecdc73031d5e0e70cc104d111106bf7a13d6e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:da:f7:c0:c5:a5:5b:d5:ac:d3:6c:07:2c:
21:cb:34:0d:35:35:68:29:63:54:2e:b3:36:dd:dd:
4d:9b:33:5b:e5:bc:c9:08:91:e8:8a:38:05:eb:be:
c1:66:e7:86:02:e5:43:5b:39:e2:a7:c8:34:83:d7:
a1:f0:44:83:88:45:ba:70:cd:d9:3c:80:55:ad:f9:
2d:9b:7f:3b:c2:00:ff:0b:f3:2c:f0:02:cf:cd:b1:
0e:82:3e:a8:d2:e6:7c:80:79:80:03:10:3a:63:e2:
5d:7d:be:56:1d:ff:f6:2b:2b:d6:f4:c1:f6:49:c8:
8e:ee:79:fc:c8:8d:0d:32:cc:ec:56:5d:8b:55:d5:
99:bb:b0:93:e1:1b:aa:87:1c:6e:f8:6b:0e:3a:2e:
ac:08:07:61:bc:5b:c9:dd:db:31:7f:9e:b1:d3:c6:
8c:0d:33:e0:c8:ce:3c:a4:29:64:75:9f:aa:8b:1f:
13:ce:6a:9c:8c:49:ab:14:2f:b8:6d:7f:d5:bb:38:
7d:14:6c:99:ab:38:65:0d:c7:bf:9a:5d:61:d5:01:
d6:a7:de:ec:96:52:e4:10:69:b1:26:80:33:98:61:
fc:71:be:e8:ca:e9:9c:5c:02:b5:3b:2b:9c:10:5c:
7c:29:b4:cc:7c:29:7f:17:ca:9b:16:d8:0c:3d:a9:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:C7:30:31:D5:E0:E7:0C:C1:04:D1:11:10:6B:F7:A1:3D:6E:5D
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:79:7c:8a:a9:77:65:ba:5b:48:53:2e:48:87:01:e1:c9:
19:7c:7b:84:02:27:8e:f1:5b:e0:a3:5c:77:68:c7:78:3e:99:
e4:34:74:62:e7:0e:b7:ed:aa:1f:0a:29:b4:e0:da:87:57:ac:
10:f7:cf:71:e5:d2:c3:f6:c4:26:d3:e8:4c:5c:fa:ca:e5:d8:
47:6f:97:03:4f:78:0a:21:11:4c:88:a8:69:0e:09:db:a7:35:
1d:42:a7:c7:69:86:ea:6b:de:4f:15:7a:24:b8:f2:8a:68:ed:
c6:fe:ab:a4:e6:7f:51:d9:15:5d:f6:04:b5:91:ef:f7:55:15:
cd:51:26:b8:6c:59:ec:02:ba:a5:68:c9:0f:09:ce:2d:e4:8c:
28:27:e5:20:40:83:1c:93:e6:00:8a:75:6e:4a:a2:36:8b:a5:
22:c4:4d:77:6e:3a:95:89:e4:7a:55:8c:70:95:41:7c:a8:a1:
d0:66:f9:67:52:db:56:e9:cd:30:a3:6b:63:a8:6a:d4:47:8f:
62:e0:88:73:6e:c0:62:20:5e:78:c7:14:c7:37:3f:9f:b3:b4:
a7:89:97:50:91:a4:af:3c:b8:61:86:52:4a:c2:f1:a1:21:e2:
bf:77:5c:42:80:2a:80:d8:09:1d:8f:fc:e6:57:61:ed:2b:7a:
6c:70:c4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NZnkzw4Y7m6gWYu2HM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4
NTEyZTcwHhcNMjYwNDE3MDUwMTMzWhcNMjYwNDE4MDUwMTMzWjAzMTEwLwYDVQQD
Eyg1ZWNkYzczMDMxZDVlMGU3MGNjMTA0ZDExMTEwNmJmN2ExM2Q2ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK3a98DFpVvVrNNsBywhyzQNNTVo
KWNULrM23d1NmzNb5bzJCJHoijgF677BZueGAuVDWznip8g0g9eh8ESDiEW6cM3Z
PIBVrfktm387wgD/C/Ms8ALPzbEOgj6o0uZ8gHmAAxA6Y+Jdfb5WHf/2KyvW9MH2
SciO7nn8yI0NMszsVl2LVdWZu7CT4Ruqhxxu+GsOOi6sCAdhvFvJ3dsxf56x08aM
DTPgyM48pClkdZ+qix8TzmqcjEmrFC+4bX/Vuzh9FGyZqzhlDce/ml1h1QHWp97s
llLkEGmxJoAzmGH8cb7oyumcXAK1OyucEFx8KbTMfCl/F8qbFtgMPakoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7NxzAx1eDnDMEE0REQa/ehPW5dMB8GA1UdIwQY
MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt
ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2
LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5N5fIqp
d2W6W0hTLkiHAeHJGXx7hAInjvFb4KNcd2jHeD6Z5DR0YucOt+2qHwoptODah1es
EPfPceXSw/bEJtPoTFz6yuXYR2+XA094CiERTIioaQ4J26c1HUKnx2mG6mveTxV6
JLjyimjtxv6rpOZ/UdkVXfYEtZHv91UVzVEmuGxZ7AK6pWjJDwnOLeSMKCflIECD
HJPmAIp1bkqiNoulIsRNd246lYnkelWMcJVBfKih0Gb5Z1LbVunNMKNrY6hq1EeP
YuCIc27AYiBeeMcUxzc/n7O0p4mXUJGkrzy4YYZSSsLxoSHiv3dcQoAqgNgJHY/8
5ldh7St6bHDE3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:29 2026 by rpki-client