Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: VpihX0X46N95GYArTZ85Vq0fbsdraswXDnc09d7YbY0=
Subject key identifier: 9D:78:42:DE:AC:DA:D2:05:7D:03:92:22:0E:D1:E3:9E:5A:23:DF:82
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 01A0CAB4BE60A8D5FAD5DEB2F13BB9B2B5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 20:00:37 +0000
Manifest this update: Tue 22 Sep 2026 20:00:37 +0000
Manifest next update: Wed 23 Sep 2026 20:00:37 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: srCfkmX3odI+R7csUmApbF1AHCE6RMP8hXD70/WGcRs=)
2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:be:60:a8:d5:fa:d5:de:b2:f1:3b:b9:b2:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Sep 22 20:00:37 2026 GMT
Not After : Sep 23 20:00:37 2026 GMT
Subject: CN=9d7842deacdad2057d0392220ed1e39e5a23df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:e6:e7:3a:70:41:dc:61:d3:c2:5d:2c:f0:
24:e5:46:0b:1e:3d:6c:e7:61:af:90:49:19:77:ef:
15:6e:bb:03:01:4a:93:fb:fc:ec:db:60:5f:19:29:
f7:5f:03:a8:31:d4:89:70:62:32:5c:3d:68:2e:d8:
41:e8:6c:cd:c6:aa:a1:e1:1f:ff:7f:2d:00:8d:e9:
f5:5a:2e:93:3b:e9:44:d6:ec:0f:ee:b5:0c:a4:c4:
5b:05:e4:a8:26:95:38:89:c3:73:f9:04:7a:9b:0e:
2b:6f:51:69:12:6e:e1:9c:47:46:36:a6:7c:0e:bd:
df:7e:ed:66:4d:e1:a1:df:dc:90:8d:8e:72:73:55:
40:4f:b3:0e:87:cf:2a:64:42:9d:e6:56:80:56:98:
c0:a1:d6:01:8d:05:a2:d2:31:e1:2a:eb:ad:a2:9a:
b9:84:d1:ae:49:98:b1:2b:b3:5a:62:a4:da:61:f5:
d4:66:74:8c:de:22:39:4b:4d:ac:e7:81:a5:c0:e3:
90:cc:60:20:dc:98:92:19:64:76:30:f9:d9:44:d3:
e5:18:00:5b:64:15:b7:3e:31:df:a5:aa:9d:db:63:
7d:76:c2:3a:97:e4:ec:b0:80:4c:6e:18:3a:52:de:
b5:6f:77:f4:2f:94:db:e6:35:b2:71:e9:10:52:62:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:42:DE:AC:DA:D2:05:7D:03:92:22:0E:D1:E3:9E:5A:23:DF:82
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:50:bb:78:08:0c:c2:52:69:04:5d:09:99:e9:fd:ff:ef:33:
b7:90:b6:54:03:ad:5b:8c:f3:50:8b:bf:0a:84:df:b6:71:45:
fe:19:39:84:a9:76:08:79:cc:fb:cb:40:f1:c3:cf:3c:44:a1:
9b:45:81:79:71:65:4b:ab:8e:8d:20:da:10:d3:e3:f7:25:67:
d1:9e:ec:6a:42:3f:c7:47:32:7d:b3:28:39:5c:a0:3a:d3:55:
43:52:c6:b9:7b:44:90:11:da:c5:f1:54:12:c6:27:f0:86:01:
b7:c7:5d:1a:bf:86:97:67:b3:b9:56:6f:dc:81:2f:3a:d3:69:
b5:d0:8c:b6:cd:e2:20:14:7d:aa:42:11:29:57:96:bd:4d:c5:
ad:37:df:76:27:7b:46:82:2b:59:20:87:f6:ca:35:2b:84:9b:
8f:01:92:9d:a3:c0:f3:36:45:cc:95:16:53:b6:6f:04:22:03:
0b:9c:74:b5:e4:36:c1:9e:43:92:aa:00:f5:b8:74:c2:20:70:
00:8f:7e:ce:03:64:1e:eb:8a:f3:c8:54:38:ec:b2:0e:f0:f1:
e7:64:82:7e:f1:f6:bd:c7:e0:ba:5a:2f:ea:ec:77:8c:1f:04:
2c:b3:95:ee:ae:ec:bf:cd:ec:43:23:d3:21:85:c9:8a:e7:ce:
54:2a:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:30:21 2026 by rpki-client