Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: elLFS6BWUPaoccTcjEqRVHEd0RGNt8DrYiLHp2eVnEc=
Subject key identifier: 46:46:41:A7:8C:E9:AD:0D:16:E0:DD:CF:B0:9F:A8:FA:14:C7:81:B7
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019CAAFD1F1C12D43AAD5F346702256AE733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 1459
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: RpVLdcYIv10qm6/CBSXbn2RgT/o1M7+TwmieM/kmXmY=)
2: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (hash: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1f:1c:12:d4:3a:ad:5f:34:67:02:25:6a:e7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=464641a78ce9ad0d16e0ddcfb09fa8fa14c781b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:9c:84:3e:30:26:e4:00:03:82:78:28:8d:
82:42:95:b8:5e:96:48:33:58:5b:f1:bf:94:73:84:
f3:3a:74:55:ad:bc:6f:f5:49:9c:74:13:03:55:0e:
67:ac:59:09:4e:ac:81:14:35:7d:9b:78:99:43:1d:
17:af:7f:ea:84:d5:f3:db:e4:30:10:23:52:9b:db:
c0:96:c7:fb:7b:e4:31:66:4a:57:6f:73:87:bf:6b:
f5:ec:f5:ba:9e:28:d5:e3:f8:2a:92:98:03:c1:d1:
18:09:3f:bb:1d:80:93:18:23:78:f8:f7:6a:ab:ce:
52:05:ff:5e:a2:7c:83:03:b2:da:22:fe:ad:da:5f:
55:68:36:5a:a9:37:c2:6a:2b:a8:72:e4:a0:22:2d:
ec:5f:49:e8:12:ea:19:dd:29:ef:47:68:0a:a3:d1:
e7:d0:ca:46:04:e9:93:50:ce:c4:16:85:b5:d5:85:
84:ce:70:ac:59:af:d6:14:59:4d:5a:ac:4a:e7:fb:
37:e8:48:3f:00:95:2a:10:18:98:a2:fb:11:55:2b:
e0:c5:3e:35:3d:3c:60:90:6f:c3:99:1d:95:ff:4b:
b9:c1:df:49:e3:6b:07:11:c7:7d:e9:71:cd:96:43:
f1:8a:e4:c6:f9:5d:4b:21:d9:19:12:53:42:9f:6f:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:41:A7:8C:E9:AD:0D:16:E0:DD:CF:B0:9F:A8:FA:14:C7:81:B7
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:e0:d0:d4:ed:b1:9a:73:e8:db:be:00:36:9d:90:13:cb:
22:70:db:2e:b7:ac:c4:8d:6f:d2:be:ca:65:15:64:38:da:90:
49:f8:83:9a:de:7e:b9:28:f5:42:6a:79:39:bb:fd:31:bd:a6:
9b:18:af:83:85:1f:08:03:fd:8c:24:df:bb:42:6a:32:c3:92:
9d:69:e1:1b:e9:36:6b:8c:97:64:ac:02:c3:be:2c:18:58:b1:
43:c5:74:82:a0:a5:a7:4a:8e:56:87:81:fb:e4:ae:6d:a9:85:
f7:ca:78:bf:b4:96:30:c9:d5:5e:8b:1c:f1:a3:b5:87:6d:9a:
b7:38:4f:8b:99:19:63:dd:44:2e:61:e4:cb:10:9b:f3:e5:21:
19:6c:9d:d0:92:e5:0c:49:06:53:00:5f:70:ce:4c:09:06:02:
c6:62:a5:15:cb:5d:0e:bc:19:4a:3f:79:f3:7c:90:5b:f9:07:
76:9b:0c:e9:06:bb:24:3a:70:21:ff:ef:c4:c6:6a:da:14:3d:
4a:3e:bd:c2:49:d3:bc:11:cb:29:4e:07:a3:3f:d1:04:0d:f4:
11:64:77:51:49:ca:36:7e:e8:bd:ce:8e:0f:0f:60:17:bd:48:
24:aa:18:36:cf:09:02:66:1d:ad:5c:b8:bf:e6:dd:d8:6d:11:
6a:19:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:50 2026 by rpki-client