Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: 64HpX67g2BW1rSBH9D0Q0xDfzxaQBa2pVgMfcOK7sw8=
Subject key identifier: 7B:A7:68:1C:79:33:8F:E0:D5:1B:3E:88:99:0E:B6:83:19:DE:65:DC
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019D9A7497176F6021BDD1CEAC2E74503DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 14D5
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: lT0OHFn8A1LsxGwXs1wUfhgvBahjLUzLrXaLvc53k78=)
2: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (hash: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:97:17:6f:60:21:bd:d1:ce:ac:2e:74:50:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=7ba7681c79338fe0d51b3e88990eb68319de65dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:94:f5:46:98:5e:c4:00:59:e1:94:2e:68:
e8:9a:cf:4a:91:bf:2e:f4:59:84:26:0b:89:ed:ca:
d9:7f:38:4f:2c:49:eb:ae:f6:14:ad:82:20:1d:16:
ba:a9:1e:8c:9c:21:4f:c4:d3:36:5f:52:0d:20:7f:
21:51:c8:3d:02:81:fd:ed:3b:b6:d1:b3:67:a4:2f:
75:e4:84:c6:91:b6:79:70:4d:10:24:c3:71:aa:81:
81:0e:f5:f3:0f:41:22:6d:1d:0a:35:9f:2a:da:41:
38:4f:5b:e8:70:16:f0:62:1e:81:a5:06:38:7a:d7:
07:a0:ac:56:0e:64:68:61:fb:5e:75:87:fb:c7:b9:
5e:99:ae:93:d0:d6:1f:6f:e7:7b:cf:ea:a4:af:ac:
d0:98:4c:b0:ed:2c:8d:6a:c1:a0:28:a2:b3:bc:86:
96:6c:69:fd:9a:33:a6:51:2b:cb:ff:22:25:8a:b9:
80:1a:64:03:9d:b6:2a:50:7f:8e:fa:3c:fa:2b:21:
99:d1:7e:b4:46:ab:11:a1:75:69:fe:26:a7:93:bd:
09:cf:c5:03:6e:5f:61:88:d3:64:8e:ec:81:1b:bd:
fb:45:97:4f:7d:b3:46:7b:dc:31:f8:f3:7b:65:40:
91:56:8e:71:d9:bc:84:0d:f2:38:3f:4f:4a:ec:ef:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:68:1C:79:33:8F:E0:D5:1B:3E:88:99:0E:B6:83:19:DE:65:DC
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:ba:44:3d:5b:01:cf:99:b9:19:69:58:4e:2e:09:d9:3b:
31:8a:9f:ea:98:8a:49:28:69:7f:b5:0e:31:bd:4d:46:63:ca:
cc:0d:fb:56:e5:20:45:6d:55:56:2c:a4:be:1c:7b:cc:d2:f8:
92:18:48:98:22:b9:b1:1b:56:4f:42:1d:a5:6e:5a:8f:a9:2c:
97:0f:35:ba:58:b3:66:be:30:ef:9e:a7:2a:f5:cc:70:cd:16:
aa:d3:c6:3e:57:17:8d:ec:ff:07:f2:e0:30:7d:99:5a:9b:89:
0d:46:1a:d9:27:e9:91:78:92:12:1f:dd:9f:f4:b5:bf:5b:b9:
98:89:29:55:8b:57:77:b6:3e:3b:95:8e:f1:09:24:63:92:1a:
1e:90:63:21:40:d8:c9:7e:b4:99:a2:25:58:ad:93:85:fc:bc:
45:c4:e7:15:0a:4b:6f:22:9a:ce:40:41:fc:85:85:d7:cc:67:
e3:9e:b4:ce:d4:96:71:00:98:a5:20:43:10:d6:dc:05:d3:a4:
74:f7:4f:f1:d0:88:cb:0d:70:20:13:15:29:38:2f:01:93:78:
ee:ed:29:34:c0:3f:48:cd:7f:a3:77:72:32:89:fd:d3:eb:6a:
0b:90:1b:6d:b6:f2:88:43:d5:00:0f:72:79:bf:48:4e:c4:56:
67:30:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:47 2026 by rpki-client