Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
File: Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft (raw, json)
Hash identifier: hmGF/12QdI75ySgU0Y6YcWExetN7XjcjHYKjPPapSIQ=
Subject key identifier: 9B:35:DD:4C:D3:95:5E:93:24:3F:FA:D9:44:24:9F:D9:A0:BA:F1:2E
Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Certificate serial: 019D39E5AE7F800BCCBB52617047CADDD787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
Manifest number: 01E0
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl (hash: fszTxv9U8bLNNc8S0cCxvib8fXHRlpQ3vonFtmRrX84=)
2: XCXL6tXhJ071vkeNMORNlpxzCuY.roa (hash: dQDGVzQSTYMoleKklgkYU+qVDH84olTQRNM1qoDrhIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ae:7f:80:0b:cc:bb:52:61:70:47:ca:dd:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=9b35dd4cd3955e93243ffad944249fd9a0baf12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:a7:2b:f3:a4:62:32:25:a8:9d:d2:66:d5:
40:05:4e:f2:db:9a:fe:c8:70:a8:7c:e9:74:a8:01:
74:11:83:6e:bb:40:e7:de:18:3e:d7:96:75:37:38:
48:cb:54:e9:62:50:e5:8b:c8:94:ba:c3:a2:62:a4:
00:e4:31:ec:f5:1e:b6:40:4e:94:d6:a3:6f:a2:8f:
29:4a:1e:d6:ea:ac:07:93:fd:95:4c:44:ca:ab:6a:
4f:7c:12:58:89:c1:bf:6a:e3:19:f1:15:86:0b:41:
68:0c:5e:be:2e:00:c9:b9:aa:a7:79:a0:b0:be:40:
bb:36:4d:3c:c0:a4:80:37:7c:28:ea:e4:cc:06:2f:
92:d6:59:39:07:17:a6:9e:bb:03:a6:ce:a6:13:ca:
0f:4e:cb:fc:25:06:84:4c:4a:87:59:cf:6c:61:1a:
d1:9b:30:6f:9f:ec:51:c1:91:f0:38:2d:d7:0b:51:
00:14:ff:9c:e4:77:f4:16:b3:55:36:e7:89:55:72:
55:93:73:0e:e0:bf:6e:f9:09:6c:a3:ed:f6:1b:2f:
28:f8:51:b9:fd:36:e9:d8:a5:99:b0:f0:97:fe:16:
e4:ed:f5:07:99:98:01:a2:cc:a6:fa:09:75:00:42:
a8:d5:75:3b:54:1c:e4:57:95:08:ab:75:ce:36:c8:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:DD:4C:D3:95:5E:93:24:3F:FA:D9:44:24:9F:D9:A0:BA:F1:2E
X509v3 Authority Key Identifier:
keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b7:03:50:96:21:64:2d:83:8d:20:4d:9e:b3:6f:dc:4c:eb:
16:85:aa:30:86:fc:5b:37:58:f7:79:5e:70:4a:c4:83:e4:74:
6f:bb:c5:58:d3:e1:ed:da:42:fb:b6:df:a5:7d:17:ce:ff:0e:
6d:73:0c:49:ef:f0:15:9d:3f:d6:b0:ea:9b:cc:b9:64:d7:c7:
f3:f7:67:25:e3:05:08:86:78:b3:de:6c:13:c4:d2:bf:eb:ea:
ad:6d:f0:ee:f9:1f:a1:70:f2:e0:89:71:94:67:98:24:28:94:
77:ea:55:14:9d:55:ec:a6:c9:1c:c5:32:49:3b:a8:33:c9:b4:
2f:9b:92:1d:4d:a4:f6:30:ec:fb:da:da:d4:6e:df:f9:09:7e:
eb:63:bb:ca:a6:e8:cd:f2:a2:8c:df:84:ac:34:dc:df:e4:4a:
6d:1e:27:41:47:4d:a9:d1:71:74:9f:03:6e:a4:5b:9c:71:eb:
29:80:54:73:51:c5:2f:e9:b3:5b:da:a3:f5:3b:64:f6:ea:e4:
77:8e:6b:b3:52:9e:31:f4:2f:c5:44:d9:3a:6c:46:aa:63:72:
ef:5e:00:47:f7:67:17:20:31:fe:51:3a:42:4e:a9:1d:b7:d5:
95:1e:25:62:cb:8b:54:8d:fb:36:36:a3:3f:f9:ed:62:27:c5:
06:13:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:57 2026 by rpki-client