Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: 39SQg2nNz4MuuiRQCWw2PRz2v9sEBTfvf3c3W2Z9mh8=
Subject key identifier: 86:CF:C7:05:A7:04:0A:69:5D:51:BD:F2:61:A0:18:CA:3E:1A:9C:3C
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 019CAB345C71C0CA53EDA113B5E13EE71B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: 2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa (hash: m5M46o3a75vj6oPFWSqdzUbza/mY+wrNQURerudzAu4=)
2: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: nOR04FyVo6grnuO3cZh3ie+FZUxmp3hDwEVqw1tkbQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5c:71:c0:ca:53:ed:a1:13:b5:e1:3e:e7:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=86cfc705a7040a695d51bdf261a018ca3e1a9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:10:3a:c9:f1:12:55:b2:ff:14:97:aa:59:
a8:50:3e:65:a6:55:9f:e7:23:e3:33:62:0d:d1:e0:
37:e5:90:b7:96:d4:b5:5a:f9:09:1a:29:35:7c:9b:
00:ca:0a:60:63:84:0d:24:91:1c:5f:7f:63:bf:1f:
99:73:b9:8c:ec:09:7f:ea:8c:51:ca:26:4e:17:ce:
04:ef:8b:df:f9:14:9c:97:0e:e3:49:25:f1:95:72:
26:e8:94:d8:e0:12:67:93:d1:b8:bd:b4:e2:94:78:
2c:74:b5:98:0e:b4:94:73:5f:6b:9e:98:47:43:8c:
88:12:23:47:a2:b5:5c:cd:bf:ff:8e:ed:98:f6:a2:
61:88:3a:d4:ee:cb:d2:7b:93:0f:8e:9a:34:de:f6:
fb:e3:2c:0b:2d:86:e0:61:b5:c6:21:6d:e7:91:11:
75:70:13:b3:8f:fa:6f:48:33:7d:44:7c:de:6d:91:
72:3d:89:1e:02:b8:64:82:22:ff:85:f4:08:61:11:
f6:c9:eb:bf:a5:a1:01:2a:2a:37:a7:4c:95:d5:15:
38:9a:f7:07:1d:0e:13:84:8c:9f:a0:e6:8d:f1:b3:
01:bf:fc:c3:a0:ce:37:3b:c0:f0:fe:d7:be:07:2c:
97:a6:54:43:e5:c2:7c:12:84:0b:5d:32:05:85:e7:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:C7:05:A7:04:0A:69:5D:51:BD:F2:61:A0:18:CA:3E:1A:9C:3C
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f8:4c:8a:b0:5e:42:99:0f:35:f1:14:14:a3:a7:aa:17:c6:
ba:81:2f:80:a0:fd:c5:27:a0:8b:89:c5:77:f0:07:f6:63:6a:
3e:ec:99:25:e6:ab:61:56:d9:50:fe:85:18:4e:8c:e2:f0:a3:
a3:77:f1:0b:45:17:6e:a5:a3:a2:83:7e:f0:a2:40:94:a4:95:
de:aa:e6:82:97:f0:7e:7f:1c:63:00:0b:23:14:41:7b:71:15:
95:86:86:c4:bb:a7:d3:ee:28:fa:bd:54:05:f8:14:29:54:b1:
e3:3e:5c:4e:25:a7:b6:02:e9:60:a9:2c:5e:93:3e:17:17:ad:
e1:3a:7c:a4:0d:cc:9f:00:60:3d:d2:de:7e:3f:6b:15:24:9f:
b8:5e:fb:0d:ec:db:b5:8e:ed:d1:3f:30:17:f4:80:d9:63:de:
6e:9c:41:d4:ae:4c:3c:20:32:46:0a:bd:cf:01:65:71:fd:65:
8b:6e:90:45:f9:bf:0d:c6:ba:f8:08:09:6d:df:25:7d:fa:3d:
31:ff:d5:9c:84:1d:09:ec:2f:fb:09:d7:28:a9:48:e3:9d:a2:
77:f7:3c:7b:6b:2f:2d:37:4b:1d:12:3e:3f:20:79:13:37:7c:
03:41:00:70:d4:d5:ed:23:b7:b7:f0:17:16:35:9c:8a:eb:46:
e7:56:f5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFxxwMpT7aETteE+5xuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYzk3MWZmMGQyNWYyMDM0YzA1YWIyOTU4YTg2ZjczMmJj
Njc3MzQwHhcNMjYwMzAxMjEwMTAxWhcNMjYwMzAyMjEwMTAxWjAzMTEwLwYDVQQD
Eyg4NmNmYzcwNWE3MDQwYTY5NWQ1MWJkZjI2MWEwMThjYTNlMWE5YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzEQOsnxElWy/xSXqlmoUD5lplWf
5yPjM2IN0eA35ZC3ltS1WvkJGik1fJsAygpgY4QNJJEcX39jvx+Zc7mM7Al/6oxR
yiZOF84E74vf+RSclw7jSSXxlXIm6JTY4BJnk9G4vbTilHgsdLWYDrSUc19rnphH
Q4yIEiNHorVczb//ju2Y9qJhiDrU7svSe5MPjpo03vb74ywLLYbgYbXGIW3nkRF1
cBOzj/pvSDN9RHzebZFyPYkeArhkgiL/hfQIYRH2yeu/paEBKio3p0yV1RU4mvcH
HQ4ThIyfoOaN8bMBv/zDoM43O8Dw/te+ByyXplRD5cJ8EoQLXTIFhefOGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbPxwWnBAppXVG98mGgGMo+Gpw8MB8GA1UdIwQY
MBaAFBHJcf8NJfIDTAWrKViob3Mrxnc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmIt
ZWYyZDdhMjNmNjA5LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmItZWYyZDdhMjNmNjA5
LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvhMirBe
QpkPNfEUFKOnqhfGuoEvgKD9xSegi4nFd/AH9mNqPuyZJearYVbZUP6FGE6M4vCj
o3fxC0UXbqWjooN+8KJAlKSV3qrmgpfwfn8cYwALIxRBe3EVlYaGxLun0+4o+r1U
BfgUKVSx4z5cTiWntgLpYKksXpM+Fxet4Tp8pA3MnwBgPdLefj9rFSSfuF77Dezb
tY7t0T8wF/SA2WPebpxB1K5MPCAyRgq9zwFlcf1li26QRfm/Dca6+AgJbd8lffo9
Mf/VnIQdCewv+wnXKKlI452id/c8e2svLTdLHRI+PyB5Ezd8A0EAcNTV7SO3t/AX
FjWciutG51b1pA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:27 2026 by rpki-client