Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: ra95/K8q0WUpjcOEJVhirQgpM9ImmP6tDh2X76xdL9s=
Subject key identifier: 68:D8:23:BA:D5:3A:62:C4:99:81:90:2D:CA:38:D2:8E:C8:62:ED:32
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019CE44802D9F0819FD8AB89705891F9D1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0E8E
Signing time: Thu 12 Mar 2026 23:00:50 +0000
Manifest this update: Thu 12 Mar 2026 23:00:50 +0000
Manifest next update: Fri 13 Mar 2026 23:00:50 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: Eyn/p9DL4Xi/x1zBhHYWrqilN97HN9CQNbZTfy3e8+I=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:02:d9:f0:81:9f:d8:ab:89:70:58:91:f9:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Mar 12 23:00:50 2026 GMT
Not After : Mar 13 23:00:50 2026 GMT
Subject: CN=68d823bad53a62c49981902dca38d28ec862ed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:fc:ae:a1:a0:c0:7c:2a:a3:88:33:c5:73:
22:b7:ff:12:49:b7:0f:7c:60:da:15:b7:92:f8:b6:
2a:fa:3d:ea:53:d1:7e:2b:82:22:40:b6:6d:d7:db:
d2:d0:97:f1:e6:19:14:1c:a5:9d:08:11:d2:dd:e5:
49:6e:b9:1d:3b:7f:81:36:c6:02:48:bd:b7:1c:9e:
b7:ea:da:d7:e8:da:9d:cb:3c:14:e6:d0:3a:9c:73:
60:0b:90:69:17:1e:17:c6:e1:bc:21:01:19:01:8e:
5e:35:7a:fe:86:cc:17:0c:3e:c2:2c:f5:ac:5a:f1:
7f:f1:8d:07:cf:d1:aa:c5:05:0a:e6:ad:88:31:98:
17:54:21:2d:5f:8f:83:a7:f7:c2:6f:ce:b3:20:35:
d9:3d:cd:c2:cb:39:91:3e:6a:bb:11:3d:f7:e5:f8:
67:ee:eb:e0:61:d2:f9:0a:5a:38:c2:06:7a:46:79:
d6:c1:2e:66:14:65:dd:03:8e:fe:58:86:c9:fa:71:
88:ef:4f:fa:f3:1e:e4:0b:01:64:21:ca:c8:87:0e:
20:8f:8a:35:80:88:21:77:ce:32:a5:64:fb:5d:6f:
ba:36:a3:70:52:4b:d3:49:07:69:00:45:f3:c4:8a:
f7:b3:c4:b7:b4:8d:71:a4:1a:0c:db:54:7a:ce:6f:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:23:BA:D5:3A:62:C4:99:81:90:2D:CA:38:D2:8E:C8:62:ED:32
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0f:8e:c4:da:5d:24:d6:16:d0:ac:d5:df:55:ad:16:5b:f5:
e0:5d:50:f4:94:27:cb:da:2d:bd:bc:98:1e:4a:3a:c6:d7:eb:
55:16:f8:35:ef:7a:94:f7:59:10:5e:ef:17:12:07:fe:5a:4c:
59:d5:49:5a:a0:81:10:4a:ef:85:7d:c1:14:f7:c1:83:8b:39:
74:f0:b9:37:13:0e:2c:da:f8:ca:86:25:fb:c0:f6:55:d1:26:
4b:07:1e:7f:bf:26:e6:b3:16:66:db:fe:09:1b:58:31:dc:ca:
de:01:a8:7c:e2:74:30:dc:b9:a4:3c:6c:c3:ba:ff:de:28:36:
07:d3:d8:5a:d5:85:37:3c:18:26:ba:e6:b1:3e:58:f8:6c:27:
77:71:22:fa:a3:0e:59:5e:1b:bf:19:31:a1:87:9b:7f:48:c2:
e0:71:a9:72:76:8b:f9:10:9d:7e:b6:8e:58:9f:cb:e6:ff:92:
a4:f4:39:25:b1:9a:c8:5f:db:6d:ff:77:48:4a:99:8b:cb:65:
2c:ec:0f:89:59:f0:24:17:d5:f7:56:63:51:62:ab:95:3c:18:
f1:b3:7e:e8:05:60:33:90:8e:77:31:42:a7:95:1b:72:63:7f:
38:67:97:11:13:60:d6:cc:d6:cf:78:11:64:43:25:32:9f:dd:
03:af:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:24:23 2026 by rpki-client