Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: hhVW7/Bf2X8ZknqUpNUHE974mpVvBIXaxJ8a0B96xrw=
Subject key identifier: 32:2D:B6:63:84:18:91:DD:4F:20:EB:0E:AA:7A:20:7F:91:0D:03:B4
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 019CAB349B704C66BCEC0F1697E658FD9FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 04C9
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: Aa2IxorzT-f0qos6APae9lJPvis.roa (hash: 2snsQOp64NXZRDIW60ynJJ/L0sWlwOoUe2QkF5SYR1Y=)
2: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: YVfgpX+6dbgokPBhOLCc5S/MQJt/QFINUgYaAb6cCYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9b:70:4c:66:bc:ec:0f:16:97:e6:58:fd:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=322db663841891dd4f20eb0eaa7a207f910d03b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:e4:08:7f:d5:ea:6a:45:61:b4:50:4b:77:
7b:50:32:78:42:b4:2f:5d:96:90:e2:47:db:b9:51:
e7:9b:b0:98:e7:89:c6:34:a8:96:17:ad:26:c7:80:
44:83:5b:97:7b:6d:c2:e7:7c:46:c9:6b:4b:95:f4:
e8:83:92:9b:2c:05:a7:b7:4f:27:38:b6:a1:a8:8e:
a4:11:0d:2d:df:27:d7:e6:2d:ec:f8:13:10:89:5a:
4e:5c:f1:78:c1:19:af:23:c4:55:5f:41:f8:cf:cf:
01:0c:a1:ca:70:a1:5b:63:26:cb:4c:bc:b7:e3:08:
38:a6:6a:c2:63:72:39:5c:81:83:d4:3b:a7:9d:0f:
67:ca:cd:de:47:c2:14:4d:b6:ae:c1:80:5f:4b:01:
e6:24:5d:7f:81:08:00:3a:6a:e2:fd:98:0d:69:4f:
f2:41:ad:07:45:37:17:39:48:9b:df:97:11:15:83:
d5:0b:96:44:f2:19:8b:da:7e:b9:cb:84:76:f8:c4:
25:86:7c:60:60:c9:68:98:5d:b4:05:e2:7d:ba:cc:
66:c3:d3:e1:49:ca:d9:b4:54:c8:41:6e:e8:9c:e1:
9b:11:de:c5:16:ec:59:7a:85:9f:38:56:fc:80:af:
c7:5e:d5:81:26:d2:4e:b7:a9:f5:d9:15:66:65:10:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:B6:63:84:18:91:DD:4F:20:EB:0E:AA:7A:20:7F:91:0D:03:B4
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:b9:85:f6:9b:47:85:14:e9:e8:bd:4f:24:46:1c:e1:f6:
fa:e0:89:bd:ea:71:d0:68:bf:ce:e6:9b:d6:a2:06:02:2a:30:
a6:96:f4:82:8e:d6:e8:47:ce:6c:f9:6f:f6:51:87:fe:5e:bf:
80:9c:25:94:14:53:6c:db:8c:2d:dd:2d:6f:35:6a:f9:01:1f:
a9:fb:db:58:eb:84:75:1b:b1:57:14:75:3c:be:01:8a:02:48:
bc:90:74:8a:bf:57:39:37:e8:20:8a:2a:50:a8:80:06:7b:68:
60:36:a9:ee:37:c1:bd:62:3b:6e:0d:2a:71:e9:64:a6:bd:6e:
f2:51:43:a8:7f:29:c5:2e:2c:ee:f1:bb:bd:36:9a:76:1f:b1:
5d:0b:c2:cb:16:25:12:2a:81:9b:65:6c:99:40:3a:06:ef:0e:
1f:91:b1:7a:2e:5d:4e:a4:16:b7:e6:6a:d0:9e:7c:30:56:a3:
c5:c4:77:fa:22:0e:ef:fa:f1:46:49:dc:cb:e2:a4:12:0b:79:
c3:fd:13:35:84:22:b3:8b:25:85:6c:d3:f7:d7:c0:18:24:08:
1f:88:be:b4:d5:44:38:02:1d:d1:f6:d8:e8:21:90:45:66:bc:
dd:4d:3c:73:36:f4:49:5a:c3:06:bb:31:29:59:55:a1:40:9f:
a1:72:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:54 2026 by rpki-client