Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: Qha/EL2/xSryBKvhi1U/EJN2dz3y7qsAowX68RNaRmo=
Subject key identifier: 8E:01:96:ED:9F:0E:1B:9C:AC:37:CD:94:9C:80:52:ED:DD:B5:F0:89
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019CAA218343F4166093472F8B37B74D87E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0F5F
Signing time: Sun 01 Mar 2026 16:00:48 +0000
Manifest this update: Sun 01 Mar 2026 16:00:48 +0000
Manifest next update: Mon 02 Mar 2026 16:00:48 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: sQHWrULAsUp4dB5p4YhnkgxPk2jKcsUfp6J5uHzuBz0=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:83:43:f4:16:60:93:47:2f:8b:37:b7:4d:87:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Mar 1 16:00:48 2026 GMT
Not After : Mar 2 16:00:48 2026 GMT
Subject: CN=8e0196ed9f0e1b9cac37cd949c8052edddb5f089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:eb:39:7c:01:54:05:e2:3a:5e:a4:1a:d9:
c6:e4:7a:e3:3a:88:c1:67:5a:95:dd:2e:e0:09:e7:
39:04:7d:46:d3:05:40:b1:1e:c1:7a:ec:5d:90:09:
67:d6:72:b4:75:86:dd:74:09:bd:d3:1c:1b:c2:b0:
ce:62:3a:61:3d:61:7e:a6:69:14:20:e7:a5:5c:23:
47:aa:24:4c:f2:29:bb:28:a6:aa:ae:89:9f:a8:3e:
03:5d:9b:ca:cc:99:41:95:af:77:92:a9:03:1e:f9:
63:9b:80:62:0c:82:cf:7f:8a:39:92:65:08:02:44:
a3:b6:78:80:2f:de:c4:a6:fd:56:32:e6:5b:b9:a8:
35:64:78:e4:e5:83:3a:f0:78:f0:cb:cc:31:7b:6d:
16:15:30:12:b2:6e:f5:e1:55:67:e6:60:3b:63:05:
e3:8d:63:2c:00:b5:8c:0d:ed:66:11:77:53:5d:19:
a7:8f:e1:92:5a:06:e1:bf:e5:69:1a:0c:76:2e:cf:
eb:e2:f5:02:22:31:a0:3d:dc:00:5a:ed:a8:91:44:
58:0d:9b:db:af:1d:4e:e6:e1:6d:06:b3:75:18:74:
a4:36:7d:74:7a:a4:75:f6:e9:3b:d1:17:1e:03:79:
ea:5c:09:27:7b:b8:5a:02:eb:0e:b7:ef:56:95:52:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:96:ED:9F:0E:1B:9C:AC:37:CD:94:9C:80:52:ED:DD:B5:F0:89
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:3f:3f:43:73:d2:48:5d:d9:d8:be:3a:b5:4a:78:7d:16:
ef:e7:30:11:74:27:bd:06:00:6d:cc:f4:55:f1:5d:6d:9f:dc:
05:c8:86:e7:fb:c4:9f:b7:be:7c:b9:7b:64:e5:1f:a6:68:e9:
98:0c:b3:ec:b2:9c:98:5e:27:8e:f9:9d:c6:e1:9e:42:18:e8:
35:cc:eb:42:17:f7:92:cd:40:6f:88:89:d6:18:25:36:83:9f:
d4:a2:de:8e:05:c9:6c:d5:07:62:3b:14:47:cc:c9:ef:bf:4e:
18:63:c2:2f:60:fb:20:95:99:27:8f:91:a0:b8:8e:39:2e:9f:
22:fc:ce:da:1a:94:b7:e4:fc:20:cd:00:2b:59:ac:06:29:f8:
8b:af:65:b9:4f:24:ff:3b:ed:1a:2c:30:00:e6:49:df:f3:f3:
fc:b1:96:c1:b0:68:0b:d5:88:4c:52:ef:44:5b:f1:65:a3:1b:
82:6c:69:9e:a3:f6:9e:2d:10:62:e7:0d:26:1b:3e:95:47:49:
64:35:43:1d:a0:78:cb:93:0d:7c:e6:01:89:3f:50:16:14:ed:
18:42:04:22:37:c6:16:26:a5:c0:cf:f8:6b:1b:c8:24:62:98:
c7:68:cd:23:25:d9:89:ea:9d:9b:3b:e3:0b:ff:05:4f:09:6e:
3c:7d:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:54 2026 by rpki-client