Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: 5Xvi3B+Q5elYoYiMVPTBiQTQ4/vZpme4ZJW7a0DdDVo=
Subject key identifier: 29:10:78:E9:6A:78:E5:39:7A:32:6D:8D:44:03:43:8C:D9:15:B9:81
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019D27724576A2E34A2EA10627293D2278C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 1170
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: YorsJMFOpkJCz8Cz7uh6DW8xLyYIn5XRLrA+kWwemeI=)
2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:45:76:a2:e3:4a:2e:a1:06:27:29:3d:22:78:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=291078e96a78e5397a326d8d4403438cd915b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:21:db:1f:aa:5b:92:6a:ea:2f:47:b7:10:
fe:82:eb:c6:21:7d:2d:f1:fd:c8:a4:06:eb:99:46:
6c:38:b5:28:79:7c:bd:38:d7:d4:5f:05:7e:f0:7d:
14:70:b9:6d:c4:e0:db:cc:e4:34:b8:86:67:f6:3e:
a5:b7:42:b7:c4:59:4f:f6:c1:cc:24:f3:fd:6a:0f:
09:12:2c:81:32:e5:15:81:91:87:64:75:23:26:85:
4a:a4:27:24:76:70:8b:ff:d1:c0:90:4f:4e:0b:05:
69:0e:44:80:ee:5d:12:cf:88:8d:ca:41:96:bf:52:
b4:d7:7f:42:c8:77:e4:bf:04:0f:38:4f:5d:96:cb:
64:23:96:28:0f:69:6b:be:0e:75:56:af:37:f0:33:
bb:f8:66:f7:f1:4e:e4:32:d9:b8:08:38:25:9d:f4:
00:36:8c:5c:3a:a3:61:8a:b6:31:b7:45:81:82:e1:
79:00:e9:dd:39:0d:12:d9:38:e6:5c:b8:da:24:6f:
cf:2a:b7:26:6f:2d:82:06:73:fd:39:85:28:58:41:
af:45:d9:4c:73:03:60:91:53:52:69:43:e7:5c:5a:
eb:cf:5b:8e:aa:8a:fb:47:0f:0b:5e:93:73:ae:f8:
1e:2c:1f:be:f4:e3:cd:68:58:6c:39:76:40:aa:62:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:78:E9:6A:78:E5:39:7A:32:6D:8D:44:03:43:8C:D9:15:B9:81
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:37:09:e9:a8:b0:f3:a6:40:d2:bd:47:fe:2d:62:f5:32:
89:80:0e:96:f0:27:02:a4:3c:7e:05:70:90:63:79:68:2c:f7:
5d:49:0e:22:52:74:97:cd:d8:48:da:76:b7:73:71:d5:ef:ae:
1b:61:36:2c:7b:fa:09:03:35:80:a4:96:14:5c:bc:18:f6:98:
d6:38:2b:63:5f:14:47:73:b1:ec:f6:40:16:3a:94:ec:21:be:
f0:00:be:dd:4d:0a:76:ee:c1:f9:46:26:c4:3e:a0:e1:af:5e:
e8:cc:95:15:c9:12:bf:0a:c8:12:30:c3:a8:c5:ad:29:27:65:
c6:7f:9d:58:6f:fa:df:50:02:26:b4:b7:b4:61:60:16:6c:08:
db:39:e7:21:5f:4d:ce:7c:00:2f:9d:a0:97:3a:34:44:9b:a5:
03:13:40:a5:2d:7c:93:3d:b8:e7:ac:f9:fc:53:e5:51:c7:82:
5f:53:fe:48:2f:e7:d6:3d:95:c0:b1:df:c9:a5:23:ba:a9:be:
34:73:4f:49:c0:c9:91:b7:f8:36:13:34:eb:cd:ad:bd:7f:c5:
44:3b:3b:dc:ee:e5:fd:76:6a:b6:29:fb:bd:8a:83:0b:95:30:
a6:a0:f1:fe:c8:1f:b4:47:ab:07:bf:bd:29:56:57:55:c1:85:
27:7c:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:33 2026 by rpki-client