Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: 3Fjid2KEVnRLItLFuUHeMRrnJxrqCDfIttp8jLhUFRg=
Subject key identifier: FB:CF:C9:42:5F:9C:26:1D:16:5C:BB:83:D8:13:B0:4F:A6:3A:7A:CA
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019D992B28A1BBEAFDF3527D85EFF2EB044A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 1520
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: GHs0g2gAkc67g8VyMU1BuHqvXoJxWOc1sqMgJ/Y41X4=)
2: wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa (hash: ZLevBUhsYa+Tvumsittqd4RBNaIZU4P2yF0LkML8N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:28:a1:bb:ea:fd:f3:52:7d:85:ef:f2:eb:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=fbcfc9425f9c261d165cbb83d813b04fa63a7aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:0d:92:f3:a5:43:ea:52:5d:7a:0d:09:28:
56:8d:b3:16:ac:a4:f2:a2:4f:21:e3:dc:71:24:1d:
6e:a1:18:73:4b:b7:34:3f:9d:4c:c1:0d:cd:0c:3d:
fa:6c:9f:29:c5:c4:58:90:ed:7f:03:34:ac:6a:6b:
c3:4d:e5:39:a3:40:4b:3b:f2:45:ac:8a:bd:40:e6:
f0:50:4a:f5:43:42:89:68:28:ca:35:c3:bc:d2:f7:
0b:91:74:11:ae:2a:74:eb:f8:2d:58:a4:f1:1d:dc:
5e:3b:32:c8:99:a1:68:3f:83:16:23:68:53:3b:3e:
fb:66:08:3b:b5:da:f4:7a:80:69:15:dc:df:67:6a:
72:e5:67:ec:ff:9b:76:92:c1:18:f3:df:bc:83:64:
6d:e0:ba:19:a1:62:9f:ff:6c:37:1a:ad:d2:25:0e:
9c:42:9f:ea:9a:a2:63:07:2d:e9:a4:d1:a8:91:fd:
e7:c9:f6:51:c0:cc:bf:2d:0b:d9:5a:4e:f1:ec:19:
8a:dd:32:aa:53:6c:c1:02:e1:23:aa:d2:25:c0:54:
f8:85:7a:a7:84:07:0c:62:b3:32:54:89:9e:62:84:
79:5c:16:d8:95:a1:16:74:88:9c:f3:80:56:6e:1c:
53:a4:86:44:6e:13:b5:f6:29:2f:11:b1:6d:37:0e:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:C9:42:5F:9C:26:1D:16:5C:BB:83:D8:13:B0:4F:A6:3A:7A:CA
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:55:2f:17:89:c9:5a:a7:85:18:c9:3d:aa:d0:62:49:77:
0f:01:82:ae:99:31:3a:41:3f:4e:6e:6c:e5:66:81:f3:36:a4:
4b:78:45:ff:dd:b7:ce:7f:e0:d2:b3:d2:a8:8b:c2:5b:f4:30:
74:b9:de:1d:10:a5:55:aa:7a:f9:10:1f:40:a5:05:ad:73:6d:
41:61:92:1c:d8:c3:7c:6f:33:19:b7:36:22:fc:c7:cb:df:1e:
c8:ae:04:4f:10:b3:16:84:10:aa:b6:0c:54:ae:4b:8b:c6:9d:
fa:d5:5f:89:6e:d7:11:89:54:1a:68:e3:e9:4f:24:fe:b3:45:
39:c1:73:a0:02:63:9a:cb:58:eb:ae:07:48:f4:9b:82:b7:d8:
db:ae:85:78:b0:e7:14:2d:15:c6:3e:75:9b:49:60:1b:f4:1a:
87:89:5a:80:73:f9:6a:ce:d9:c6:d2:77:df:45:7d:d9:c8:d8:
3a:d7:e4:3d:32:3f:2e:79:22:11:61:a7:80:5c:08:b0:40:18:
c5:9a:42:6c:85:7b:17:fb:6a:fd:ea:cb:13:33:b1:cd:26:aa:
00:35:85:60:75:a0:66:2f:b1:eb:f6:3c:61:77:6b:45:5d:32:
a1:e9:93:4d:6d:93:e2:2c:33:4d:14:9f:f5:37:89:7b:da:a3:
73:91:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:07 2026 by rpki-client