Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: T+n5vx6TdibePkgLHmM4L1BqZgf0JMHhPeQyXlLApRE=
Subject key identifier: 80:D5:A4:D7:8A:FB:28:51:72:1D:16:70:5C:AD:C7:68:54:9A:C3:BB
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 019CABD9349104E211536DED8873C9465BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: WIOigNW6b4JOzNrAC53M4fbNadufOrqNhFGrBRea5Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:34:91:04:e2:11:53:6d:ed:88:73:c9:46:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=80d5a4d78afb2851721d16705cadc768549ac3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:d7:75:ae:f3:c3:96:60:7f:82:82:a9:ee:
c4:20:1a:09:ca:73:2e:6c:ab:0a:44:14:45:14:18:
a3:88:3e:d4:7d:4e:6e:ee:42:b6:b9:23:bf:e1:da:
3f:68:e0:ae:75:ef:9d:01:cf:3b:dc:2f:94:44:64:
2c:ab:bf:ea:ee:bf:06:30:bc:94:cf:9b:53:be:a1:
4e:a0:fe:85:00:b2:70:13:f3:9e:56:58:39:84:24:
7e:98:77:50:39:e3:b9:d1:3a:a4:12:9c:02:c0:29:
7d:dc:a8:87:6f:5c:5f:11:9f:ea:56:45:3f:a9:1c:
99:92:b4:ca:5d:34:11:c0:2e:50:91:81:46:1d:12:
18:a9:77:aa:1b:c3:fa:7f:0b:08:90:41:3a:d3:20:
94:d3:05:f8:ba:93:f5:80:78:85:33:34:ed:fd:fe:
e8:54:1d:1a:1c:f4:b2:44:a5:e1:d1:1b:a8:63:99:
1e:79:70:01:8e:80:e9:83:fa:d6:23:a1:e5:87:53:
48:4f:5b:1c:3d:73:aa:99:6d:46:67:e5:77:f3:9d:
73:68:54:dc:01:0a:e7:8b:49:93:70:ef:a4:73:47:
4f:8e:6a:8b:c4:63:cf:e5:27:62:fd:42:dc:7d:a6:
c0:dc:7f:09:ca:5e:a0:01:9d:55:6e:ca:32:a3:1b:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:A4:D7:8A:FB:28:51:72:1D:16:70:5C:AD:C7:68:54:9A:C3:BB
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:7e:85:6e:6d:85:a8:f9:39:7a:75:ec:5e:e0:0d:31:ec:
4c:6a:9d:66:1e:4e:32:a4:33:b3:d2:82:fd:f9:02:53:78:95:
c8:d6:83:c1:e3:bd:fa:70:b9:fb:f7:0e:d0:57:98:07:7c:fe:
7a:fc:e4:e6:6c:d2:1b:54:71:65:48:9b:00:26:7f:4f:30:80:
ac:fc:f0:c6:0c:41:85:ba:3e:cb:e9:00:c8:9d:2b:17:5a:b6:
28:71:7c:be:bb:df:b1:22:61:70:1f:c3:f6:35:b9:30:b2:a9:
28:37:c4:44:13:66:3a:86:03:7c:1b:f9:06:ab:83:75:8f:03:
f6:82:e4:f5:9c:4b:97:51:1c:cc:4c:92:1f:b2:21:05:98:f6:
dc:f2:fd:2d:7b:ab:77:39:52:37:0a:75:6e:d2:14:a5:f6:b9:
3a:8b:f8:c0:2c:08:62:bc:c2:48:ed:ee:76:11:07:ab:ef:7d:
0a:2f:8a:cd:94:38:1d:49:0f:29:a4:c6:83:0d:a4:79:ba:f9:
a9:f1:e3:cb:11:0e:75:c1:f0:54:37:2f:ea:b3:f3:36:25:c2:
b0:cf:30:f6:10:2c:cd:48:25:37:53:61:f4:9a:00:92:84:99:
8f:da:be:ef:e2:9d:89:92:3d:83:e7:1e:d5:eb:50:d3:7b:eb:
12:94:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:46 2026 by rpki-client