Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: k/pR8fTKURFs4OK04CCz32O4x+U9NmmK03ZSYO+WeMo=
Subject key identifier: 32:F2:3F:64:BB:BF:1C:AC:10:81:BA:AC:01:C4:8D:C8:33:3B:33:9B
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 019D98BDBBE3D9632601B5053C8A8F9A0A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: 2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa (hash: m5M46o3a75vj6oPFWSqdzUbza/mY+wrNQURerudzAu4=)
2: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: nnOxfF0MJUfJh3hP47YqYiHeZR5C2GKuo46z4mKKufI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bb:e3:d9:63:26:01:b5:05:3c:8a:8f:9a:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=32f23f64bbbf1cac1081baac01c48dc8333b339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:f0:aa:0a:cf:cc:33:17:40:55:82:9d:e3:
61:6b:79:c1:cb:5d:a2:4e:a9:4f:91:3c:36:92:56:
f2:ff:1d:05:25:4a:0e:6a:2e:b4:21:36:99:c9:a8:
a1:19:dc:4f:95:0d:f5:ab:09:56:c5:01:3a:be:3d:
0e:ca:ab:ab:eb:50:2f:a7:ab:64:66:12:0d:47:2b:
ee:15:26:5e:8c:87:71:bb:a0:61:33:be:16:d9:e9:
a2:54:67:a4:c5:26:92:58:ea:30:f4:10:8e:81:39:
9b:1e:77:6c:31:39:10:bd:3b:31:a9:bf:37:50:b6:
8d:24:ad:8c:1a:39:d6:62:04:e2:50:8d:00:8c:07:
e4:13:70:ef:85:fa:24:ef:b5:fe:87:8d:25:ab:8f:
9a:b9:67:c0:12:7d:88:63:bf:c8:14:2f:e0:49:20:
34:27:e7:33:d5:7b:5e:ae:0d:12:88:be:b3:f1:83:
f8:f6:7d:74:81:1b:23:59:1d:f6:fb:b1:2d:fa:ab:
10:97:4a:25:25:0d:ba:fa:3d:50:b0:6b:a5:3a:d4:
a8:7a:89:b8:0a:72:ef:3d:41:3d:fb:79:af:84:81:
d7:98:62:29:b6:93:a7:d7:a6:81:26:41:ad:ac:f4:
dc:25:aa:32:ed:6d:83:eb:81:3c:0a:b5:2c:6e:b5:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:3F:64:BB:BF:1C:AC:10:81:BA:AC:01:C4:8D:C8:33:3B:33:9B
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:d3:3e:21:df:ba:75:90:e9:cd:3b:c9:2e:87:cd:02:1d:
84:98:20:19:40:1b:2f:47:fe:e3:23:a0:79:6e:8f:2d:fb:29:
0a:a3:e4:d6:69:64:81:0a:b8:c1:30:40:53:42:cb:90:91:a9:
97:a7:51:58:85:f4:20:68:ff:fa:96:1f:17:78:8c:d3:2c:dc:
a9:9d:46:44:45:ec:85:7f:ba:d5:18:cc:c9:22:e7:dd:79:a3:
88:23:89:48:56:54:12:09:b8:de:24:2f:50:fa:67:44:8e:83:
d1:8d:2d:8f:22:9e:78:d0:2c:46:1a:d8:0d:9d:ba:95:f9:a7:
5e:e8:ba:88:5e:14:e6:85:2c:3b:8e:53:02:c4:7e:24:8c:e1:
f3:7a:2b:97:57:2d:80:e7:e6:1b:95:e2:9d:84:c8:5f:47:d8:
ba:84:b2:bb:08:16:69:50:59:e4:f9:f3:be:8c:ca:97:bd:63:
77:a0:57:97:4c:5e:70:5a:b7:01:d8:be:15:42:98:cc:06:0f:
ce:90:b6:f8:27:7a:bf:8d:63:de:e5:c4:f4:96:a5:30:bc:f7:
45:6c:97:1e:42:97:60:e0:3b:26:85:5c:96:a6:a0:b0:0c:b4:
ff:f7:a6:04:5a:f9:88:12:bb:39:d9:9c:ce:4d:08:22:3e:db:
d7:2d:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:25 2026 by rpki-client