Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: Cv2hgvQmCJ1YWvlQppaVET0p1rLb0ykQT0l0IxenvF4=
Subject key identifier: AA:3B:B5:B6:CB:17:E9:C8:38:68:30:3F:A4:E9:38:87:F4:92:49:EB
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 019D38D2B3D1B1F5FE562C5841F74CCC3AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: yTtUnw6WaqKWixgxlsRA9wA1+A1ucplS2sS+sdkC8Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:d1:b1:f5:fe:56:2c:58:41:f7:4c:cc:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=aa3bb5b6cb17e9c83868303fa4e93887f49249eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:0a:a8:5f:8d:4c:8b:92:f2:dd:31:42:5b:
76:11:05:ca:60:e4:fb:6e:f1:7f:e4:94:89:92:39:
1a:e7:f3:15:b3:7d:04:81:cb:39:de:a6:3f:47:21:
19:f4:75:4a:c2:77:53:b6:80:0d:60:0c:55:8b:7a:
f9:d3:d4:3a:1d:3c:13:4b:43:80:0b:96:28:af:be:
af:e3:cb:e4:45:64:71:77:7a:7f:06:0e:d2:cc:e6:
57:77:64:e2:f5:5a:97:a3:9f:a7:90:21:7f:b2:e7:
8d:ff:21:f6:e7:df:12:e9:ae:a6:91:55:29:d2:4a:
7b:cd:36:ac:61:44:26:f2:de:45:b9:59:6d:fa:cb:
b1:b2:4e:59:7e:e1:24:2e:ce:b5:cf:c0:7b:76:00:
39:d1:99:90:04:e9:a7:25:d1:fb:94:ed:da:e5:71:
61:61:10:35:76:c5:9d:d0:18:b8:42:a8:26:ae:e6:
b1:5e:f4:83:1f:d4:26:0c:2b:8c:b7:cd:38:9f:7f:
e2:4f:c8:5a:c6:5a:76:0b:4c:d5:b0:2b:fd:4c:41:
bb:a6:a0:99:a2:d4:76:69:d9:95:c6:cd:44:31:ac:
39:e9:10:8a:f7:1c:7e:08:2c:53:4d:b9:38:69:79:
6b:6f:9a:55:86:f6:b7:66:31:cd:c1:b6:72:35:ed:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:B5:B6:CB:17:E9:C8:38:68:30:3F:A4:E9:38:87:F4:92:49:EB
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a9:18:e7:dc:89:9a:b0:47:d3:c2:5a:0b:11:2e:56:0d:48:
c4:0b:c2:4e:0c:36:84:f3:a5:01:7d:ac:f4:f4:3d:79:e1:f0:
2e:7e:b2:8d:74:20:47:68:d6:d9:72:1e:01:4a:92:95:76:e4:
d8:cc:f6:cd:ee:a1:7f:3f:72:62:4a:14:56:5a:72:e8:a2:54:
27:44:38:43:78:b2:a3:c3:28:5a:61:32:1f:5a:ad:cd:18:98:
41:cd:e6:e9:a1:15:72:90:fb:c2:7d:58:d2:6e:3b:c2:b7:3f:
a9:ca:2a:d4:68:b2:01:ae:d3:15:3f:1a:02:1f:45:6b:9a:aa:
c8:2c:33:73:1b:be:79:8e:f7:a2:d3:ad:1b:df:3e:ec:5d:f0:
89:42:01:fc:58:12:ea:40:3e:dc:64:66:a8:65:4a:d2:29:bb:
fa:3b:d1:ed:5b:a0:76:45:57:d5:8e:33:ba:ad:bf:05:bd:b1:
1f:bd:a1:84:53:bf:f5:f1:6e:64:35:d6:ea:33:df:dd:f0:5f:
ec:32:8e:6e:36:f0:31:db:cb:b2:f7:8f:54:a2:4d:b5:cb:57:
35:ed:37:ba:23:bb:0f:1c:22:35:8a:41:3d:f0:81:cd:41:8e:
e9:2d:3c:66:a4:bb:51:c0:63:bd:5c:e0:36:1f:41:b3:cd:4a:
9a:ad:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:15 2026 by rpki-client