Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: AF3F4f8RkK6Wq7pBK2UGtCU6BnzDOMGTpt0jBef8pbI=
Subject key identifier: 02:AD:9A:C7:A5:0F:85:D2:9D:77:D3:51:51:47:61:57:CD:19:CC:B2
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019E1DFE1C87D4496A982610D2569F2777A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:00:53 +0000
Manifest this update: Tue 12 May 2026 21:00:53 +0000
Manifest next update: Wed 13 May 2026 21:00:53 +0000
Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: laXbtIawAx0fkEL0z1OTw4b/Y0+E61gglLg7QbKMsEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:1c:87:d4:49:6a:98:26:10:d2:56:9f:27:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: May 12 21:00:53 2026 GMT
Not After : May 13 21:00:53 2026 GMT
Subject: CN=02ad9ac7a50f85d29d77d35151476157cd19ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:7b:c2:e1:ae:fb:0b:ae:84:f4:40:81:99:
c8:f6:81:68:e0:7a:52:01:89:ec:a9:47:be:62:f0:
ca:83:3c:14:a3:e3:4f:fb:65:60:af:24:58:7b:12:
7c:4d:fb:03:5c:3d:88:c8:1e:4e:07:74:fc:1c:9e:
94:ad:99:92:d3:0e:4e:a6:95:82:78:81:9a:11:b7:
94:d9:d9:8a:93:28:11:39:cf:f2:c1:dc:07:58:c6:
b9:45:20:c3:8e:d1:e5:c3:f5:7c:37:a5:0b:0e:db:
4e:14:11:18:2c:b5:c1:1d:db:fb:61:18:d3:9d:b1:
c2:56:49:10:06:e8:3e:5a:e0:d9:33:fd:19:4d:96:
52:f1:fb:1e:d5:27:80:e8:94:fc:d5:29:7c:ac:28:
b3:8b:e9:01:a7:6a:85:c1:69:09:d5:b8:6c:b2:2d:
05:bc:0a:6e:0f:65:58:af:78:7e:1b:6a:b9:e0:e5:
a3:84:13:35:c7:e6:d1:d3:d5:bf:78:44:67:df:cd:
ab:bd:99:c8:cf:08:6e:16:b6:45:41:8d:26:ee:dd:
e4:e4:e7:da:8e:f3:bb:12:3a:32:10:87:66:47:03:
0e:80:c9:f6:aa:4b:41:50:71:0a:d0:1d:14:56:9f:
20:32:d7:fb:bf:22:c0:43:41:b9:97:56:a9:e3:0b:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:9A:C7:A5:0F:85:D2:9D:77:D3:51:51:47:61:57:CD:19:CC:B2
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:52:5f:fb:05:84:de:09:88:ad:eb:71:1d:4c:99:dc:1a:2d:
91:52:eb:fd:2d:b6:2a:b7:cd:bd:a8:98:55:fb:ea:a2:1e:07:
37:ad:42:2e:31:15:16:8e:77:95:65:53:e1:de:bb:29:0a:eb:
ed:a7:c1:f1:64:57:6e:02:83:98:77:1e:e0:b3:fa:27:bb:96:
fe:f1:15:7c:92:5e:39:21:1a:a0:60:bc:2d:39:1b:26:d6:91:
62:a4:71:70:86:4d:d3:b2:64:f6:e1:60:31:c2:d6:87:f5:cf:
f0:2e:0c:9a:96:cf:89:20:69:00:2c:76:6c:dc:ad:a0:b8:5a:
bb:ff:1f:56:95:7e:85:f0:b5:7c:22:2d:34:30:2b:50:2f:5f:
b2:75:7a:a5:13:1d:d2:62:62:fe:c9:1a:89:7d:03:92:68:1b:
c0:4d:be:df:d1:a0:6f:c9:eb:c6:a0:40:b4:37:2d:ac:f5:d2:
02:f5:2c:e9:28:3c:b5:44:04:f0:67:c6:43:e9:11:1b:64:ca:
5e:96:45:8e:0f:0d:f4:f1:2f:c8:e9:18:03:5d:c8:b5:0a:96:
b2:62:4e:a0:74:23:ca:96:65:c5:aa:c1:5f:23:fe:7f:81:b5:
ce:e7:69:3f:93:9f:07:e9:7a:cc:ea:b1:e4:5a:59:b6:47:ae:
cb:6a:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:17 2026 by rpki-client