Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: Z1Z5yUfM4b9nHnmmrmf3r6gGp8Qg0/xJ7t78HSWPOi8=
Subject key identifier: ED:7E:5F:B7:C1:2B:94:4F:B7:6E:23:37:E4:BB:4C:16:41:C5:6E:90
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019DCED02E85D9BE1091F6080E5A488108DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 12:00:42 +0000
Manifest this update: Mon 27 Apr 2026 12:00:42 +0000
Manifest next update: Tue 28 Apr 2026 12:00:42 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: /BPaOUZVRg16mTncfInTCwg095sxlMyPb97Q7BzoVqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:2e:85:d9:be:10:91:f6:08:0e:5a:48:81:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Apr 27 12:00:42 2026 GMT
Not After : Apr 28 12:00:42 2026 GMT
Subject: CN=ed7e5fb7c12b944fb76e2337e4bb4c1641c56e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:46:93:54:e0:96:93:f3:e9:f6:33:da:71:
11:dc:80:20:4d:d1:ff:f9:21:5f:30:5c:f0:41:4a:
b5:cd:db:e2:7d:47:c8:3e:15:48:c0:34:28:c5:bb:
41:58:c6:09:52:94:71:f1:12:75:3d:82:05:73:ba:
32:a2:62:d3:dc:63:13:47:04:ee:1c:d1:cd:32:9a:
25:8d:b4:3d:fa:e4:43:c0:4f:82:c2:7e:66:bf:7d:
83:13:ea:61:d2:de:88:aa:3b:01:c3:97:2f:cc:6f:
2a:37:4e:ba:ef:58:94:4e:f2:47:04:56:32:5e:a8:
7b:9e:f2:90:44:d4:5b:4e:1e:67:77:47:0e:33:76:
ef:6e:67:a3:31:93:a5:b5:33:fc:d5:86:ba:f8:9d:
48:4b:52:bf:ec:67:a3:83:2e:57:4e:cd:7f:2c:d0:
49:29:b8:1d:eb:e6:2b:f3:bd:ce:2d:b8:5d:47:c5:
55:58:b6:ab:d9:3d:b4:aa:58:94:9d:98:e5:7c:b8:
d3:43:51:af:8e:67:65:31:0c:e1:7c:3a:8c:9d:5e:
3a:8b:20:41:bf:e1:09:3c:e2:cc:4e:9b:9e:b0:8b:
15:7b:32:bf:24:bb:85:dc:56:ed:53:77:8f:8e:8a:
e3:d9:34:7f:c0:ff:44:5b:f3:02:12:82:87:c9:02:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:5F:B7:C1:2B:94:4F:B7:6E:23:37:E4:BB:4C:16:41:C5:6E:90
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:05:1a:14:56:0a:e5:64:78:09:28:5c:bb:8b:31:2b:6c:
ab:ae:4f:19:f7:7e:85:6e:79:16:79:6b:2e:a5:74:b9:0f:a7:
63:6e:fb:2a:94:01:b5:39:eb:46:c7:28:a5:91:7d:6e:ea:3b:
cf:25:b4:69:0f:1c:c2:e7:d0:0e:a6:1a:0c:a7:61:4a:63:3f:
53:37:78:92:0c:c3:af:21:1a:4b:6d:d8:d0:49:de:e3:ec:b1:
fd:e1:bc:ed:70:57:46:83:50:7a:29:73:04:24:9d:08:76:a6:
5b:fb:ed:ac:ba:2b:09:eb:f8:2d:94:f6:51:fc:c0:77:7e:44:
bc:b4:f7:22:4b:5a:a3:f7:26:3b:cf:fd:96:1d:5b:44:f7:ba:
d5:98:60:e2:ad:f8:6c:97:79:c6:e9:35:22:35:7c:34:28:86:
fe:ae:3f:14:15:c4:51:7b:44:89:16:fb:45:6a:f9:1b:20:da:
1b:d3:ea:74:2e:30:18:45:97:cd:4f:6b:53:c5:07:db:bf:45:
9d:7a:3b:fa:c9:43:b3:02:94:b8:94:77:d7:f8:2c:bb:75:e7:
b3:5e:44:4e:8c:f9:e8:d8:b0:50:93:f8:35:65:4d:15:b1:8c:
26:f6:62:ea:bf:8a:79:9b:0c:be:5d:ca:c1:c5:d3:71:78:25:
dc:25:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:44 2026 by rpki-client