Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: KCy9e+gnGK2I1dY3vUPTljeW5UvkVKBgFd6iO3qo/wQ=
Subject key identifier: 58:A3:9C:DF:77:34:FF:64:EA:4D:C5:BA:14:CF:2A:55:78:66:A3:E1
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019FA14D960BF55FE65C26A4EDB95B923A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0FF9
Signing time: Mon 27 Jul 2026 02:00:44 +0000
Manifest this update: Mon 27 Jul 2026 02:00:44 +0000
Manifest next update: Tue 28 Jul 2026 02:00:44 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: GuR/tFVcfGduoBiARFx9rU9dtMGHIff+OX9rRj5FbKc=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:96:0b:f5:5f:e6:5c:26:a4:ed:b9:5b:92:3a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jul 27 02:00:44 2026 GMT
Not After : Jul 28 02:00:44 2026 GMT
Subject: CN=58a39cdf7734ff64ea4dc5ba14cf2a557866a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:81:d2:7e:c1:21:e6:bb:f6:0a:f0:3c:25:
22:67:dd:03:3c:3a:50:f7:cb:65:69:b9:07:99:2c:
39:21:4a:35:f0:36:45:34:b3:8b:da:d3:db:ef:2e:
b2:e2:5c:3b:84:6d:16:26:4b:ed:b4:71:82:49:7a:
93:cf:33:cd:74:c6:75:0f:35:6f:b4:aa:dc:f7:81:
7e:4d:56:a2:a0:78:65:f5:fa:ab:ca:12:a9:ec:00:
70:8f:28:e2:8a:6f:cf:07:6e:93:52:05:2b:84:11:
3f:fa:53:6d:35:44:cb:3f:4b:c0:5b:fb:7e:33:04:
12:4a:bb:ba:b3:80:6e:85:d2:50:9f:73:bd:b9:1a:
b0:4d:f2:ea:d4:60:83:7b:72:d7:ab:1d:ec:a4:83:
4e:51:bf:7b:5c:3a:61:e3:43:54:e3:0f:8f:02:50:
15:c7:5f:26:78:89:04:9f:d6:e5:07:00:5e:3b:9d:
85:22:82:3b:aa:e1:d8:bd:f0:c1:d9:36:03:c9:01:
d4:0a:e6:2a:46:16:45:ef:61:f0:ec:d8:b1:7e:1b:
72:86:f3:f4:15:34:87:ea:4a:05:a2:00:92:60:70:
18:43:6d:2e:6b:56:38:4f:5a:99:13:4d:59:10:75:
bc:c7:c9:da:81:e3:80:c0:b3:53:e8:83:e9:ac:66:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:9C:DF:77:34:FF:64:EA:4D:C5:BA:14:CF:2A:55:78:66:A3:E1
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:25:aa:c3:1b:96:74:ae:d8:6d:d4:58:f7:ec:0e:b6:fe:
05:73:5b:a1:ab:a5:ca:18:38:f7:15:18:dc:12:bd:4e:64:64:
a2:82:49:ee:d1:e9:17:f1:e4:b1:66:db:52:43:f7:83:fe:29:
36:69:94:21:55:72:38:fa:16:05:96:59:5d:fd:48:02:43:f5:
64:e8:02:6d:01:84:27:d1:2b:9a:d0:a5:23:a6:e8:d8:86:10:
f1:51:4a:9d:ea:49:98:d7:d5:1c:a5:01:7b:2b:8c:2c:17:0b:
e4:47:67:fc:72:9c:7b:05:ff:74:fc:99:e5:4a:8e:49:c1:7c:
29:39:6e:01:21:6f:21:6e:77:d0:89:49:41:fd:ab:ef:55:ca:
ff:19:17:57:2b:0b:31:d7:ee:a7:2e:d2:bb:e1:5c:59:f0:17:
dd:95:47:2a:9c:9a:4e:5c:bc:45:a5:b4:e7:af:05:a1:ca:24:
85:13:e6:59:70:e0:2e:98:4e:68:2e:d5:00:41:6a:f8:ab:16:
32:e9:8b:be:fe:a7:ff:02:08:c4:b3:51:d2:bb:d3:12:7c:08:
a4:b7:86:93:37:9a:20:68:29:14:0b:41:d7:28:04:5d:14:fd:
ce:40:71:b1:cf:d2:b5:44:2a:2a:6d:42:23:f2:d4:bf:22:3e:
8a:d3:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:33:27 2026 by rpki-client