Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: WY+y77Kw6nyMsKOboMDT4zI96z8/WR01hWhzP7BLNeg=
Subject key identifier: B4:CB:69:96:AA:4B:69:C8:EE:63:E9:3A:2A:0B:0F:8D:6D:12:9A:55
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019D389C2C4498EFBBD4D31067577052D2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 14EE
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: MElwe4PFA6D+GK/kb3NwgsfeAknh5hQ4VODS8WN5DKk=)
2: wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa (hash: ZLevBUhsYa+Tvumsittqd4RBNaIZU4P2yF0LkML8N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2c:44:98:ef:bb:d4:d3:10:67:57:70:52:d2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=b4cb6996aa4b69c8ee63e93a2a0b0f8d6d129a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:49:0b:2a:f9:ae:39:1e:e8:de:5d:42:11:
1a:b1:0d:02:8b:18:ec:0c:ab:34:b7:e1:96:fe:0f:
86:b8:8a:ea:95:13:5d:48:11:86:39:31:43:90:ae:
78:b9:4b:65:50:bc:24:bf:f3:2c:c8:4c:d7:79:98:
0d:a5:7d:69:85:0b:67:23:30:bf:62:fd:11:52:8e:
11:72:f7:b9:c3:a5:b4:8e:91:a1:20:5a:e3:a9:f7:
cc:0c:a3:2d:c7:3a:13:48:09:33:70:52:7c:ca:27:
d2:c5:85:62:66:d7:fd:d0:47:61:2f:6b:07:37:13:
b1:9a:a9:c2:65:7d:32:77:9e:47:8e:79:18:14:a5:
19:b0:60:fe:e3:a3:44:77:69:d3:90:27:73:32:c6:
2e:f4:1c:ea:b0:27:cc:73:d0:4a:80:e9:27:ee:a8:
36:a5:7d:6f:90:e0:81:d3:f2:a8:d9:64:05:ff:e4:
bb:66:64:77:91:31:74:bd:cf:5c:40:99:0c:40:38:
10:20:3f:88:51:f4:7c:56:17:c6:79:3c:3e:34:aa:
bd:d9:aa:b7:a0:0c:36:8e:05:95:a7:f5:c4:3e:28:
83:47:e2:9f:99:a9:93:11:64:14:8e:3c:53:7a:c8:
2b:0c:b6:9e:60:68:24:6b:9b:01:e4:4b:ca:80:38:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:69:96:AA:4B:69:C8:EE:63:E9:3A:2A:0B:0F:8D:6D:12:9A:55
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:e8:21:50:5e:c2:ef:b7:73:86:54:73:09:e6:5a:9f:43:
52:7b:b2:df:21:7d:e1:a3:fc:80:f6:f8:0c:69:cf:5c:1e:c2:
8d:c2:a3:db:8e:d0:be:c8:c1:5f:0e:c4:54:a3:af:da:ae:d4:
1e:d5:af:43:13:d9:45:1b:8f:36:08:c6:a7:37:91:45:4b:ef:
5e:2b:13:af:8c:2e:4d:33:46:6a:90:e5:6a:24:b1:02:a8:bf:
90:68:92:6b:f2:ba:ed:8d:97:04:7a:49:4d:40:60:9b:9e:5c:
57:a1:17:6b:8f:ab:89:74:02:02:7a:1a:bc:8a:ab:79:b5:0a:
bb:79:d7:f4:ec:1f:94:f2:81:e8:99:3d:5a:27:40:c8:13:22:
10:9e:94:76:2a:1b:58:ce:8e:ae:85:e6:50:8c:a6:a7:c5:d4:
57:06:2c:91:e3:a4:46:35:2c:f6:23:3f:7f:2a:95:83:74:19:
52:3a:17:37:c5:a2:a3:4e:fb:3f:cd:a8:ff:2d:ec:00:81:a3:
fd:e9:58:01:87:42:f7:f7:92:88:04:a2:9c:a6:16:22:21:39:
5d:17:6e:01:87:77:ca:d7:35:f4:79:a9:16:a1:f0:62:38:5b:
15:9b:8b:99:92:fb:6b:3d:eb:7c:5f:31:f0:b7:e2:0b:00:f4:
60:f9:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:59 2026 by rpki-client