Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: hbW538H1jrMTEFPYTgdN3MIh0e+5jByhrQPtm6BQY8c=
Subject key identifier: 9B:AC:35:B3:0B:43:6D:9A:3A:40:19:34:44:8C:67:E3:FB:13:E1:22
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019D99D0DA9B95AB76115648984B4CDF2A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0EEC
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: rAgU50mbC3V0z3/19iZatnrJw9gc2VYhNSjxkeU8cUI=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:da:9b:95:ab:76:11:56:48:98:4b:4c:df:2a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=9bac35b30b436d9a3a401934448c67e3fb13e122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:85:e8:9a:8f:7c:58:33:36:74:75:18:2f:
50:84:85:08:d2:44:fc:af:f7:d6:11:6a:de:c7:76:
61:70:6a:fd:59:97:d5:a4:48:50:6e:38:80:4d:fe:
19:9d:72:de:55:5c:e9:c4:66:c6:f7:ba:f1:1d:83:
f4:fd:8a:31:1c:ef:ec:90:34:29:7a:00:a1:11:5a:
8d:94:cf:78:8e:7e:fd:08:8e:d2:59:ef:c0:a5:09:
59:8b:13:27:e9:9c:51:a0:89:68:c0:ad:a6:7d:ea:
76:af:6c:ed:79:98:e3:e0:a4:25:b3:d2:ef:77:84:
6d:bc:0b:d7:44:8b:3c:90:b4:f6:d1:7f:3b:b2:5f:
15:90:c5:f1:e4:11:e4:78:5d:d2:52:cb:c2:fc:94:
37:87:38:aa:6a:00:51:ee:6b:56:20:61:b0:cf:fa:
59:e3:36:79:7e:b3:79:15:6b:58:a4:4d:2b:9a:43:
f2:77:e5:af:c1:ff:89:d0:e3:87:10:36:de:03:1a:
74:14:3c:df:8d:8f:15:6b:51:bc:a1:ff:cb:dc:49:
d2:6c:98:cc:e2:5b:30:5f:45:b6:36:fd:87:d7:c8:
c7:7d:48:a3:89:17:ef:10:82:06:eb:43:07:4b:4f:
24:0b:6e:79:84:64:74:d3:db:b8:2d:47:b4:89:00:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:35:B3:0B:43:6D:9A:3A:40:19:34:44:8C:67:E3:FB:13:E1:22
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a5:dd:d8:a7:ed:6e:a9:36:4b:ba:18:b1:cf:89:81:9c:b9:
77:ac:78:e8:fb:ef:54:85:28:de:fc:d9:72:28:42:3e:eb:06:
69:32:84:3c:c9:ce:fb:d0:28:99:30:0f:0c:41:e3:22:00:b9:
b4:f1:1d:c7:51:24:ac:58:2b:dc:d9:31:65:ec:88:91:2e:7d:
d9:30:78:7b:f3:ee:18:78:bf:d6:d9:bd:0b:93:30:47:76:77:
59:8f:4f:c4:4a:f1:5f:be:db:5a:22:1c:0b:68:28:68:bf:f2:
f5:5b:2b:bc:99:f4:3d:e2:1c:7d:4b:20:b2:db:b8:fd:a8:5f:
b8:2a:c9:4d:1f:df:4b:6e:23:7d:be:81:c2:e9:91:a5:f4:91:
36:08:9c:38:ac:2d:ed:1e:46:37:8e:70:a7:ca:52:41:76:bc:
db:ac:52:d6:fe:ef:9e:81:c7:5e:59:4f:af:2c:fa:65:47:e0:
1a:be:4d:b4:7b:b0:c6:a2:ca:4d:2d:1a:b3:1e:fb:76:ae:3f:
53:ed:a0:79:1e:8a:8e:8b:11:76:a8:d9:32:59:1b:01:b5:c2:
3d:62:81:01:79:f4:ce:0d:24:c6:6b:e0:cf:1f:e7:a0:b5:d9:
56:24:22:e1:18:32:90:d7:b2:23:56:14:13:20:b9:f3:10:e7:
1d:10:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:44 2026 by rpki-client