Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: LQafmTaDnhGJhz/4FzN1IeB2nngliIi3ybcKB+9R9zM=
Subject key identifier: 20:3C:3D:DE:F4:97:CA:AB:82:00:5E:29:7F:7B:94:F7:C9:6F:A9:3D
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019CAA5884EC35568A4B5F8EB5205150EAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0E70
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: 2zJwAgcQguWE33qNcuoytyAbM5kG8P0iom0bEGSlVDI=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:84:ec:35:56:8a:4b:5f:8e:b5:20:51:50:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=203c3ddef497caab82005e297f7b94f7c96fa93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:a0:87:a9:1a:25:48:e9:f9:40:ae:65:aa:
3f:32:fa:c9:e2:cd:f4:d5:31:88:99:35:50:c6:65:
82:c4:d5:b4:a6:ad:fd:0f:6d:5a:28:3c:9f:e6:bd:
04:61:bb:77:97:c2:9e:30:3f:8f:c3:ff:d7:24:7c:
05:0b:4b:10:f6:40:62:bf:47:3c:f5:2d:78:17:d0:
4f:27:a0:53:d6:aa:ef:fa:6c:d8:12:b0:8c:d6:32:
0e:37:92:04:78:2d:71:71:25:2d:b2:8a:27:2f:1b:
31:98:90:d2:74:fb:b2:ef:ec:bc:d4:c7:5c:e2:c3:
53:fa:11:03:77:fe:95:ef:29:18:84:0a:0c:a0:8a:
f4:42:8a:e6:2a:9a:60:ef:5f:c8:1b:59:69:56:66:
35:7c:d0:25:8e:7b:b6:fa:79:2e:e0:09:19:a2:87:
e7:6f:12:71:4b:26:35:7c:01:e9:55:55:d8:55:5a:
d9:e7:4c:68:24:c3:ed:e8:96:f1:6d:d3:2e:8f:88:
f9:19:fe:9f:00:b0:26:c2:3a:f9:93:cd:aa:4f:df:
26:4e:92:54:c2:c7:e2:82:95:e0:e9:88:65:19:b4:
c3:ad:ca:6d:08:6e:dc:93:fb:5e:c7:fc:70:b7:89:
74:d4:10:87:57:44:58:b9:43:83:8d:e0:4c:53:25:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:3D:DE:F4:97:CA:AB:82:00:5E:29:7F:7B:94:F7:C9:6F:A9:3D
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1f:79:75:cd:e6:31:41:95:41:3d:2f:aa:d3:6a:7b:64:cb:
19:1d:c9:fa:b3:6b:c2:ff:30:f1:e8:ab:78:f1:ce:46:4a:fc:
45:47:90:24:59:20:d0:ee:f6:a9:fd:06:90:79:71:40:de:b2:
26:ad:3d:b3:2a:f7:1e:e9:13:58:7c:ae:33:0f:ff:b4:1b:7e:
10:17:27:4c:0a:5e:93:8e:f5:3a:fd:fd:68:71:9f:e6:e9:ef:
94:84:62:a2:8f:a9:a0:67:f8:ef:c7:f9:45:60:29:d7:10:cd:
42:95:cf:57:b5:d1:94:86:7b:f2:4f:96:88:84:e4:90:7d:36:
2d:9b:a0:34:64:68:37:50:7d:8c:d5:15:6f:25:ca:91:fc:bc:
b8:46:e7:dc:fe:4f:cc:8a:3b:ad:52:0d:65:9a:bb:43:73:6f:
87:f5:48:77:20:90:56:c9:85:fe:1d:e4:fa:fe:5a:41:15:64:
9d:36:c1:cc:80:d5:b2:a3:d9:de:a7:a0:38:70:25:de:bc:dd:
8b:8e:99:a5:fb:0b:c2:aa:c4:da:9f:f0:e0:e9:03:66:34:47:
ea:a8:4e:72:2b:01:32:78:8d:a6:87:50:73:65:bd:ac:f2:fc:
e2:b4:be:b9:a7:ca:bd:a3:8c:74:44:d5:35:2b:1f:e5:62:61:
04:19:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:57 2026 by rpki-client