Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: TV6nvtPgwqkIRbEl37U64YGIWJCmyCmr6+KAguPU2rc=
Subject key identifier: BC:9A:FE:8E:33:45:FE:76:84:7B:75:1C:22:B3:18:3B:BD:77:DA:DF
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019CABA22FD38788A4608C2CBFFCEDD093FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 15E5
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (hash: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: lSXPdZ0YKm/M9/mWdfvPeKtYzQLLPMf6o93kfKma5MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2f:d3:87:88:a4:60:8c:2c:bf:fc:ed:d0:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=bc9afe8e3345fe76847b751c22b3183bbd77dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:af:39:79:69:b0:15:06:10:4d:bd:c4:8c:
5e:49:3e:a0:c4:ab:c5:e7:2b:eb:2f:05:ec:85:21:
3b:ce:83:ac:55:9c:69:0b:0a:27:00:35:9b:ca:b5:
a7:18:8c:d4:00:a5:d4:9a:e0:22:14:3a:37:22:d0:
8c:03:56:5d:30:81:e5:84:4c:e4:28:90:34:d3:4a:
7d:98:88:8e:97:5b:c0:d9:73:e7:e2:16:06:4d:50:
9a:d3:34:77:d3:d2:00:31:df:a8:0d:dd:dd:9d:d0:
a8:35:6a:1a:c0:91:2e:a0:1c:5e:a6:49:7a:6d:a1:
2b:65:e3:fb:f4:9f:99:55:90:e5:98:06:e9:d9:ad:
13:2c:be:8c:d1:88:cc:f9:5a:d9:e1:f2:5e:bc:5c:
2f:ba:7b:c4:36:57:32:be:0e:15:38:9b:af:8c:3e:
7b:1d:4d:f1:12:76:63:d9:18:7b:6e:1a:3c:94:7d:
62:f2:d5:b9:83:4b:93:40:e3:f8:04:ea:63:40:43:
8b:1c:f7:a7:df:bf:04:88:15:30:67:47:71:bf:38:
b9:3d:1b:45:89:42:70:c6:ed:bb:3d:cf:e8:54:b6:
b6:6d:a7:25:59:cd:36:ab:66:e7:50:4a:0a:de:70:
29:eb:b1:7d:df:e1:19:e5:15:0a:2f:97:c8:f5:8b:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:FE:8E:33:45:FE:76:84:7B:75:1C:22:B3:18:3B:BD:77:DA:DF
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2c:c3:9b:50:b6:2d:bd:76:27:07:94:ea:35:b8:f6:98:c7:
54:ed:0d:a6:74:11:1e:46:12:5e:69:e4:bc:6a:74:ae:fc:64:
e7:7e:11:62:af:bc:3b:29:24:36:5b:39:9d:ec:03:d9:d0:95:
ef:f8:91:6c:ff:d2:c4:9c:56:37:15:59:d7:67:17:76:2c:ba:
c4:1b:3e:55:14:77:15:8c:4d:c5:04:8d:96:62:39:e4:57:1d:
95:26:a8:bb:3f:18:5a:12:85:40:86:98:01:d0:3c:71:ee:f6:
f1:db:4e:a0:07:7d:cd:f8:3e:15:95:ba:ad:8d:f5:15:6e:65:
c6:c5:c2:5c:ec:f2:45:a0:78:85:c3:00:c6:26:7f:a9:78:44:
d7:b1:c5:81:d1:ad:b7:53:73:af:6a:9e:a6:54:4b:c4:12:0a:
aa:b9:c6:a1:48:6e:bd:cf:ff:01:07:1e:ac:7c:f3:61:a5:16:
57:10:07:92:25:a0:16:a0:a4:b6:f0:88:b2:ac:8d:dc:09:ce:
44:5a:aa:ff:4e:3b:ea:41:ec:6d:d9:21:52:f2:0c:e4:65:a6:
38:ee:d9:6d:61:58:69:7c:4d:b1:e2:63:7e:97:75:6d:0c:1b:
e9:fc:09:85:c1:80:6e:6b:a5:ee:da:b0:da:a4:63:01:ee:73:
12:d9:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:03 2026 by rpki-client