Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: VGKGUkTvSoburRJHHfLN+cKHSxE5a+eWyvVIQFNTAgg=
Subject key identifier: 58:B2:E0:06:5B:D9:5A:1E:E4:D4:2E:5B:0C:39:D9:4E:83:86:26:EB
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 019DCED05E157EA9299C89169045856FAF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 0560
Signing time: Mon 27 Apr 2026 12:00:55 +0000
Manifest this update: Mon 27 Apr 2026 12:00:55 +0000
Manifest next update: Tue 28 Apr 2026 12:00:55 +0000
Files and hashes: 1: Aa2IxorzT-f0qos6APae9lJPvis.roa (hash: 2snsQOp64NXZRDIW60ynJJ/L0sWlwOoUe2QkF5SYR1Y=)
2: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: CGAlN7pSenRaMuVY8Of8Zyns16SSpbnuownwUoDY8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:5e:15:7e:a9:29:9c:89:16:90:45:85:6f:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Apr 27 12:00:55 2026 GMT
Not After : Apr 28 12:00:55 2026 GMT
Subject: CN=58b2e0065bd95a1ee4d42e5b0c39d94e838626eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:8a:22:e8:da:55:0b:5c:e7:c8:3d:aa:ac:
23:50:64:6a:4e:33:d8:4e:06:1f:80:ab:51:67:37:
25:1c:0b:b5:05:58:e2:5c:e6:18:f2:d8:1c:2b:1c:
24:b1:4e:d4:2d:21:ed:b4:14:50:d2:cb:16:31:21:
29:cd:77:65:d6:f1:44:3f:ad:45:65:08:04:f5:06:
50:92:a2:66:d5:5d:46:bd:67:63:a5:73:67:31:f5:
c5:99:7a:e0:79:6a:8d:71:2a:0c:cc:cc:e1:22:14:
98:7a:b8:f8:b0:d3:5c:8f:e9:27:dc:68:f6:de:d9:
9d:b7:e6:7d:7e:e8:11:18:1f:40:9d:74:39:29:39:
24:e7:3b:de:1b:b6:d6:0e:48:e4:0f:d0:cc:cb:30:
9d:f3:d6:78:05:a5:e1:e6:a4:8c:30:37:10:df:f3:
63:d7:bf:b5:21:d9:6a:ea:e6:ca:ae:22:2b:a4:2e:
c0:a9:e2:a4:5a:79:60:e5:16:88:70:83:6c:15:16:
4e:60:ea:72:76:f1:59:f7:31:da:87:be:1b:1a:16:
ca:ac:60:21:d8:a6:1b:1a:29:73:5d:7e:bc:02:31:
c6:16:a2:39:90:d8:4f:56:15:52:29:18:6e:ec:28:
b1:2f:99:88:f7:6e:37:63:b8:f9:b0:0f:67:40:74:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:E0:06:5B:D9:5A:1E:E4:D4:2E:5B:0C:39:D9:4E:83:86:26:EB
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:4d:72:02:5a:7a:48:a3:cc:ec:1a:20:2d:43:2a:e0:3b:
36:51:56:89:0f:7e:9c:8d:43:18:39:b0:be:7b:2a:19:7e:a3:
38:13:d0:4d:29:cf:c1:da:e1:45:7c:87:85:81:04:e5:eb:20:
c8:69:aa:89:64:ad:ad:cb:bb:1d:49:a8:a6:80:a0:25:77:12:
81:28:ce:a0:27:ce:45:80:6b:b6:14:56:6a:aa:57:51:a8:d7:
86:2a:0d:a3:00:9d:74:4f:4e:f8:ee:72:2e:33:6d:23:bd:93:
f0:c5:95:51:81:05:27:2a:53:d1:56:e8:e6:2c:36:ba:e0:24:
5b:b3:d3:a0:d8:f5:20:4c:83:9c:60:39:7f:1f:41:11:0b:d3:
b8:26:57:fb:02:cc:86:ae:a6:9e:79:59:30:44:45:45:8e:9a:
f4:ee:e2:10:8c:a9:48:f3:4c:21:8f:f4:8b:7b:71:c0:08:11:
68:97:11:30:af:e1:c2:de:96:bc:4d:4e:61:4f:54:e9:3e:01:
87:32:b3:44:9c:7a:76:4d:da:58:ac:fe:cf:ee:ab:0f:d0:14:
13:3a:a3:b8:4e:52:62:ed:d8:f4:f5:f9:29:c1:9c:32:1e:57:
9a:04:7c:01:1d:0b:7e:99:05:3d:08:7a:f3:45:2c:7e:a7:45:
e1:3f:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:28:44 2026 by rpki-client