Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: Ha2tt4ay2CxUvT+zDUcySM3dRX3VUrzpCrrGZeYkACs=
Subject key identifier: F9:78:AB:FB:BF:D9:C5:37:AF:1F:D4:47:89:6F:D4:70:B7:81:D2:A4
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 01A1811974FDE103EF8C1EF018B83D4DB24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 06:01:31 +0000
Manifest this update: Wed 28 Oct 2026 06:01:31 +0000
Manifest next update: Thu 29 Oct 2026 06:01:31 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: VJEXpZM+B+iTeCPeFQeT7OUpki1M85jvtmWPJnKf3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:74:fd:e1:03:ef:8c:1e:f0:18:b8:3d:4d:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Oct 28 06:01:31 2026 GMT
Not After : Oct 29 06:01:31 2026 GMT
Subject: CN=f978abfbbfd9c537af1fd447896fd470b781d2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:e3:9e:e1:44:12:f6:d2:4d:d9:a7:64:26:
bf:be:3c:31:ef:03:6e:b2:aa:0a:92:21:95:63:04:
ca:34:b0:f9:b4:df:f5:4c:61:d5:1c:36:7e:80:06:
48:3b:ae:7e:40:e6:b0:37:12:da:79:01:68:06:5b:
39:f6:bc:b7:47:a8:34:69:81:7d:f6:82:f6:f6:15:
fa:08:f3:47:3f:e1:e0:70:db:1d:63:75:65:37:e9:
cf:a5:aa:e0:80:4f:67:58:eb:20:51:5f:8d:33:ee:
3c:42:7f:49:c0:bf:32:1f:f7:e8:ca:61:b0:45:94:
c6:74:2c:f2:32:fe:57:93:2b:13:94:f9:9e:0b:01:
28:fc:6b:41:28:fc:ec:eb:71:0e:ae:6f:bc:f2:a5:
f4:90:11:f5:0e:04:37:29:c9:5d:64:3a:bd:f4:bc:
49:ec:4a:67:e4:9c:31:20:d0:f5:fc:3e:96:03:ce:
47:38:fb:0c:0f:c9:d0:dc:2a:8a:2d:58:ac:d8:a8:
ca:df:cc:9b:b3:27:1a:c8:cc:14:10:5a:6f:e1:3b:
f8:65:03:4c:e3:57:50:9c:4a:6c:c0:3d:a0:65:87:
fc:0e:a7:b0:01:60:db:e1:c6:e3:24:ea:42:7b:5a:
45:da:5b:06:ee:c4:85:49:ed:cb:f9:de:46:8e:86:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:AB:FB:BF:D9:C5:37:AF:1F:D4:47:89:6F:D4:70:B7:81:D2:A4
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f7:19:0c:16:e9:dc:e0:96:c5:d1:83:3e:41:bb:6b:b0:0b:
0f:6f:ae:a3:d2:bd:28:97:1d:91:45:a4:2e:4c:24:a1:b8:9e:
11:99:54:54:8a:4c:50:c7:89:4f:4f:84:36:8e:4a:e6:89:2e:
9f:44:9e:3f:d1:cf:f3:60:97:11:1c:c5:09:e5:43:68:5b:f6:
05:c6:78:c9:ce:2e:d2:dc:a4:ba:92:65:8e:80:69:da:cb:d5:
64:4f:8b:de:68:7f:1a:81:74:ff:f1:47:58:a3:55:ad:e5:01:
66:ff:ec:6f:a0:10:33:97:d0:e6:a9:ea:8a:20:d1:9a:cb:db:
9a:2f:73:ae:2b:8d:27:50:d4:06:95:e6:09:d9:bf:3f:7f:50:
e2:51:e1:33:5e:a4:33:93:d1:b1:e0:1f:4c:84:88:e1:32:2f:
98:f7:2f:f8:ea:ce:b7:b0:47:c4:f4:b4:9e:28:47:75:04:ae:
e0:71:67:87:74:ce:e0:c7:3a:02:96:df:47:e9:f3:da:9b:0c:
c0:09:8a:c6:77:4f:ae:be:a1:cc:44:70:dc:47:9c:c6:8f:4b:
1e:a6:a8:89:45:5a:b0:d2:0d:b7:35:ac:24:13:d1:78:e9:20:
f5:a6:fa:94:1f:4d:23:d6:fc:ef:29:05:75:ee:22:e8:05:b9:
e7:7d:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:32 2026 by rpki-client