Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: ccFEqzKtBDrmIsXDloLTSOV3LD46XBeZPGforu5zYAM=
Subject key identifier: DF:B4:94:BB:4D:8D:9A:E3:DD:86:92:90:90:7B:53:48:CF:CD:B5:58
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 019D296108EA17AD9EF7F92429BC90196205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 0840
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: sShn8I6ns49xZ7UhjXI2RchWfs0CTZEllCK1PZAvyrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:08:ea:17:ad:9e:f7:f9:24:29:bc:90:19:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=dfb494bb4d8d9ae3dd869290907b5348cfcdb558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:54:6f:7e:16:1d:a6:b2:04:7f:14:61:a0:
a0:54:4a:67:f6:11:95:dc:a8:97:f1:3f:85:59:f4:
c1:41:5f:6b:af:9c:06:cd:06:17:29:2c:bf:26:01:
23:85:f0:44:de:d2:79:21:42:3d:45:52:cf:33:72:
1c:6b:ea:ce:03:e9:11:37:f7:dc:7d:38:71:a0:5a:
c4:b8:5a:db:80:5e:0c:76:f9:9d:61:81:17:ef:f4:
d2:6e:ac:5f:d6:14:73:eb:89:3a:6b:e3:30:f6:1b:
89:94:5a:f8:b6:9b:ab:85:35:79:fa:20:7c:06:af:
f1:18:2d:b7:48:e9:f9:44:0e:02:1a:43:d6:73:76:
7a:06:99:8d:dc:4a:8a:7f:a8:bd:5b:4c:0c:6a:d0:
a3:5e:74:71:ed:0f:69:da:0c:4c:9e:1c:d4:44:b8:
fb:61:73:80:46:5d:c8:39:79:6f:c7:03:59:dd:ee:
fd:0a:82:92:2a:b0:77:90:d2:e4:ab:ca:e2:1f:ba:
79:1e:be:55:2c:3e:22:19:6d:0b:90:00:3d:f0:eb:
be:d0:81:4f:12:47:9b:c1:ea:25:84:f2:28:e1:b1:
83:3e:ac:c0:76:01:86:e3:23:cf:95:54:a2:38:53:
32:e8:ad:92:f4:72:47:b3:03:7e:cb:87:1c:12:04:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:94:BB:4D:8D:9A:E3:DD:86:92:90:90:7B:53:48:CF:CD:B5:58
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:a6:3e:2f:7e:ae:75:99:88:95:c3:35:ef:15:66:a9:5e:
1e:e3:2f:22:13:62:f6:e9:0d:04:e7:97:8c:05:9e:39:66:a9:
6c:c5:86:f1:2e:8c:6f:33:44:57:7f:fd:0a:8d:32:6c:83:be:
ad:34:02:04:13:28:74:18:58:bd:24:59:de:95:2f:c3:35:6a:
4c:db:59:a8:db:95:59:66:87:be:87:67:15:28:11:53:51:f6:
ab:d0:4c:50:e5:c3:35:22:8e:2e:33:e6:fd:17:20:b1:e9:7f:
34:92:98:7d:35:2e:46:f8:22:ca:5c:4a:6d:a6:4e:31:fb:ed:
c1:50:59:ff:49:b7:e6:c1:8a:fa:c7:8c:1f:e3:06:6c:54:de:
59:42:70:aa:cc:ad:99:ce:ed:2f:b1:3d:96:07:4e:d0:47:29:
35:18:c2:01:8e:81:42:64:b0:44:e2:bb:e7:6b:8a:79:6a:f0:
c9:65:f0:18:ab:99:e7:7b:6e:c5:8b:9d:74:7b:24:11:ff:d2:
2e:10:ea:b9:23:d3:a7:a7:27:67:f2:8f:90:f4:1c:bc:9c:eb:
87:80:62:9f:d8:5a:0c:47:b5:a6:d5:bc:49:52:cd:81:5d:7a:
85:7f:c7:27:95:d6:d7:69:8f:34:04:83:e8:cf:88:eb:b8:83:
91:49:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:58 2026 by rpki-client