Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier: +Gw1xePUQCgkI+OKyk/HqRNrP7VsrBthotKKf4BoAos=
Subject key identifier: EF:30:41:BB:AC:3D:F6:82:7F:E5:76:7C:D1:5B:D9:C9:59:BE:3A:E5
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial: 019CAB6BB60D0BB1E5BC78602EA4D3F3A68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number: 1663
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: HZUmj4QmbZaLTecSRhtNAhWGtaW3vXIZBrkg9xzrg2g=)
2: JXyToVHzoKcPgiftey3VODfKzHA.roa (hash: hh+ZXLITA+1er8CwLKQe1+Z8gZePfKgzblszCECG/4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b6:0d:0b:b1:e5:bc:78:60:2e:a4:d3:f3:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=ef3041bbac3df6827fe5767cd15bd9c959be3ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:64:6c:04:52:17:07:5e:97:96:20:30:12:
2f:8f:b3:dc:c5:6d:f6:63:35:ca:c4:85:a1:2f:8c:
c4:77:bf:1f:4d:35:e1:cb:3e:46:8b:a9:12:1c:84:
fa:86:07:52:64:77:52:15:84:3d:d8:e6:17:ce:03:
0d:6f:6f:93:ab:b6:dd:ee:df:8c:8b:e4:b9:5c:34:
d6:e9:45:5a:0e:02:7b:32:85:c4:e9:44:50:79:57:
33:62:a6:6b:dc:49:87:68:28:20:c4:01:98:26:6a:
ba:69:68:52:bd:eb:e8:0c:b1:49:28:bf:35:32:60:
c0:07:a9:5c:c3:8d:7a:14:01:04:7a:9f:4e:e1:74:
b2:8d:ff:2f:43:c5:a5:e4:2a:4e:b0:35:6a:c4:fd:
9c:4b:0b:95:cd:31:03:fc:11:45:58:00:ed:f9:82:
ed:bf:5c:85:b9:9b:98:3a:62:27:88:99:f3:3f:88:
fe:d4:59:ed:32:f1:6a:6c:dd:92:6a:54:fa:87:bc:
76:bb:8e:a4:91:0f:66:a3:2b:48:b4:47:4e:ff:0e:
5b:e9:d7:31:f0:68:76:db:74:8d:c0:d3:ee:5b:80:
5e:68:4d:ea:fc:77:db:b1:3a:dc:41:57:3a:b4:5a:
51:82:7e:39:c7:47:1b:fe:57:22:d1:f6:9f:3f:7a:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:41:BB:AC:3D:F6:82:7F:E5:76:7C:D1:5B:D9:C9:59:BE:3A:E5
X509v3 Authority Key Identifier:
keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:15:99:1f:8b:24:57:e5:53:0c:43:45:a9:95:e1:5a:3b:
c7:0e:f5:f9:35:2c:bb:e4:5b:29:1f:27:51:ce:4f:00:dd:9c:
02:ff:6d:2c:3b:3b:e2:4b:8d:6d:10:3d:11:20:14:1c:05:bd:
4e:8a:33:5e:96:30:15:ea:42:e8:ae:60:72:9c:1c:6a:b4:58:
50:06:f9:23:0a:d9:69:8f:a4:4c:b9:a5:63:36:96:30:c8:6f:
70:d4:9f:42:c5:67:81:2e:c0:a8:84:52:ea:af:7d:c8:b0:84:
79:f0:bf:65:09:f0:9e:ab:4d:10:fe:fb:2a:3e:ca:f2:84:64:
9b:c1:85:c8:76:a8:34:26:3c:ee:be:07:ad:da:c7:71:c0:bf:
8a:82:81:29:72:8c:84:c3:5f:cf:1a:36:e2:23:62:3b:24:a3:
80:42:c1:9f:4c:5c:1e:fb:68:f7:3e:31:52:8e:c7:3b:da:8c:
ff:21:ec:8b:a8:5e:ca:a6:31:fb:2e:6a:2a:92:a8:9d:97:fb:
52:a2:fa:ed:57:4f:83:e1:d1:4c:b7:5e:76:e0:73:a3:02:09:
04:77:63:be:4f:f5:ce:5f:29:13:50:0b:ae:90:25:8c:8b:c1:
07:24:31:fb:84:8d:51:77:9d:94:2e:ba:95:25:d3:b3:59:d6:
20:3b:25:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7YNC7HlvHhgLqTT86aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMmFjM2U4NmFmYjE0MTRmNTViZGFlMDNmYjZmNTNkZjA4
Njc4ZTQwHhcNMjYwMzAxMjIwMTI4WhcNMjYwMzAyMjIwMTI4WjAzMTEwLwYDVQQD
EyhlZjMwNDFiYmFjM2RmNjgyN2ZlNTc2N2NkMTViZDljOTU5YmUzYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaBkbARSFwdel5YgMBIvj7PcxW32
YzXKxIWhL4zEd78fTTXhyz5Gi6kSHIT6hgdSZHdSFYQ92OYXzgMNb2+Tq7bd7t+M
i+S5XDTW6UVaDgJ7MoXE6URQeVczYqZr3EmHaCggxAGYJmq6aWhSvevoDLFJKL81
MmDAB6lcw416FAEEep9O4XSyjf8vQ8Wl5CpOsDVqxP2cSwuVzTED/BFFWADt+YLt
v1yFuZuYOmIniJnzP4j+1FntMvFqbN2SalT6h7x2u46kkQ9moytItEdO/w5b6dcx
8Gh223SNwNPuW4BeaE3q/HfbsTrcQVc6tFpRgn45x0cb/lci0fafP3p0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8wQbusPfaCf+V2fNFb2clZvjrlMB8GA1UdIwQY
MBaAFBAqw+hq+xQU9Vva4D+29T3whnjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTct
NzQ1YTgxZTUwMmZmLzEvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTctNzQ1YTgxZTUwMmZm
LzEvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+8VmR+L
JFflUwxDRamV4Vo7xw71+TUsu+RbKR8nUc5PAN2cAv9tLDs74kuNbRA9ESAUHAW9
ToozXpYwFepC6K5gcpwcarRYUAb5IwrZaY+kTLmlYzaWMMhvcNSfQsVngS7AqIRS
6q99yLCEefC/ZQnwnqtNEP77Kj7K8oRkm8GFyHaoNCY87r4HrdrHccC/ioKBKXKM
hMNfzxo24iNiOySjgELBn0xcHvto9z4xUo7HO9qM/yHsi6heyqYx+y5qKpKonZf7
UqL67VdPg+HRTLdeduBzowIJBHdjvk/1zl8pE1ALrpAljIvBByQx+4SNUXedlC66
lSXTs1nWIDslkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:19 2026 by rpki-client