Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: 1BRWMEjp1IPpBb7lobqGbBQHbpJ70G/W3PeH0ooNct4=
Subject key identifier: BF:D7:28:4B:F7:D7:03:72:05:61:4E:19:20:45:12:ED:09:6D:A9:98
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019EB87D1134B667F9C03B6BAC40C3A48B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 21:01:04 +0000
Manifest this update: Thu 11 Jun 2026 21:01:04 +0000
Manifest next update: Fri 12 Jun 2026 21:01:04 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: WlRARj2bbPNYDfzFEBq3FtwJULBbY6zcQFUMu7j0eTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:11:34:b6:67:f9:c0:3b:6b:ac:40:c3:a4:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jun 11 21:01:04 2026 GMT
Not After : Jun 12 21:01:04 2026 GMT
Subject: CN=bfd7284bf7d7037205614e19204512ed096da998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:64:70:09:95:87:fa:65:21:2d:21:a3:58:
8a:33:84:f5:40:13:b5:6f:15:70:16:80:a7:5a:30:
bb:9f:0f:0d:49:e3:aa:af:fd:fd:f6:51:97:cb:77:
c1:93:a1:74:9a:2e:a6:16:0a:63:88:ea:4d:c5:b0:
c5:15:08:a7:5f:c3:93:31:e4:74:3a:c6:92:1c:59:
42:fa:4b:f6:f1:97:58:4c:2b:95:f4:d7:3c:42:f0:
f3:65:8b:a0:a0:eb:62:9a:d3:7a:ac:ca:15:75:60:
8f:cb:ee:6c:27:56:cd:21:7b:25:67:9d:53:76:43:
eb:6c:63:fb:f1:4a:84:51:6a:0c:eb:89:b4:6c:10:
aa:aa:35:47:54:82:1f:90:ef:07:37:4c:5c:f3:ee:
80:50:43:1b:a1:41:ce:82:03:0e:22:ad:0a:4a:5a:
90:84:3c:9e:09:3b:07:90:37:7e:11:e4:5e:05:e0:
e4:cc:6b:47:7b:fa:e8:ee:c6:3f:d2:f6:1d:2a:1c:
32:43:a2:9a:3a:02:67:15:f9:41:bd:1b:da:86:86:
07:24:2a:c5:8d:1b:00:00:ea:b3:9f:72:38:13:35:
a9:62:51:77:9a:69:db:82:c1:5c:b9:dc:d3:1b:99:
8a:a5:29:ac:d9:04:de:a5:a5:c0:f9:3e:82:1b:88:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:28:4B:F7:D7:03:72:05:61:4E:19:20:45:12:ED:09:6D:A9:98
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:cd:14:ed:60:21:fd:c1:d2:fc:55:eb:ec:92:0e:20:15:
27:27:c3:2f:72:8a:b7:a9:8a:00:9f:6b:37:94:9a:a7:1d:2b:
61:6d:f9:df:14:29:97:c7:12:5e:c8:5f:95:28:a6:73:b1:34:
6a:7b:04:71:0a:8a:f2:90:a0:71:a8:b9:08:6f:a5:f2:ac:e6:
d6:46:05:c2:02:1f:52:fd:7e:ce:be:db:b1:3c:a1:bf:9e:58:
76:24:97:fe:cd:e9:9c:54:00:d6:7e:84:cf:a5:12:8a:c1:7f:
49:ab:99:96:b4:61:87:bd:5f:e1:c0:34:f0:fb:65:03:37:fe:
3f:9a:0a:37:5b:05:43:77:01:6b:6c:f9:4b:b6:b5:7b:fa:5a:
39:0b:60:7c:32:5f:e0:dd:87:2f:c6:f8:50:5f:4e:1a:23:dc:
3b:da:ff:84:a2:10:42:ed:be:33:df:b2:ea:25:ac:e3:69:ce:
47:3a:6a:60:07:c1:55:75:32:40:92:12:9e:cc:5d:26:09:31:
56:98:82:df:72:ef:1a:27:29:2d:db:e5:0b:b8:7c:27:9e:7d:
b5:7d:93:79:d3:32:18:12:c9:31:7e:cd:45:13:6f:a6:93:1f:
08:c1:95:de:3f:0f:94:cc:77:b0:7d:1b:33:8a:a3:9c:dd:d7:
f2:ea:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:19 2026 by rpki-client