Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 2mD+C7EqXPdcoJsZZgglDR5ky22ekfydLbfR9bF6UCg=
Subject key identifier: 5A:88:63:71:E8:E9:06:F7:73:3A:66:FC:4A:97:BD:AA:2A:0C:DB:FC
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019FAABE63989190EE9D2DEDDFFCDF35B800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 10ED
Signing time: Tue 28 Jul 2026 22:00:31 +0000
Manifest this update: Tue 28 Jul 2026 22:00:31 +0000
Manifest next update: Wed 29 Jul 2026 22:00:31 +0000
Files and hashes: 1: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: uAZOswgIKqj5nhFODxuQFd8zbn+XbNassqY1Uf+mJ9Y=)
2: ThiHT5apfMHMSHMInmImSZUGjR0.roa (hash: pSGwnVfW/JASmT9OnBfEdMWmCKWVHJ/CmsPPvgnLJnw=)
3: dP8RO85jGLXWOsM3Wc_CpE15V2Q.roa (hash: xZreo543vFbtJtYEXD/ApAlLL4nbHMdX8J+etdd2OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:63:98:91:90:ee:9d:2d:ed:df:fc:df:35:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jul 28 22:00:31 2026 GMT
Not After : Jul 29 22:00:31 2026 GMT
Subject: CN=5a886371e8e906f7733a66fc4a97bdaa2a0cdbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:bc:4b:9b:ae:8d:eb:72:4b:01:f8:97:a0:
8d:d7:7d:bf:d5:3e:78:b5:6d:48:5e:15:fd:2f:71:
7a:85:3e:5c:12:be:14:25:1c:83:fd:84:b5:9c:74:
f7:51:38:24:fc:c1:a5:ac:a7:78:be:5f:f5:4b:13:
ed:9e:a3:6f:36:8b:f4:a3:05:0e:6c:d4:33:8c:10:
ce:39:81:e7:d1:46:b5:1d:04:0c:c9:c0:64:f8:16:
25:ef:42:36:5e:ce:f6:d1:57:d7:b5:81:68:35:ac:
64:72:d0:71:5e:fa:3c:86:04:99:17:ce:53:ca:ee:
d1:54:c5:a7:8a:39:46:cd:fc:3a:f5:f1:ee:4e:2a:
3c:b6:3d:32:bb:8b:e0:9c:d4:d1:0e:2e:b7:9c:e7:
7f:8c:11:34:66:75:85:fb:47:cd:f3:c7:26:14:5d:
77:06:a3:50:0d:17:99:00:5f:8b:00:70:e8:21:ea:
f3:85:df:16:75:e0:fc:52:69:98:b9:d3:e3:1d:81:
54:ee:fc:3e:bc:04:5e:a4:10:ed:30:9e:3a:81:b6:
45:1f:46:ce:70:44:ef:6e:32:6c:fd:4d:85:ec:30:
44:4e:8f:07:41:d7:59:5d:a8:41:5f:32:60:bd:4b:
1a:52:8a:74:54:2d:7c:6d:d9:ac:03:f1:a2:e5:06:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:63:71:E8:E9:06:F7:73:3A:66:FC:4A:97:BD:AA:2A:0C:DB:FC
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b6:a2:c8:c0:f1:4b:a1:d4:7b:cd:58:27:d5:e8:40:a2:80:
ba:87:44:71:70:06:38:6d:57:80:ac:8e:a2:98:66:44:5d:28:
ce:08:78:b1:7d:a0:7e:5b:31:9b:20:91:e9:ea:fe:8e:a2:4c:
bb:0b:dd:17:f5:07:57:48:35:c8:14:00:44:55:9a:cd:ca:8e:
d7:63:24:98:98:26:07:6a:c4:b1:f9:66:46:a2:ef:69:e7:5f:
b9:cc:27:c5:ff:c9:fb:2a:0d:8e:53:13:a2:b1:d5:f2:e4:bc:
b2:d0:98:ed:b2:5a:c7:86:d3:03:6f:e2:f4:47:78:1c:e6:cd:
66:fa:68:3b:c0:7b:38:61:ec:b8:0b:78:d3:b8:43:b0:df:0b:
c9:d5:5d:56:95:28:b3:ff:38:6c:f3:ce:fa:05:db:9a:ba:c2:
b9:4c:d4:0c:cf:cc:48:8a:be:a9:8a:7c:a0:02:bc:47:ca:ce:
a6:56:40:87:25:0b:0f:4a:97:66:ef:72:95:07:27:14:6b:ea:
09:de:c6:c8:57:c9:08:11:f1:8a:e2:c9:62:4c:e7:3a:44:b3:
b2:64:a6:c6:35:59:d8:a0:ac:a4:b4:b2:a1:21:b8:a5:02:7f:
26:78:24:ea:37:54:2e:1e:49:4e:fa:2c:8a:13:a0:e7:c2:f6:
f0:ab:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:22 2026 by rpki-client