Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: oVv4uxujukw/qtSRunm3nXvXbLkpmTbwZStwsyNW+go=
Subject key identifier: 9D:19:29:24:58:40:F3:69:0C:1C:1E:CF:5D:A8:C8:AE:57:DB:EF:5D
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019D28BBC01553E2F923F6625233089A750C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:26 +0000
Manifest this update: Thu 26 Mar 2026 06:01:26 +0000
Manifest next update: Fri 27 Mar 2026 06:01:26 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: bIVHOcAIofzlmRGzRDHQ43goeLPLSyxoSLRTIIcmKyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c0:15:53:e2:f9:23:f6:62:52:33:08:9a:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Mar 26 06:01:26 2026 GMT
Not After : Mar 27 06:01:26 2026 GMT
Subject: CN=9d1929245840f3690c1c1ecf5da8c8ae57dbef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:9a:4e:3f:c6:1d:95:8c:76:cf:d7:8f:11:
00:2e:43:a1:4a:50:64:fb:c9:f2:1f:b8:fe:a6:00:
d5:0e:b8:1b:ff:e2:77:f4:bf:b9:79:45:75:9e:a5:
ee:69:b6:09:d3:cb:56:1b:04:74:30:60:d1:bb:77:
0d:49:b2:1f:63:1a:02:3b:69:31:40:03:66:24:2e:
b4:08:31:ff:1c:1e:d6:a2:4d:d4:bd:49:50:5d:53:
72:3e:c9:03:a1:25:ff:28:22:86:f0:8e:a7:de:61:
cc:6b:14:0a:1d:7c:35:05:2b:8b:a4:b8:a2:72:54:
e6:45:fe:10:ea:c2:a5:c9:b4:13:33:3c:40:49:f9:
42:4c:c4:a4:1f:0e:4d:e5:08:ad:63:63:c2:af:45:
30:de:0c:22:72:3a:df:a6:2c:5c:8a:13:54:90:c8:
da:1a:ad:91:cd:cb:e8:19:b2:e3:49:2b:00:6d:6a:
d5:d4:90:5e:68:18:c3:df:df:94:f3:81:6e:c9:72:
28:ad:05:1a:93:57:af:b9:a0:5a:e1:e5:ba:59:fa:
2c:ac:bf:90:6a:25:8a:6c:50:f7:c4:87:15:90:da:
b3:54:40:cf:54:1a:ae:1a:47:e5:ca:66:1e:9f:a4:
86:64:f9:e0:8b:b3:10:7e:22:e3:e1:b6:09:c9:f5:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:29:24:58:40:F3:69:0C:1C:1E:CF:5D:A8:C8:AE:57:DB:EF:5D
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:ca:ed:a9:6f:d0:07:14:a6:56:d3:d7:3c:32:d4:c8:27:
b4:64:89:fe:cd:8d:4f:a5:c1:cf:ef:c4:c2:6c:11:55:6c:f1:
7c:9f:16:93:3e:81:e7:e7:f9:b9:a6:93:4c:8e:c1:34:43:11:
0d:ee:01:76:6b:3b:7a:62:f5:57:b9:15:71:9d:44:54:a9:e8:
13:f0:5a:69:77:4a:a3:9e:dc:c0:e3:50:52:c9:61:d5:51:5b:
7d:fb:81:5a:44:59:11:56:b3:97:3c:95:d5:03:71:96:a8:31:
8d:4c:f8:12:e5:19:ca:86:6a:bc:43:76:73:0a:41:81:d3:0a:
a5:97:89:1b:15:0b:9f:71:8d:0e:ad:2b:77:b3:1e:3d:dc:71:
e0:8a:84:d3:7d:f7:40:01:64:4c:15:19:8a:2e:9c:f7:aa:5e:
12:78:de:1d:87:55:28:eb:52:75:83:e4:6e:e4:83:55:8a:34:
71:d3:35:48:59:c4:e9:90:b1:2a:2b:18:ff:ca:03:dc:cc:a8:
b8:3f:49:b0:30:b8:31:87:df:d9:3b:91:50:d1:67:af:f7:7f:
26:66:18:7f:ff:38:13:31:80:ba:9d:13:96:23:fd:d7:71:bf:
5d:38:d8:0c:b5:37:08:2e:59:b0:d0:91:c0:71:2c:86:cf:27:
58:cc:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:01 2026 by rpki-client