Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: /NzBip/bXSOEBPZAlJ8GwZqXzf0s9Qug8t+hUoIHlsM=
Subject key identifier: DA:AD:28:F3:7C:5F:18:DC:6C:5E:08:EF:DD:95:85:DD:0A:1B:26:E5
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 01A0D34AA5B8279A78C1BC0671B672BB6E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 12:01:19 +0000
Manifest this update: Thu 24 Sep 2026 12:01:19 +0000
Manifest next update: Fri 25 Sep 2026 12:01:19 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: FhsSNYFJB2gwuYh2E18RNR3IOM0t7m8ZfupcFmnQDJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:a5:b8:27:9a:78:c1:bc:06:71:b6:72:bb:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Sep 24 12:01:19 2026 GMT
Not After : Sep 25 12:01:19 2026 GMT
Subject: CN=daad28f37c5f18dc6c5e08efdd9585dd0a1b26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:ca:65:25:0a:70:95:02:b8:f6:2b:4a:fb:
5d:06:70:bb:38:0e:60:9d:a5:64:e5:63:79:d6:63:
e0:3f:9e:33:b3:4c:99:31:98:bc:d3:b4:c2:74:e9:
de:f6:7f:8a:8f:f5:ef:ae:65:91:47:96:2d:e2:53:
aa:39:d6:db:58:ac:f0:08:7a:2b:6f:4c:f1:69:e4:
b0:dc:ca:9d:48:0b:16:57:b4:7e:1a:31:d6:25:b2:
82:19:53:37:2c:db:fd:aa:25:35:26:e7:73:96:6f:
68:59:75:1b:99:5c:06:8a:ea:79:67:90:d6:0d:3b:
ce:f5:51:e2:81:90:a5:7d:cf:07:d4:0a:8d:9d:36:
43:4d:97:05:4e:d7:15:e6:42:68:38:a7:14:29:c2:
f7:a3:11:5f:b4:05:1f:48:c9:c3:9d:af:35:3f:0f:
f3:ca:34:d6:e8:7e:ed:07:73:b4:93:e6:2d:5a:cd:
e7:3c:51:37:0b:4d:5e:ac:60:80:d8:6f:3e:36:60:
4e:0b:d2:cc:89:b1:e4:40:5e:0c:48:d0:9d:8b:60:
7b:21:9c:a6:c0:fe:98:66:5c:60:d8:95:1e:0c:0f:
a6:a5:63:20:a7:3d:f2:6e:7e:90:ed:9d:d0:cb:90:
42:83:ea:64:8b:af:b3:24:49:41:93:dc:dc:c2:e7:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:28:F3:7C:5F:18:DC:6C:5E:08:EF:DD:95:85:DD:0A:1B:26:E5
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ea:6d:a9:4a:77:ad:4f:f0:83:e1:71:6c:11:c0:1d:dd:5b:
80:5d:0d:cf:d5:fc:85:f9:d3:7a:08:35:1c:6c:be:2f:29:42:
36:a1:78:1c:a4:a4:c9:db:a3:04:51:72:a3:ab:0a:c4:ab:18:
4f:c5:c0:d0:03:50:5a:4a:db:56:f9:a7:05:8d:51:32:86:22:
89:ee:09:d9:21:3e:90:5c:93:ce:47:c7:8c:ff:f8:8c:c8:2b:
1d:21:52:58:c1:09:07:77:0b:18:c1:99:a4:cd:44:6f:3a:e6:
e4:25:39:33:d3:77:a5:0d:1c:80:74:c3:1e:30:61:20:36:b5:
0d:77:06:dd:9b:16:62:56:59:03:a9:1c:67:e1:82:93:64:fb:
9e:fd:d0:3d:c8:ff:6b:59:91:c4:f6:fd:73:0a:6a:2f:83:48:
65:8d:e1:50:3d:dc:ef:98:2a:83:7c:86:ec:12:08:e0:9c:94:
7d:14:c6:27:a6:12:de:8b:03:4f:51:86:9c:93:52:c1:15:3f:
6e:cb:d9:07:f7:69:52:05:59:50:e1:0d:5f:bc:ce:41:06:96:
1a:f8:8a:87:4b:87:4a:f4:b4:41:5b:c7:8b:00:6b:59:49:75:
3d:2b:be:c4:95:eb:fe:80:da:f8:36:0f:e0:34:ef:cf:bb:e7:
3f:05:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:44:59 2026 by rpki-client