Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: BaFUqP8iqYBCsn3EuzRzOzMtH/H7uOPoCQsJ9EJjX/g=
Subject key identifier: F6:D9:FD:10:7B:7B:F2:1C:21:69:A7:5C:70:DE:FC:01:D7:F1:41:4F
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 019FA2CE223F9F26AE27DB2069F2CBF7FB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 0988
Signing time: Mon 27 Jul 2026 09:00:45 +0000
Manifest this update: Mon 27 Jul 2026 09:00:45 +0000
Manifest next update: Tue 28 Jul 2026 09:00:45 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: HgVUmuVIkrzjiUq4FHcAL4MkI64OrdlLrtaVe8EXFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:22:3f:9f:26:ae:27:db:20:69:f2:cb:f7:fb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Jul 27 09:00:45 2026 GMT
Not After : Jul 28 09:00:45 2026 GMT
Subject: CN=f6d9fd107b7bf21c2169a75c70defc01d7f1414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:3a:03:d2:2c:67:65:3d:1f:ef:32:d1:46:
00:ed:39:23:f4:58:f0:2c:34:a8:71:d4:70:0d:2e:
13:fa:66:ee:f7:9c:b1:ce:aa:38:02:c9:39:09:5a:
62:67:03:61:36:f4:1e:e9:c2:51:7b:fe:28:55:25:
22:ee:71:c5:50:d6:bb:ef:1a:44:41:69:74:eb:a2:
9d:46:5c:2d:7e:f7:9e:ea:87:b9:4c:bb:bf:81:f3:
bb:b9:28:7d:72:32:d9:bc:5c:1d:e0:45:ac:5d:f8:
28:93:5f:e3:b7:25:e5:9f:38:af:4a:5a:fa:c7:b6:
89:e3:60:32:fe:8e:57:84:ae:fa:1f:f2:15:c1:02:
35:9d:28:4b:77:69:de:05:04:83:fe:f4:7f:cc:7e:
1d:a6:87:ca:aa:84:1f:08:1b:7a:80:e3:1a:e3:3d:
fc:11:9b:ff:41:e0:b7:02:01:24:99:19:e3:90:e3:
ba:14:f1:09:ee:1d:3c:43:e1:01:88:0a:d7:f1:64:
b3:42:c3:cd:8f:35:7d:a8:78:da:06:5b:c5:c2:62:
54:a6:50:d6:f1:03:ce:e2:d2:aa:8c:16:8d:35:01:
60:b9:15:da:32:7c:c2:2c:f1:2f:86:12:57:db:c6:
af:60:9f:31:b6:66:98:f7:33:dd:9f:2f:3c:d0:8e:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:FD:10:7B:7B:F2:1C:21:69:A7:5C:70:DE:FC:01:D7:F1:41:4F
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:8e:f9:43:6f:6f:00:df:11:67:4f:b9:bb:2e:de:79:e3:
54:27:46:a9:b3:94:ba:a4:55:df:e0:2f:d4:fc:0f:ad:9d:dd:
cf:1a:85:96:34:86:f2:80:59:44:58:29:e8:cb:7b:4c:0c:e5:
ac:3c:af:99:04:d4:3b:eb:b9:0d:e8:fe:22:a8:02:e3:2e:a7:
de:d1:a1:66:af:50:f5:69:19:f6:10:af:8a:04:bb:a9:15:ee:
c0:f4:e4:a0:e2:c3:24:35:30:57:fa:07:c2:e3:eb:89:73:9f:
14:63:a2:41:7e:fb:30:2b:6d:40:67:33:f2:f7:94:70:c2:96:
3f:25:6f:d4:72:ac:1b:3b:54:e8:8c:94:ce:01:d1:27:6e:19:
ab:a3:ae:0f:7a:09:44:b9:db:74:1b:4e:f2:62:b4:87:7f:e8:
3d:f2:22:61:62:46:e8:b1:fb:0a:ed:a8:42:98:1a:17:7f:06:
34:18:34:43:74:84:e0:51:20:6d:25:80:23:ed:f5:99:35:fd:
70:15:2c:af:d1:6b:2b:05:73:73:fd:3e:c3:71:53:7d:f8:6c:
a3:17:c8:cb:0d:08:9b:72:3f:12:3c:51:a5:00:fb:54:89:46:
a4:fb:2f:a2:5b:ca:f8:6a:33:65:4d:20:75:6a:e7:ab:e8:93:
f7:f1:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:58:00 2026 by rpki-client