Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: el8ZxWSAMe5nnll6g0Ur6B2ppW0A0mqQLctNfmHWt/w=
Subject key identifier: 1C:54:C2:81:C7:E2:55:33:6C:FF:58:CE:43:53:CB:D3:FD:55:37:9B
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019DA3787B255A4C8A77F5FF3FE25E72EC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 13C6
Signing time: Sun 19 Apr 2026 02:01:15 +0000
Manifest this update: Sun 19 Apr 2026 02:01:15 +0000
Manifest next update: Mon 20 Apr 2026 02:01:15 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: A1B3hIa2ItNpAYhq3Fc8IVSrYyXJyO029zx+usRZDhg=)
2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:7b:25:5a:4c:8a:77:f5:ff:3f:e2:5e:72:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Apr 19 02:01:15 2026 GMT
Not After : Apr 20 02:01:15 2026 GMT
Subject: CN=1c54c281c7e255336cff58ce4353cbd3fd55379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:c4:ff:6d:a3:a1:53:11:b2:35:f1:c1:0c:
d8:55:35:8d:c0:f4:98:b8:61:33:70:8a:3a:0a:48:
c5:9c:89:22:cb:66:86:46:5d:50:d3:2f:de:c9:6a:
a5:92:d8:e2:a8:ae:ff:0c:b4:77:2f:ea:c1:98:d4:
e6:af:d6:77:92:de:14:07:9c:63:f6:74:64:03:c5:
aa:8a:fb:b9:8c:7f:cc:04:c9:50:60:2a:90:40:73:
91:46:93:7d:4a:06:40:a1:55:02:e7:9d:90:6e:50:
14:50:71:0a:d9:52:6b:01:18:ab:aa:c8:58:9a:a7:
5b:bd:f0:8e:75:68:87:43:3a:1d:2d:b4:01:07:21:
20:46:0d:d2:3a:65:ad:6c:39:18:f9:bf:27:a4:96:
ae:fe:7a:21:fc:25:e0:ce:da:a5:16:63:9c:6f:32:
c3:3a:b8:a8:b1:97:ba:88:fb:2c:90:9e:81:71:e0:
cc:7d:16:14:0b:8d:b9:fb:86:d1:d6:98:f2:1b:91:
82:66:51:cb:1f:c0:52:d2:be:72:2b:93:f1:a5:f5:
f0:de:a3:0a:a2:27:76:94:5f:2c:6f:4a:a2:e9:95:
76:6b:1a:d0:4b:29:df:61:ad:8a:d4:85:ef:bb:18:
b1:12:ff:40:12:d6:f6:40:80:13:ec:55:08:a7:56:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:C2:81:C7:E2:55:33:6C:FF:58:CE:43:53:CB:D3:FD:55:37:9B
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:e8:63:30:2b:50:de:dd:0e:36:f3:63:d8:5e:5a:33:68:
d3:f2:c0:c2:94:bd:1d:6c:dd:08:6e:43:31:e3:d6:7e:a9:b3:
1f:24:de:a0:6c:ce:86:8d:0b:88:83:b2:6e:33:96:f5:17:28:
e1:1a:aa:d2:ed:9c:ac:2c:2b:cf:04:38:cb:2b:8a:68:54:af:
fa:17:5f:1d:4e:5b:eb:eb:a5:bf:c9:5b:87:10:93:b3:6e:71:
d3:9f:47:66:14:94:50:79:d8:42:c0:55:c5:4a:15:0e:76:6d:
23:c3:0e:fd:a9:9d:2c:44:8f:2b:3b:35:a6:df:f9:36:f4:e2:
02:4d:fc:af:7b:cc:f3:79:db:fa:fe:4a:8c:15:30:0d:41:47:
21:86:a0:1c:2e:69:0a:17:c3:75:63:a9:61:b7:34:a8:21:28:
c4:c3:4f:c4:aa:f1:80:32:79:a1:e7:e2:e0:e2:ce:5f:6c:db:
7e:f3:ab:17:78:bb:31:be:ca:cd:3b:1d:c0:c8:9a:87:06:ab:
4b:dd:5a:3b:f9:3a:75:ed:6d:aa:76:69:1e:58:b7:6f:e5:61:
13:e1:26:dd:c8:88:b7:61:1c:c2:b4:a6:d1:9a:80:7e:a7:7f:
25:26:39:6d:8e:ef:da:d0:fd:8f:9d:3d:47:ed:63:ca:ce:43:
e4:44:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:39 2026 by rpki-client