Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: AMQ3+4HMGsxu//tMsXCYZZ9A28BT4t6h1E+ov5IFNDc=
Subject key identifier: CA:2C:AE:E7:C8:DB:59:8D:53:38:2C:8F:F1:65:BF:1E:65:CB:10:71
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019EC111F0475D2FDE8B4CFD2EA448D1B16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 1074
Signing time: Sat 13 Jun 2026 13:00:38 +0000
Manifest this update: Sat 13 Jun 2026 13:00:38 +0000
Manifest next update: Sun 14 Jun 2026 13:00:38 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: IekE3VaLlodqOkC6QaXhqKYRM2U4zK6N2hhJJHU5UkE=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:f0:47:5d:2f:de:8b:4c:fd:2e:a4:48:d1:b1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jun 13 13:00:38 2026 GMT
Not After : Jun 14 13:00:38 2026 GMT
Subject: CN=ca2caee7c8db598d53382c8ff165bf1e65cb1071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:40:d5:84:d4:08:7e:ef:71:b9:6f:95:85:
d0:31:d0:50:17:69:35:4c:49:4d:48:9b:bb:05:7b:
ad:af:3d:b3:ff:95:71:dc:e5:67:1f:fa:92:79:c4:
b5:ce:4e:32:ed:87:e3:1e:bf:19:b0:2a:51:4e:5a:
f6:8b:a7:80:83:6c:00:e4:5d:1a:c1:83:d7:00:e9:
e4:47:38:1f:a5:55:f7:ec:40:bf:89:92:3b:46:e5:
fe:6f:46:b6:70:b8:7c:d1:9f:35:7f:13:c7:6a:21:
f8:b9:93:e2:b5:a0:08:aa:21:16:b4:84:ce:ad:6b:
62:3d:89:1e:d7:cd:96:95:f5:5c:64:d7:cb:58:89:
af:2c:f5:f9:08:9e:df:17:6f:75:00:ce:0c:ad:28:
74:64:b2:46:c7:68:17:bb:d7:39:31:a1:70:b4:f5:
8f:5d:49:5c:e9:05:14:2f:f6:e2:68:8c:53:8e:0d:
0e:15:f1:30:d9:e9:1d:6d:57:00:3c:6b:a8:63:6e:
5d:9f:37:37:40:29:94:78:30:45:90:0e:00:e9:0e:
94:03:bf:60:c2:57:1e:ad:aa:06:13:d8:3a:95:cc:
4b:6e:89:02:f8:5f:e0:04:91:ab:df:c4:13:ac:ff:
9e:c1:c5:64:15:40:f8:1a:85:e6:40:0d:78:44:6f:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:AE:E7:C8:DB:59:8D:53:38:2C:8F:F1:65:BF:1E:65:CB:10:71
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:26:29:80:40:6a:45:a8:70:43:ab:aa:97:41:94:71:75:
3f:bf:b7:32:2a:de:e9:fe:65:1b:70:8f:08:2c:de:e7:e4:33:
5e:cb:85:4c:64:9e:c7:76:22:88:ef:3e:b6:07:90:d7:ca:1c:
3d:39:eb:5f:35:65:7d:b1:c1:e4:48:bf:f8:f5:88:8b:ec:21:
8f:2f:a8:01:45:60:e1:5c:8f:66:f6:b4:84:85:7c:44:ba:8d:
e7:fa:bb:50:5d:81:3f:e4:bd:86:77:99:d9:fa:ca:30:a4:fa:
f4:f7:64:33:71:cc:8d:1e:9f:8d:55:6e:ee:0b:fd:42:af:5f:
1b:8e:a5:e0:62:11:4f:46:90:c5:af:99:65:ea:4b:b9:aa:6c:
4c:f4:0e:0a:a6:2f:3a:5f:9c:79:5e:44:cf:08:28:c1:1d:34:
10:33:d6:9c:02:e8:5e:47:b9:bb:d0:63:de:46:78:af:a8:a8:
77:54:ef:91:7b:31:38:0a:2a:27:30:c9:f3:6f:ef:dc:6b:f8:
f0:6f:41:e7:8c:f0:c4:5f:47:30:b1:f7:0b:ca:77:ce:4a:8e:
92:27:1d:87:ac:76:52:03:fb:10:59:95:1d:d4:30:5b:cd:8e:
80:2f:59:18:fb:91:a1:60:88:b0:9b:f5:17:81:0c:da:8b:b7:
75:6d:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:42 2026 by rpki-client