Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: pmrcOc2bNzuK0r60YQO22U3Rx8+0p6aegwhisfrEMFQ=
Subject key identifier: EE:BD:C8:C1:44:0B:AC:DF:CC:DD:81:17:64:11:DF:56:B6:9D:19:34
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 019D26CCC477C648E4D6E29E862F86FF1CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 0509
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: Aa2IxorzT-f0qos6APae9lJPvis.roa (hash: 2snsQOp64NXZRDIW60ynJJ/L0sWlwOoUe2QkF5SYR1Y=)
2: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: 6RbGvbootm/KjbtH61MDxSS6wM32gr2+d1NmFzCTaaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c4:77:c6:48:e4:d6:e2:9e:86:2f:86:ff:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=eebdc8c1440bacdfccdd81176411df56b69d1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:60:c3:64:a8:c9:f4:a5:9c:24:75:43:69:
ad:26:5b:cc:ca:a5:b4:0c:6e:bf:27:90:c7:56:d7:
18:30:84:29:e9:21:b2:08:1c:17:04:de:21:23:ec:
01:38:63:1d:2d:7c:39:1c:9d:85:87:e2:41:1d:e6:
7b:4e:be:90:c7:58:3e:bf:30:3c:77:3d:4a:cd:20:
20:05:9f:29:0a:56:ae:c8:de:42:d9:4a:e4:ce:89:
02:86:b0:1b:c6:c4:07:0b:b1:b8:0a:88:9f:bb:03:
07:dc:2b:b3:fe:4b:cf:70:b9:49:5b:27:a1:be:0a:
4d:24:77:92:2a:ca:ed:e5:d2:ed:ec:9f:de:db:1a:
9a:51:2a:f2:2b:ba:bb:ba:b9:ea:43:2b:3b:e6:31:
86:a1:fa:da:37:a0:84:24:c3:16:ff:b1:5f:2c:a5:
16:6e:f5:f3:75:2d:54:b8:99:20:84:e5:4e:21:65:
ce:47:17:90:b3:a5:eb:0b:46:f9:4f:fe:a8:0c:29:
84:0e:34:ba:cf:8e:3f:5f:59:61:c4:a7:61:c1:ed:
85:29:dc:4d:5f:ba:8e:9a:4a:a7:be:6e:f1:74:12:
b3:41:5f:8e:ab:21:e5:57:99:2d:c4:65:90:dc:f5:
63:8d:e5:2b:40:7b:c4:19:19:62:c4:f5:47:e5:44:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:C8:C1:44:0B:AC:DF:CC:DD:81:17:64:11:DF:56:B6:9D:19:34
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:3f:09:1d:23:b8:c0:62:c3:56:67:2c:b9:ff:3b:23:9a:
8b:88:d9:f5:a6:f7:19:d3:43:3c:b4:53:19:81:af:cd:d7:44:
65:4a:31:8b:28:cb:8d:4e:40:e5:cc:07:87:d1:75:99:95:d6:
47:2f:b4:49:13:d8:16:d0:99:c0:a9:ec:98:59:3c:0c:cc:31:
80:15:85:7b:c2:c3:7f:a3:c6:ff:ab:13:d5:38:9c:41:90:6b:
65:0a:de:41:b3:fd:ff:ed:40:e3:3b:15:f4:a5:5d:76:24:50:
89:b1:63:91:a9:ed:65:f6:67:10:7a:89:32:80:ba:b6:05:9e:
79:95:6c:c5:6c:2a:07:fc:b8:00:53:43:71:d7:c0:ef:74:23:
97:9b:c0:c7:93:ea:a5:c1:69:0a:2d:52:34:0f:d8:45:d3:a3:
8c:36:7a:c3:dc:46:ab:77:11:0a:45:e6:3f:3a:c9:96:0b:23:
8c:dd:b3:d9:d8:45:7a:b4:5f:4a:ae:27:02:d2:79:c9:c5:75:
3f:8f:2f:63:91:46:ee:64:40:b6:90:0a:1b:46:37:57:1f:64:
6d:4d:31:3e:be:ed:c3:e7:92:23:65:71:e1:50:f2:5e:7c:98:
06:f6:60:3f:54:7a:b7:ba:47:28:1c:87:4c:21:c5:60:ba:a1:
10:93:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:36 2026 by rpki-client