Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: 0tfuxbYUJaUCbdtW9DILDpuDbqnVPKgRKf+bNP41ypM=
Subject key identifier: 4B:C3:03:DC:65:5F:61:07:77:D6:F2:78:34:98:2A:BB:D3:E3:D4:9D
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 019D28BB5155CBB5AAE9351F7585B078AC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: 2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa (hash: m5M46o3a75vj6oPFWSqdzUbza/mY+wrNQURerudzAu4=)
2: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: iDnzTSdWbsptD64WpDD3+zQVsxkkp0yC+uTlOGwFGcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:51:55:cb:b5:aa:e9:35:1f:75:85:b0:78:ac:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=4bc303dc655f610777d6f27834982abbd3e3d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:ae:5e:95:cc:b7:56:40:7b:93:5d:16:0e:
a5:f8:f3:e0:89:6e:ad:cf:34:2a:fb:c1:e5:e2:c5:
da:07:a6:c8:ce:6c:07:12:ac:cf:6f:fa:55:8d:a0:
06:c5:d4:71:c3:01:d5:82:ec:b9:6b:6a:3d:44:91:
66:1c:df:a1:a2:0e:47:34:9e:fe:17:f6:4e:a2:a6:
5a:c6:91:fd:bd:b9:04:a3:83:d9:d4:b3:a1:b3:c7:
17:4c:76:a5:55:a2:6b:c6:69:d1:12:ce:ce:58:55:
1f:33:ae:16:5a:09:1c:f8:22:ea:19:05:ae:8e:15:
f1:7d:0b:b0:67:b2:98:71:51:d8:df:92:8f:11:f8:
d1:2b:db:5a:3c:82:d2:a5:ee:fe:93:45:b9:44:29:
98:cf:00:95:c0:7d:50:02:ac:45:f1:f9:d4:b7:70:
06:74:6f:fb:5c:8b:79:28:cd:be:93:63:76:07:57:
ba:09:06:2a:03:14:9e:a0:ed:29:7e:fa:3b:69:be:
22:e7:2e:27:08:1c:bd:f5:f9:66:62:21:19:14:d1:
20:2a:8d:ad:d0:e3:88:ae:e4:11:95:cd:ba:89:75:
45:bc:06:26:3a:8a:44:a4:62:88:f7:d9:69:26:f9:
f6:0f:df:c5:be:c0:6b:63:75:cc:d2:e4:19:b0:3f:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:03:DC:65:5F:61:07:77:D6:F2:78:34:98:2A:BB:D3:E3:D4:9D
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:6b:c5:fd:a5:88:f0:90:e1:76:a8:9e:a5:bb:98:dc:73:
4c:0e:55:d4:14:d1:99:f2:73:e4:dd:ed:bf:88:82:95:82:6b:
24:94:e3:b3:bb:50:1a:00:81:3e:b2:51:ea:f1:40:59:b8:6c:
56:7a:d2:41:d1:0b:3c:78:1b:8a:3c:37:a7:df:d3:19:52:62:
a0:8f:b0:d8:80:ce:61:5a:29:5e:b5:f1:d1:ed:d9:f5:de:12:
b0:9b:bf:15:79:fa:d6:d4:18:86:26:dd:fe:27:b3:d8:73:ff:
26:9e:2d:81:5d:36:c4:27:a4:8e:81:de:51:35:27:c2:bb:28:
29:f0:da:72:ce:ff:0b:10:72:5a:14:8f:43:7e:a3:f5:90:9c:
84:46:f7:7e:d0:98:df:eb:50:de:c6:36:c4:7a:26:93:9b:36:
2a:ae:99:cc:4c:02:7a:3d:16:94:65:d8:1a:13:85:e2:f1:07:
75:fd:a9:53:80:ad:9e:6c:c1:e3:ed:69:c5:78:f0:20:56:2f:
50:a1:ca:f8:49:ef:8f:e9:93:a8:1b:d0:f0:79:20:9a:b4:cc:
e7:c4:6d:16:33:34:bf:e1:38:cd:51:0e:93:20:57:08:be:30:
43:16:60:68:6b:7a:59:bc:8c:b0:88:ca:37:5c:37:7c:e3:fd:
93:74:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:11 2026 by rpki-client