Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: YZlf2nSXNPQy3dqzRk8SN5hsfZy/G7NexUYgyK5+uo8=
Subject key identifier: D1:0B:95:1D:B2:58:7F:39:27:E3:14:D0:ED:3D:1E:A3:A6:41:9E:38
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019FA228F8AB21D69680BBA87D3F0124073F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 06:00:21 +0000
Manifest this update: Mon 27 Jul 2026 06:00:21 +0000
Manifest next update: Tue 28 Jul 2026 06:00:21 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: 3vPmWy9YSJO8IElnD70X4hURGPWE87e9JZOT/JsJmDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:f8:ab:21:d6:96:80:bb:a8:7d:3f:01:24:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jul 27 06:00:21 2026 GMT
Not After : Jul 28 06:00:21 2026 GMT
Subject: CN=d10b951db2587f3927e314d0ed3d1ea3a6419e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:b1:28:56:e0:6f:42:12:ba:bc:7e:7f:16:
a9:28:78:c0:71:df:09:59:1f:7e:cc:9c:a0:10:41:
46:0c:93:65:7f:27:21:62:81:fe:ff:dd:88:76:c7:
b3:9e:85:2f:8d:6f:ee:6a:67:aa:f1:eb:e7:19:59:
03:83:91:4c:ad:2a:0f:54:b8:17:4c:88:fb:22:8d:
ee:37:7c:2d:a3:59:2d:6a:0b:8a:46:8f:a5:26:01:
42:4e:ea:e8:d5:b1:a3:84:d3:cb:84:3a:6c:fd:95:
2a:da:3a:49:da:df:c1:07:57:d2:c1:1e:b7:ea:4a:
a8:00:2f:a9:86:b3:90:28:da:1b:bf:b3:a4:45:71:
d5:db:8a:0e:19:df:92:a1:dd:3f:94:04:b6:ac:04:
c0:a9:31:f9:09:46:8a:a5:72:38:5b:74:0a:35:c9:
8b:e8:d6:0b:b3:9c:34:00:05:fe:b8:4d:6c:1d:4d:
1d:3c:3a:b3:57:0e:2c:1d:af:d1:5a:b6:50:8b:b6:
37:92:81:22:2b:12:07:2b:75:ac:af:80:77:04:f5:
7a:82:db:38:f6:35:54:19:25:5a:fc:10:96:dd:22:
30:9c:c5:c8:80:59:c9:3f:d0:d2:c7:a8:63:fa:1a:
a9:91:7f:10:97:1b:cf:29:06:92:29:76:68:8d:67:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:95:1D:B2:58:7F:39:27:E3:14:D0:ED:3D:1E:A3:A6:41:9E:38
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c1:ec:ba:8d:be:20:b0:b0:cc:ae:a0:c6:aa:6e:87:7a:98:
e0:62:6b:0b:7b:17:3a:d2:de:09:f3:62:3d:34:4a:34:10:33:
ec:e5:f1:61:20:36:6a:3b:58:7a:b9:6f:bb:7e:38:88:16:50:
64:e4:65:91:9b:af:e7:dc:81:81:96:06:c3:ba:27:8e:03:b3:
e7:eb:c0:5a:ae:04:db:17:84:4c:e9:76:69:7e:df:df:ed:ad:
4e:f6:f3:b8:7f:06:9f:de:b5:31:77:f4:e6:ad:dc:4e:e9:4a:
14:2f:94:7f:c0:37:d0:df:7d:6f:00:30:02:fb:5c:ac:05:ab:
c2:b8:27:17:35:81:e1:ea:23:27:1c:59:c2:1d:33:e3:a0:6b:
6a:f6:3f:12:11:6e:0c:7c:ae:ea:a7:35:d7:ca:67:ad:a7:97:
5b:34:93:6d:40:7a:3d:23:59:01:89:ab:bb:b1:39:9e:3d:a1:
db:b9:76:77:b0:f4:dc:d8:77:7c:53:14:71:b5:26:f4:15:8d:
4e:e8:ff:40:61:3d:82:e2:86:29:e6:7d:b0:f2:c4:89:07:e4:
ac:e6:42:e6:0a:a9:99:2e:8d:71:01:c3:64:00:c4:c9:44:b5:
3d:b4:c1:1e:9f:37:fc:29:3d:72:60:b2:9d:12:b8:97:b0:a3:
a6:ec:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:33 2026 by rpki-client