Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: WzY44niU/9jJ13OT7QvJ5nAYTCdh3pKECkZZELOHZVM=
Subject key identifier: 53:2D:85:89:96:CE:10:D7:4B:91:1E:7B:63:CA:24:45:45:E0:B0:21
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019D38D3C63C3799B9B40B3DEC73B5F57EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 1179
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: +0fuB9TK72S7QQvBrJJMlb3tMirhnKArqVw+Uf1lZxc=)
2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:3c:37:99:b9:b4:0b:3d:ec:73:b5:f5:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=532d858996ce10d74b911e7b63ca244545e0b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:3e:8f:86:75:07:64:16:a7:71:e5:83:10:
61:d2:f3:4a:18:13:0f:e3:ce:e1:70:3e:53:cd:e3:
51:37:d9:d5:dd:04:47:81:55:86:b7:6e:d2:ed:f2:
b7:89:01:a7:af:9b:bc:ab:9a:45:05:e1:69:80:b0:
98:41:6c:29:e6:bc:ec:9e:38:ab:f6:40:b4:12:51:
0d:64:ea:68:88:42:b6:60:af:14:ca:d4:29:5e:93:
9e:1a:9b:53:f0:26:94:dc:88:e8:ad:b7:de:71:09:
b8:83:14:f1:78:f0:d3:d5:80:58:3e:b4:0c:ae:d6:
05:c2:1e:28:3b:91:34:d2:39:ed:76:22:0b:ec:57:
f5:eb:48:db:1e:52:bc:52:f3:04:95:45:23:66:a8:
be:56:ea:5a:3b:9f:a6:d2:43:c1:0c:7a:d2:3c:06:
e3:e6:69:88:57:b1:75:f4:28:d2:87:a3:eb:2d:be:
40:c4:85:fa:a6:ba:89:a3:e4:05:dc:4d:c0:29:3e:
1a:c3:c7:7a:a8:63:14:e8:8a:ad:2f:27:eb:e1:b1:
51:e0:c5:c8:0a:f0:fd:c8:76:0f:a6:9d:7f:55:f6:
cd:f2:15:15:6a:7f:d9:40:cb:f8:28:e0:2f:de:b3:
6f:ab:31:2c:8b:fe:2c:ed:77:2f:a9:31:e3:74:20:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:85:89:96:CE:10:D7:4B:91:1E:7B:63:CA:24:45:45:E0:B0:21
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:93:b7:2a:b7:aa:10:70:75:05:74:2f:87:f9:15:53:44:36:
e2:0b:fb:d8:79:50:d6:92:a6:e8:ae:c2:6b:2d:96:d7:de:c3:
e1:ba:43:85:4f:92:db:05:d0:ff:54:65:88:d2:04:33:7f:01:
4b:c3:b6:5b:49:92:f9:fe:3a:88:78:43:55:fe:3a:3b:79:6d:
f9:67:dd:e0:49:aa:07:a3:45:58:3c:4e:30:1d:06:fa:4a:65:
48:b0:93:35:fc:b7:4f:db:e5:12:5a:73:4a:fc:89:b8:09:05:
bb:cc:80:1e:3f:fd:fe:c0:2f:3c:ac:18:61:36:e2:7e:66:1f:
23:d5:d5:2d:48:93:f5:b5:cf:c7:81:3e:e8:19:c7:fb:92:c4:
54:1f:12:da:5a:38:54:d6:97:f4:e7:d0:a6:8f:09:58:32:2e:
b5:e5:01:97:01:b7:a8:c3:e0:59:dd:b9:de:a8:a8:55:c8:38:
c2:46:03:2d:90:24:a3:e9:1f:fb:70:b3:65:3e:3a:ac:be:83:
e0:29:52:0b:93:29:1e:39:a2:fc:a9:75:ab:c1:fc:bd:9a:fc:
1f:c0:4e:bc:a7:ea:47:3d:e8:f2:42:7b:4e:2b:11:86:fc:e0:
36:f7:ef:22:91:21:61:b7:1a:95:94:3f:22:93:a1:29:79:66:
c6:cc:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:28 2026 by rpki-client