Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: 34k/FFrTkRTwy5DeE+H1RCocVMbW0uMdKeLhCWJCY8w=
Subject key identifier: 7C:11:B8:41:D1:28:A5:8B:DE:29:2F:AF:4E:38:C7:BC:3A:33:20:64
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019CABA229F2BBEBE94D941804FB0EF68D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 14A5
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: ro/dYOhQtHpiGFy8z/saW7tLDHIN+Jyyrvq8aYhE8IM=)
2: wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa (hash: ZLevBUhsYa+Tvumsittqd4RBNaIZU4P2yF0LkML8N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:29:f2:bb:eb:e9:4d:94:18:04:fb:0e:f6:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=7c11b841d128a58bde292faf4e38c7bc3a332064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:e6:a0:0d:84:2a:19:3d:72:c0:f9:b4:21:
cd:86:d3:f0:99:0b:61:b5:22:e8:f3:96:7e:8a:04:
3d:c3:5c:de:90:2f:02:bf:c8:22:c4:c5:5a:26:fd:
2b:fa:64:98:d5:ba:60:67:e1:58:2f:b7:a1:3f:f0:
7f:a9:4b:6f:fb:30:aa:5c:54:35:da:1a:b9:52:14:
bd:62:b7:cf:f1:7a:fc:40:cb:34:9d:7b:c8:93:b6:
98:9c:b4:f3:0c:0b:da:34:7c:39:81:c4:91:61:a5:
82:b0:23:2d:44:bc:41:7f:6b:0a:d6:2c:ee:58:02:
dd:82:5b:2a:dc:72:9d:73:03:43:3b:41:07:ee:b4:
c9:ce:97:6a:68:13:be:ac:91:25:1b:89:2e:b6:4b:
4e:51:f7:ba:d0:b9:15:1c:fb:e5:bd:0f:ff:d4:97:
6e:da:aa:c8:c4:35:57:fd:8e:02:20:b3:2a:4c:5d:
f1:84:57:a0:e7:0d:31:5c:61:6e:b2:e5:11:d2:e8:
7d:12:ee:c6:d9:99:9c:64:ce:14:93:1a:a5:63:61:
54:15:82:f2:38:35:d8:de:b7:eb:b6:0a:67:88:58:
90:2f:d7:df:7f:81:6e:52:f3:47:ef:39:de:3c:e4:
ac:14:12:ee:c3:58:96:96:5a:48:a6:97:c3:f6:f2:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:11:B8:41:D1:28:A5:8B:DE:29:2F:AF:4E:38:C7:BC:3A:33:20:64
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f4:6d:27:1a:a7:2f:42:90:6e:a4:22:d1:83:1a:33:51:61:
3c:37:6e:c5:bf:b7:d0:0d:19:a8:9f:bb:3b:d9:32:48:e0:0d:
12:9d:47:4e:12:6a:b3:0c:92:b8:98:1e:dc:13:f6:b2:04:3b:
b2:91:82:1a:80:d1:87:8e:3a:e0:da:7f:2b:03:df:5c:7f:ac:
50:6e:59:cc:98:2e:8f:76:7f:6e:ae:fd:96:f1:30:01:30:94:
08:c2:6f:93:72:7f:0f:c5:eb:d7:b8:99:52:03:f8:c4:b7:58:
25:27:07:6b:0d:36:e6:ef:d6:ed:0e:19:f9:28:48:2c:d1:d1:
ef:a4:f4:1f:fb:ac:bd:b1:fc:75:0b:6b:bf:41:f9:66:78:4f:
14:b0:01:42:2e:9c:02:66:d4:b3:50:b9:66:01:42:fe:66:41:
21:3b:b2:a1:52:c3:ea:da:b7:21:ec:84:85:fc:66:dd:15:e1:
6e:2d:1b:c8:7d:70:49:18:d7:c8:29:1f:15:18:c4:83:6c:ea:
e4:81:4a:70:c3:39:80:ad:34:bb:8b:c5:7f:4e:f6:b4:dd:2d:
18:0a:9b:42:88:7c:ad:17:ab:94:91:f6:cb:57:c4:10:2f:41:
75:06:57:e2:71:b0:3f:06:51:f3:50:bc:3f:c0:cc:03:e4:6b:
3b:61:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:26 2026 by rpki-client