Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: Hdd247WUJEymEK2YRHtY7fummgQSsriZLqb77iqOcMI=
Subject key identifier: 3E:C0:89:88:60:51:7F:CB:5C:4E:48:1E:E2:DD:26:84:FF:DE:80:A4
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019CE523FCA6CCA8F80992631514B4DEB6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 03:01:06 +0000
Manifest this update: Fri 13 Mar 2026 03:01:06 +0000
Manifest next update: Sat 14 Mar 2026 03:01:06 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: KjtyCLX2gDwjOQIuVbSIiBFJ6e8wOoc/NjLO5HNhqCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:fc:a6:cc:a8:f8:09:92:63:15:14:b4:de:b6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Mar 13 03:01:06 2026 GMT
Not After : Mar 14 03:01:06 2026 GMT
Subject: CN=3ec0898860517fcb5c4e481ee2dd2684ffde80a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:6d:e1:cd:e4:fd:c3:58:78:f3:6a:91:c0:
cb:0d:8e:3c:54:7a:74:43:18:58:f5:3e:aa:ee:94:
ba:cb:46:fa:30:07:0c:f6:f7:ee:46:e5:4b:b5:00:
18:26:40:f3:ad:ff:90:9a:a0:49:8a:a4:2a:63:a0:
09:0d:a0:75:d4:81:62:bc:9b:0e:39:b3:db:94:9b:
3e:13:7b:a9:ce:99:de:11:db:10:07:ed:e9:ea:c4:
84:5e:b4:fb:d7:49:0c:e7:d6:e0:8f:c3:96:0f:f9:
c3:0c:e8:01:fc:2b:2d:e8:47:43:d2:b1:c0:3e:8d:
e5:c5:8c:70:55:db:ed:a5:88:e9:eb:5d:c8:91:05:
29:a9:a0:be:e9:93:a4:38:90:7e:81:d9:d1:40:ac:
65:99:28:b8:c1:cf:62:6e:c8:99:28:63:cf:f6:90:
cd:a7:bb:06:b0:76:0d:06:bb:d6:97:fb:5c:0c:93:
d4:c7:2c:67:62:f9:26:42:50:1f:fa:2c:07:55:3c:
1e:bf:d5:1b:07:ac:5a:b3:67:eb:39:ef:a0:0d:d6:
f2:44:8f:4a:20:d6:e4:ef:24:24:ce:0e:48:74:d0:
58:a4:ad:90:4e:e4:45:0c:2e:31:8a:62:f9:f5:ad:
5a:bf:f5:b4:8f:a1:11:1b:ec:dc:24:40:b9:66:63:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:89:88:60:51:7F:CB:5C:4E:48:1E:E2:DD:26:84:FF:DE:80:A4
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:38:cf:15:06:8d:c6:f0:da:95:67:0e:a8:86:b8:35:19:
7e:87:1c:03:4d:cb:95:4c:b3:42:85:46:0a:37:c8:ac:33:bb:
f3:8e:f5:83:f1:d2:69:18:5f:b6:47:2d:cf:d4:b2:37:14:05:
c3:b5:85:c4:70:88:26:f1:18:fd:4c:dd:d2:7e:02:a4:05:05:
00:75:ac:48:00:6e:7a:ad:a6:3f:a2:f3:5d:f0:2d:4c:a6:cd:
5e:a5:16:de:9d:87:b2:ad:b2:4f:e2:a2:d6:c2:cc:bc:ed:09:
30:98:b4:aa:d7:a5:1b:90:45:21:79:75:47:3a:99:3f:1f:78:
6c:50:b5:d1:6c:44:84:ad:ec:80:c7:a8:67:24:0f:88:e8:66:
94:6a:fb:40:b3:af:e7:bb:25:f0:19:4f:96:00:f0:2b:9f:46:
f3:ec:2d:08:ff:2e:df:2b:ef:53:3a:e0:9d:84:1d:99:47:58:
cc:e7:e5:da:81:12:c2:f2:2f:29:c3:ac:e5:f1:82:45:e3:f4:
66:b3:8e:b0:46:90:36:bf:78:5f:d9:1f:a8:7e:fc:88:72:8b:
1a:c2:1d:ec:86:37:ee:5e:e4:6d:f2:81:a6:f9:7f:a0:86:1a:
5a:93:f6:09:91:67:b7:2c:59:22:ce:62:7e:32:b8:6c:8a:be:
96:ee:92:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI/ymzKj4CZJjFRS03ra9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj
NTA2OTEwHhcNMjYwMzEzMDMwMTA2WhcNMjYwMzE0MDMwMTA2WjAzMTEwLwYDVQQD
EygzZWMwODk4ODYwNTE3ZmNiNWM0ZTQ4MWVlMmRkMjY4NGZmZGU4MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD5t4c3k/cNYePNqkcDLDY48VHp0
QxhY9T6q7pS6y0b6MAcM9vfuRuVLtQAYJkDzrf+QmqBJiqQqY6AJDaB11IFivJsO
ObPblJs+E3upzpneEdsQB+3p6sSEXrT710kM59bgj8OWD/nDDOgB/Cst6EdD0rHA
Po3lxYxwVdvtpYjp613IkQUpqaC+6ZOkOJB+gdnRQKxlmSi4wc9ibsiZKGPP9pDN
p7sGsHYNBrvWl/tcDJPUxyxnYvkmQlAf+iwHVTwev9UbB6xas2frOe+gDdbyRI9K
INbk7yQkzg5IdNBYpK2QTuRFDC4ximL59a1av/W0j6ERG+zcJEC5ZmPCCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7AiYhgUX/LXE5IHuLdJoT/3oCkMB8GA1UdIwQY
MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt
OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl
LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOis4zxUG
jcbw2pVnDqiGuDUZfoccA03LlUyzQoVGCjfIrDO78471g/HSaRhftkctz9SyNxQF
w7WFxHCIJvEY/Uzd0n4CpAUFAHWsSABueq2mP6LzXfAtTKbNXqUW3p2Hsq2yT+Ki
1sLMvO0JMJi0qtelG5BFIXl1RzqZPx94bFC10WxEhK3sgMeoZyQPiOhmlGr7QLOv
57sl8BlPlgDwK59G8+wtCP8u3yvvUzrgnYQdmUdYzOfl2oESwvIvKcOs5fGCReP0
ZrOOsEaQNr94X9kfqH78iHKLGsId7IY37l7kbfKBpvl/oIYaWpP2CZFntyxZIs5i
fjK4bIq+lu6SDA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:24 2026 by rpki-client