Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: fydsnq1x1zAGvioy/MDilwRvRFyGwQZzodEwMmqsGaA=
Subject key identifier: 11:1D:4E:92:67:C9:57:05:A1:41:05:ED:46:44:73:88:A4:38:F4:FD
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 019D3A1C5B422D44E765E06225E64A744A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:00:29 +0000
Manifest this update: Sun 29 Mar 2026 15:00:29 +0000
Manifest next update: Mon 30 Mar 2026 15:00:29 +0000
Files and hashes: 1: 2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa (hash: m5M46o3a75vj6oPFWSqdzUbza/mY+wrNQURerudzAu4=)
2: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: irmED64tBKxx50VbU/zi+eSXgQlpCcPfWsh74qbySV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5b:42:2d:44:e7:65:e0:62:25:e6:4a:74:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Mar 29 15:00:29 2026 GMT
Not After : Mar 30 15:00:29 2026 GMT
Subject: CN=111d4e9267c95705a14105ed46447388a438f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:18:20:48:62:a2:e3:6d:2c:e6:d6:77:a9:
ce:5f:11:26:42:27:36:ec:8b:59:6f:ca:12:68:00:
1b:9b:5a:e3:8e:f0:70:5a:02:12:99:3a:9d:09:ab:
ea:17:d4:b1:f3:fe:02:b3:b5:61:a9:8c:07:b2:24:
9b:e5:7b:c2:bc:87:0a:e8:17:a2:6a:72:ad:f7:f2:
3f:25:c2:ee:69:ab:93:b8:49:43:1b:4a:0c:e8:70:
0f:c2:93:4d:6d:1a:53:bd:c6:44:3c:c7:a6:a5:ac:
e8:9d:3c:93:55:c8:82:ad:de:40:bf:3c:14:ea:68:
c6:70:ca:0a:48:f5:c6:8c:4e:0a:67:eb:ef:61:99:
e4:b2:d5:db:f0:23:ba:60:5f:3e:85:79:c9:17:0c:
93:2a:31:f7:f6:62:6e:c8:df:e5:b4:b7:fd:a4:dc:
d0:6f:b9:50:62:da:d8:c8:a9:36:2d:71:24:db:d2:
91:97:65:81:fa:d9:42:c8:6e:25:bd:fc:75:b6:94:
cb:98:09:c2:60:fe:d2:70:ed:d8:12:72:9d:7e:a0:
60:0a:0e:d8:28:3e:17:04:39:0f:e7:54:f6:db:bd:
21:85:68:ef:59:3f:5c:5c:d4:81:0a:eb:ff:88:e0:
92:34:fa:1d:28:ac:68:d2:63:58:d8:f4:28:c0:7f:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:4E:92:67:C9:57:05:A1:41:05:ED:46:44:73:88:A4:38:F4:FD
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:38:94:3e:20:45:1e:13:0a:22:46:1b:0f:9c:ed:bb:8e:f0:
e2:7c:63:13:d7:45:ac:b9:c6:f3:ad:4d:9d:17:65:79:ca:49:
a3:87:e5:fa:23:48:ab:94:5c:7a:89:bc:6c:11:38:3c:57:25:
60:85:f1:1c:6a:95:b8:9a:ef:e8:38:86:25:56:dd:9e:e7:37:
83:db:dd:9f:76:fc:57:f5:ab:af:22:4f:ab:42:60:60:77:b0:
11:12:9a:ce:7a:bc:cc:69:a3:bf:4f:a7:31:6f:9e:c1:b2:b7:
d4:61:e2:fe:7a:26:b2:2c:90:da:67:c1:6c:69:1d:65:bc:72:
3a:e8:2e:cb:81:f8:30:60:af:00:27:7f:9c:66:b7:5c:8b:a1:
1f:7b:d3:1e:d6:80:c0:25:5d:80:4b:7e:94:a7:8d:b4:d7:89:
d9:d0:8d:08:eb:dc:98:52:2e:1f:ee:7a:ae:48:a3:11:b9:35:
4c:43:50:66:36:90:ce:81:13:04:d3:21:5a:14:d3:ba:06:ae:
8d:1d:c8:44:d0:fa:4d:67:2b:7b:16:c9:d5:3a:4f:57:a4:81:
4e:f3:08:70:db:9c:3c:7d:b2:54:e5:29:50:2a:ac:72:f5:7a:
bb:53:b2:82:73:41:85:a6:ba:78:59:ae:5e:ca:58:9a:8b:84:
de:bb:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:27 2026 by rpki-client