Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
File: Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft (raw, json)
Hash identifier: MmvBJCHR6Pq+Vi1HP6n9ALwSG0v+maTjuVh9ZwTPokY=
Subject key identifier: 45:01:A1:9D:13:34:2B:92:5F:58:93:9A:C3:86:7F:D8:01:49:05:34
Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Certificate serial: 019D2884A362DC5E64E73A6BECC12D10DADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
Manifest number: 01D7
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl (hash: iAh6H8NjU9ViC9eAl+xuR34V9/B2xBpJaiKRqiZ+zdU=)
2: XCXL6tXhJ071vkeNMORNlpxzCuY.roa (hash: dQDGVzQSTYMoleKklgkYU+qVDH84olTQRNM1qoDrhIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a3:62:dc:5e:64:e7:3a:6b:ec:c1:2d:10:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=4501a19d13342b925f58939ac3867fd801490534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:df:20:15:94:d2:9f:fa:71:e1:47:56:07:
44:e4:83:09:23:0a:96:ed:9b:0f:c9:6e:23:80:b5:
0a:6d:72:1f:e3:e5:0f:fe:66:5a:73:b9:52:56:c9:
b5:c4:9c:61:dd:25:bf:fb:51:e5:10:a6:7d:28:f5:
97:dc:bd:56:5b:70:5e:f0:76:5e:df:e8:f3:20:93:
72:c9:f4:56:68:d1:99:6b:1a:c1:4b:55:37:19:07:
d1:d6:58:31:af:17:81:84:31:88:d3:57:be:5e:ea:
3c:cc:c5:21:d3:94:a1:28:84:d3:92:10:5c:45:5a:
0f:25:ef:53:ed:8b:8e:5b:20:1a:75:31:08:1b:4d:
9f:46:c8:bb:ad:ef:32:75:a7:fe:6b:43:a0:87:d4:
fa:58:f3:84:b2:4c:d2:b0:f4:cb:96:27:7c:fe:4d:
ae:40:d1:45:a0:bb:4a:74:fa:da:90:6b:82:e7:8e:
21:99:8b:a4:00:37:e3:ee:0f:ad:6a:70:f1:82:ec:
e2:a3:02:2a:90:76:b9:7b:14:8f:10:79:44:6d:72:
d5:a9:7a:8a:2d:4a:73:99:b0:f7:e3:db:6d:c0:fb:
d3:89:60:fc:6a:0f:38:f9:10:c7:a2:e2:c7:bb:1d:
88:e8:f5:06:10:2d:5c:28:cb:a8:3f:45:c1:29:06:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:A1:9D:13:34:2B:92:5F:58:93:9A:C3:86:7F:D8:01:49:05:34
X509v3 Authority Key Identifier:
keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:2e:47:a3:44:b8:e0:36:de:41:0a:2d:8c:07:67:82:6e:
c5:51:08:98:55:fa:b7:1d:2c:9c:b3:b8:0d:04:60:27:e3:44:
14:12:eb:a4:36:5f:d5:15:95:0c:2e:a7:fe:c8:ad:5e:80:c1:
ec:65:74:ce:fd:8d:29:44:00:14:c5:e7:6c:0f:43:94:c4:11:
39:47:1b:9e:ae:0e:a6:55:5a:8b:09:19:51:89:b6:2e:72:f4:
de:d8:83:f6:18:3d:44:6f:96:97:b9:d8:73:05:de:61:14:e4:
40:86:08:dc:2a:ae:b3:de:ab:9b:22:f7:19:fc:1f:79:4b:05:
d6:17:4c:64:4a:5d:e5:c5:0e:91:f8:e5:1e:9b:9e:b3:66:2c:
18:59:e8:b0:03:bc:10:fb:71:a5:1b:99:ec:79:8b:86:c1:f7:
cf:4c:cf:af:2f:8b:de:04:d3:39:a7:7e:b8:d1:d6:99:60:23:
6e:1f:fb:0e:81:80:b7:d8:d3:5b:da:c6:3f:f7:bb:08:3d:d7:
45:36:eb:3c:88:dd:46:4c:5f:4e:b9:8f:eb:47:ce:d2:7e:ed:
9a:aa:53:b2:e8:f9:57:b6:6c:b3:77:58:22:1c:fa:1a:3d:60:
eb:78:57:5d:6f:b1:46:82:06:13:de:04:0e:11:0e:40:da:5f:
9d:2d:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:42 2026 by rpki-client