Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: zXi9Hf27bz//Wt7a3vXdSD/hnk/hQ+km3j6EsJpP3q8=
Subject key identifier: 21:9D:78:C3:70:A3:B9:3A:49:BE:BE:E2:D4:83:8E:71:3D:4B:24:55
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01A0C4B2A26054CC25C7AFE66B69D34764AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 117F
Signing time: Mon 21 Sep 2026 16:00:36 +0000
Manifest this update: Mon 21 Sep 2026 16:00:36 +0000
Manifest next update: Tue 22 Sep 2026 16:00:36 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: SiFgCW7lECPT1A96QFfpGZkm9EyJh+NcBpz6apPvMjA=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:a2:60:54:cc:25:c7:af:e6:6b:69:d3:47:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Sep 21 16:00:36 2026 GMT
Not After : Sep 22 16:00:36 2026 GMT
Subject: CN=219d78c370a3b93a49bebee2d4838e713d4b2455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:81:1a:d4:18:2b:03:d9:c2:d5:90:8f:2e:
78:40:8e:70:9f:4f:5a:e9:7d:da:9d:01:9d:e3:88:
d4:80:13:d6:07:14:b3:7d:88:e0:dc:d1:79:ec:0b:
e8:14:24:aa:9c:a6:2e:47:fe:05:16:be:eb:fb:dd:
8c:79:ff:c1:f2:db:65:cb:8e:05:1a:b2:56:f8:50:
57:e9:9d:24:d8:da:80:ad:d0:57:b4:bd:83:6a:b2:
cc:b7:c3:f5:d9:63:66:ef:1b:f3:d7:b6:ac:52:cc:
c0:41:0e:36:99:29:f8:bf:b7:63:1d:ea:21:33:40:
ed:6c:cf:d0:a7:cd:87:28:4a:42:a6:d9:2d:cc:4f:
b0:d5:41:31:56:01:1d:30:9a:d8:71:e8:29:dd:e4:
6f:b9:f6:80:d3:3b:db:50:ea:9f:0a:a0:4b:c5:fb:
25:ed:89:0c:a6:aa:bf:ef:c4:94:d4:93:6c:0b:b2:
c8:df:4e:47:d8:c7:cd:de:57:92:8d:52:64:83:61:
06:47:01:9b:7b:79:94:03:7c:b2:64:04:ea:22:3a:
33:36:78:f8:3b:13:78:e7:ef:7e:59:b5:42:cb:cc:
91:6f:d5:a7:f8:e3:59:4e:6f:94:3d:7e:93:53:88:
31:4c:24:57:9b:13:f7:53:af:a0:f6:2e:c5:3c:79:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:78:C3:70:A3:B9:3A:49:BE:BE:E2:D4:83:8E:71:3D:4B:24:55
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:ad:1d:61:f1:f7:41:09:ac:7a:a5:cd:e6:2b:51:c0:e7:
1d:93:61:b9:f4:f9:61:69:fd:b7:57:09:de:e0:d6:eb:cb:9b:
89:76:c5:a8:45:4a:10:c5:9e:49:11:18:bf:30:b8:38:06:ac:
62:7b:a6:84:9b:30:d1:e9:d0:f1:a5:6e:8e:b0:58:d6:5a:00:
e1:bd:35:c7:ab:f1:70:ae:f9:e3:e2:28:47:ef:f1:79:a3:8e:
99:3e:31:2f:e2:fc:ba:a4:f7:7b:53:1c:69:26:ad:b0:c2:3b:
f7:0a:10:42:24:67:3a:0e:d8:05:60:aa:fb:63:65:7f:a7:bb:
0a:6c:de:60:79:8a:c2:c2:21:89:87:fa:56:eb:3c:0e:1d:70:
b7:ce:48:7a:61:bb:6a:18:3b:6d:f8:d3:c3:9e:d5:6e:12:09:
7f:d7:15:c4:03:e2:72:e9:4a:34:de:f3:d8:e7:a6:1b:b9:0f:
63:9b:05:87:c3:fe:8c:2f:ff:db:99:6e:f1:29:8f:7a:da:4a:
dd:a0:a6:33:11:29:8a:b2:0a:39:0c:1e:ad:0e:92:97:98:ab:
f4:fe:8e:f7:cb:23:74:8d:65:a6:51:0a:94:80:88:21:cf:87:
2f:59:25:66:6b:64:a9:c9:9a:5f:f7:ff:b3:10:b3:39:4d:db:
46:d7:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:01 2026 by rpki-client