Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: 0zHmRLeWh7POdZnyViIylm23Cql+NXljwpzdyMu4rbs=
Subject key identifier: AD:4F:9E:C9:6C:7D:51:06:29:AF:CB:09:FB:4C:DF:87:57:D4:44:23
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019D3A8AB5D9679378FE1DC888E3DD12EB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 162F
Signing time: Sun 29 Mar 2026 17:01:02 +0000
Manifest this update: Sun 29 Mar 2026 17:01:02 +0000
Manifest next update: Mon 30 Mar 2026 17:01:02 +0000
Files and hashes: 1: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (hash: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: wXZWnOf9s6i6R6Wh4VgyI3uj7t6RkRzUrO0RIkyYlaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:b5:d9:67:93:78:fe:1d:c8:88:e3:dd:12:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Mar 29 17:01:02 2026 GMT
Not After : Mar 30 17:01:02 2026 GMT
Subject: CN=ad4f9ec96c7d510629afcb09fb4cdf8757d44423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:25:06:8a:e2:fe:3a:74:03:a6:7d:9b:01:
66:40:54:5f:ff:f9:8c:fc:e4:6c:d3:03:83:d6:6b:
0d:c2:cb:08:6b:e8:6a:83:96:0f:0c:07:67:df:1b:
11:fa:7b:b8:2b:a2:9e:d5:a0:d6:ee:91:5c:3c:1e:
39:19:6c:2d:5b:c0:82:6b:fe:2a:29:83:2c:41:b2:
85:60:a7:e6:53:17:aa:51:33:6f:ed:b0:06:0e:07:
2c:c8:e6:16:22:39:af:f0:49:16:14:27:90:0c:82:
85:81:2e:ef:74:29:2e:04:c7:8f:ca:e2:b4:33:cd:
cd:42:05:8d:db:05:ca:b4:fb:72:26:f2:f9:ee:2f:
04:49:26:34:b3:bf:3a:ee:04:8e:7a:3b:88:e5:31:
f5:7d:6e:d3:96:f3:b6:8f:e0:76:db:e2:39:14:9c:
ca:22:9d:13:34:66:5b:80:0f:72:f9:64:3d:64:04:
2f:05:60:ed:aa:51:3f:c6:6b:b1:2e:65:08:dc:bc:
43:a2:8a:e7:31:c1:1e:e0:5e:42:fc:b4:32:b7:fa:
f5:96:98:bb:23:47:39:d9:07:bb:ac:6a:41:22:8b:
d2:83:95:9d:1e:a3:9e:21:93:c3:2d:6f:50:fa:0e:
93:1c:d6:13:e8:df:12:86:fd:5c:cd:14:b1:fd:81:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:9E:C9:6C:7D:51:06:29:AF:CB:09:FB:4C:DF:87:57:D4:44:23
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e8:28:ab:fb:c5:b7:3b:f3:2f:c1:9b:8a:8b:71:87:16:59:
ca:59:62:1f:bd:de:e0:5b:39:1f:f7:a2:6c:b9:f7:9c:5b:7a:
e8:72:3d:4f:49:17:7f:17:f0:4c:f9:8f:9d:87:86:7f:ad:0a:
76:75:eb:2d:e6:b5:90:50:97:58:42:2d:62:4e:9f:cf:c4:8a:
64:b0:3d:7b:3a:28:a6:5b:21:b6:b0:f4:43:4d:a3:fb:92:72:
49:d4:18:86:87:d4:48:e6:9a:cf:1f:56:e5:b8:56:e1:a8:03:
12:71:17:ab:72:a0:51:c3:ba:d6:29:bd:a3:f3:c0:1e:e9:27:
be:48:77:16:52:2f:93:5d:00:23:b8:2f:93:6c:fa:6d:ec:6d:
bf:2f:e9:41:7b:0e:87:80:e9:54:8f:ba:99:39:d6:0f:9d:1c:
fd:5a:b9:f2:bb:a7:86:10:18:df:98:63:7b:b4:74:90:74:35:
54:7f:c9:70:9e:73:52:6a:a1:56:a8:83:43:52:e3:df:ca:ed:
62:a9:44:8d:cd:d5:e0:56:aa:61:dc:3a:18:be:1b:29:8c:44:
bb:ba:c8:b7:fd:f5:fe:50:85:f3:20:ed:56:5b:cb:e4:70:c9:
fc:33:b8:4b:53:73:28:8b:b7:b0:f6:5d:8e:2a:cc:08:3c:4e:
51:bf:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:10 2026 by rpki-client