Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: FbzrZPMvOBata0zmIQhwEvDDyQrai0DgbcW/Dgf6g+o=
Subject key identifier: B2:4E:08:10:6E:29:00:E2:CA:09:A4:1C:05:01:8A:10:31:61:52:4C
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019D992B24B80176F8773BCFBF1CB0813A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 1660
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (hash: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: GwP5NjHjOKkGxyL2tM7s++c2xFwGe/07l5kOLZxNUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:24:b8:01:76:f8:77:3b:cf:bf:1c:b0:81:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=b24e08106e2900e2ca09a41c05018a103161524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:84:14:8f:06:5d:3d:dc:64:fa:b0:8d:9f:
2d:24:e3:64:0f:76:3a:34:1a:56:45:b7:de:2a:b7:
2b:3a:6f:25:33:e3:a3:db:97:0d:87:7e:ab:13:8a:
05:6a:01:d4:66:24:53:e7:d8:ac:05:34:27:dd:b2:
29:eb:e1:dc:f3:03:b7:97:13:15:fe:1f:9b:a3:23:
91:70:99:a0:f6:03:26:f6:6c:3f:c7:d6:cc:f9:9e:
3b:2c:ef:34:d9:e4:50:9d:4c:d5:a6:7a:c7:03:20:
b3:44:f9:57:59:69:fd:15:80:84:3a:80:93:b3:6c:
eb:bf:dc:72:64:52:00:dc:a7:98:02:a9:f7:da:34:
d5:cc:8f:e1:45:20:93:12:43:b6:77:8e:dc:b4:f6:
80:49:6a:70:4a:f4:b3:88:bc:d6:9d:de:fd:ec:48:
92:ff:72:3c:91:d6:30:77:67:45:74:2b:96:ec:b3:
7d:ac:ba:df:2d:ad:bb:e2:2c:6c:bb:87:da:4f:e8:
b5:b1:c5:93:85:d9:68:48:83:34:c1:93:e7:03:5b:
68:72:5e:ab:83:a2:fa:70:42:23:b5:cb:54:58:6a:
f7:7f:36:45:51:25:98:7c:42:06:2c:bc:8e:97:89:
e2:61:ad:0a:db:ab:9a:90:6f:a2:f6:7f:e5:13:8e:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:08:10:6E:29:00:E2:CA:09:A4:1C:05:01:8A:10:31:61:52:4C
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:41:8b:68:b8:51:b8:86:fa:b5:d0:43:7f:e7:3a:77:af:93:
6e:b7:03:3c:13:30:5f:58:db:29:39:57:0e:9a:14:b1:c2:ad:
52:ba:d0:93:15:d7:27:e8:56:ef:d6:60:70:84:c5:0c:9f:c6:
c5:7b:ca:f7:e0:ea:96:68:08:2b:c1:72:79:80:3b:98:96:ee:
be:8f:cc:fc:cf:38:f4:b5:1b:a8:29:4c:9d:ca:e8:26:ce:c0:
36:2b:34:59:4d:15:b7:a3:64:3a:b6:4b:3f:ba:75:2d:3d:73:
87:a9:34:f7:8a:f6:0a:5e:4c:6b:b4:bf:dc:62:5b:c7:23:0e:
fa:52:cc:76:ce:9d:09:1f:24:bb:6b:c2:54:80:10:bf:b4:bf:
9b:f9:71:8f:d1:2c:a9:70:33:93:1e:56:6e:0a:e5:3d:59:ec:
49:4c:97:58:1a:d0:7f:17:13:cd:fa:7b:a9:56:f6:5f:f6:a9:
c4:46:11:07:34:83:fa:e0:6a:6c:2f:53:6f:37:c3:6b:48:c0:
de:74:91:b2:50:b8:10:e0:c8:51:57:cc:7c:c6:fc:13:15:71:
68:11:54:17:ed:3b:96:eb:bf:8c:21:68:9a:09:d3:c8:9b:70:
a1:e4:bf:34:09:45:62:81:c9:09:df:4c:53:1e:0a:12:26:44:
cf:ee:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:42 2026 by rpki-client