Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: usKHSSWk2jTN6Km+ere7jeiDJ3lDsuMpj10geMl8RLE=
Subject key identifier: 35:6C:D4:D6:8F:D0:80:4F:26:AE:E7:35:73:49:66:22:98:45:E9:0C
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019D9999AE13C54CFD9D9E85864B879F40FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0FDB
Signing time: Fri 17 Apr 2026 04:01:18 +0000
Manifest this update: Fri 17 Apr 2026 04:01:18 +0000
Manifest next update: Sat 18 Apr 2026 04:01:18 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: bKx2SCaN+fbmV2HjD51Yq8pBDVh9fD20+LuP4hgfyeU=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:ae:13:c5:4c:fd:9d:9e:85:86:4b:87:9f:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Apr 17 04:01:18 2026 GMT
Not After : Apr 18 04:01:18 2026 GMT
Subject: CN=356cd4d68fd0804f26aee735734966229845e90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:4d:71:bc:18:29:88:11:ec:ef:74:d6:db:
74:3d:04:c6:16:08:0f:2e:77:a9:1f:f6:6d:67:aa:
57:f1:0e:98:28:45:52:e1:bf:1c:51:ce:b5:89:2d:
72:d5:46:79:64:60:bf:90:d1:3d:fe:f5:1f:44:59:
2f:9f:6d:60:26:27:8f:f6:b0:0f:b1:3a:bf:9e:f9:
27:c6:07:38:01:d8:66:61:9a:aa:54:14:05:1e:ba:
10:ca:49:c8:af:75:a0:43:b8:3c:05:5d:aa:a0:77:
5a:ae:30:99:d4:a0:64:ea:5f:e1:c6:26:ba:d5:9e:
da:58:ce:0f:40:31:81:8d:de:29:03:f4:64:39:c0:
94:fd:c4:7d:2a:67:05:d8:e3:34:66:22:45:8d:f5:
10:26:57:f7:5a:fa:d1:f3:76:37:00:93:20:4e:91:
e1:50:cf:7e:b3:fc:53:80:e8:ef:0a:a2:42:4a:a6:
20:d4:b4:ae:6b:42:9d:8c:02:93:f2:50:8e:f9:a6:
6c:8f:4f:f5:ba:49:1b:f8:2c:36:24:ac:36:fb:39:
d1:ef:a6:c7:18:49:9f:3f:2f:1e:30:b4:56:8b:94:
98:14:7b:05:0b:69:a7:f7:2a:bb:24:15:00:c8:ab:
20:bf:34:f3:ec:0d:07:1a:e7:7c:90:52:e9:cf:29:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:D4:D6:8F:D0:80:4F:26:AE:E7:35:73:49:66:22:98:45:E9:0C
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:c3:ad:98:6a:49:02:8e:25:d5:0f:7c:b6:96:74:10:e1:
5f:8e:93:06:a6:7f:13:91:56:02:bd:50:b2:36:d0:e2:09:19:
76:c8:e4:02:3a:98:fb:94:1a:7e:e9:76:6b:2c:72:76:82:f4:
e3:75:bb:31:77:c1:96:28:e2:7a:8e:52:06:95:23:ee:c6:88:
53:31:04:51:d0:da:1a:44:13:4b:57:c5:61:cc:f5:82:58:27:
11:18:f8:19:eb:a1:18:e8:df:40:9c:64:50:65:e8:04:21:73:
a3:fb:ab:aa:40:0e:fc:05:02:29:c0:73:5c:cb:31:53:30:ae:
3e:9c:66:25:0c:d4:55:1d:91:f2:a3:15:41:6f:76:38:a2:b9:
a7:ff:6d:23:85:f6:fd:94:6f:1b:68:83:d8:a2:d8:4e:3e:64:
44:d4:58:72:c3:41:38:cd:f1:74:97:b1:eb:c6:a5:c0:c6:98:
26:55:4d:a6:d9:b3:cb:0d:19:13:5f:35:2d:79:f8:62:ea:c0:
86:e8:2a:66:bf:fb:ac:84:cb:dd:28:bb:66:8b:59:7d:5a:81:
a5:0a:ee:ad:6e:b9:55:f2:1b:cc:53:3f:cb:9d:08:ca:ae:c3:
1b:c6:62:49:e4:8e:9a:2c:9b:c8:9f:94:5c:f5:f3:e6:1c:34:
64:67:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:39 2026 by rpki-client