Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: JlfbH1gdIkC7A3w/BNJWGiz3++8a5oqiYKdtW4tttlw=
Subject key identifier: 35:22:87:46:3C:9E:3F:EB:8D:25:E5:80:9D:23:4A:4F:D4:1F:F1:07
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 019D27047EABEBEF93EF7F032617521A78F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0E9B
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: 1zbSrO-R5EPLaorcxYcNiQyN3i4.roa (hash: jSlaVuG5yvioxNNHW15Hf2Zmbh+CJCUdDeZRZAfs7g4=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: 8Bidc0R3Z9gHfFryTmNcqfO4CdMozTBt4oWLtyMdJEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7e:ab:eb:ef:93:ef:7f:03:26:17:52:1a:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=352287463c9e3feb8d25e5809d234a4fd41ff107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:54:00:b6:c8:62:a5:31:c7:9d:6b:eb:2c:
ba:ce:92:63:9b:9d:f5:70:01:8c:76:3d:17:71:70:
b3:99:6e:52:7b:ad:e6:7a:65:06:79:8b:67:a5:45:
ae:7a:1f:40:ce:2c:e1:90:66:24:a3:57:6e:df:ae:
0d:ae:23:7c:46:52:c8:d9:15:7e:0d:32:b1:fa:d1:
49:4c:f0:a3:23:48:6a:0f:21:81:c3:3c:f3:a0:d9:
e8:5f:cf:33:2e:db:26:f3:59:10:6a:95:fd:ac:cd:
62:b7:b7:d8:74:aa:0d:fb:69:55:a6:9a:72:e5:9d:
a6:ca:19:2e:77:c5:64:3c:82:1a:9e:44:dd:c5:fd:
f3:22:2e:cf:ad:41:7d:03:b8:7b:35:62:f5:08:a6:
fc:f7:b9:6e:14:94:bb:4c:05:58:17:ab:e3:ac:60:
7c:49:a4:72:41:b6:0b:d8:83:1c:e1:8c:f8:e6:84:
65:be:f2:6b:cc:91:34:5b:6f:d7:f7:06:d8:bd:01:
a5:06:4d:89:6c:7e:26:d6:a9:79:a3:82:d8:db:ac:
12:b8:1c:c8:fd:7c:a5:01:d9:04:f0:ce:32:ab:07:
d2:95:8c:2b:87:0d:dc:1a:e4:81:45:0b:03:a7:78:
11:bc:f7:61:e9:fb:0e:25:76:f5:63:8a:0f:7b:b9:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:22:87:46:3C:9E:3F:EB:8D:25:E5:80:9D:23:4A:4F:D4:1F:F1:07
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9f:c5:bd:eb:76:fe:96:1c:c7:5f:36:22:30:bb:f9:1b:2c:
f9:a1:5b:d3:ad:ac:2a:73:d1:71:71:49:23:42:f8:07:05:40:
75:8c:99:7f:82:86:fe:7f:d6:e8:c6:e3:9d:8b:0d:a3:7a:47:
72:78:e5:be:a5:12:bf:04:87:9e:03:60:08:7e:6e:a6:ef:b1:
d2:01:c0:67:d0:a3:75:81:75:fe:fb:23:06:1e:8d:32:b9:c0:
71:af:f2:d8:06:6d:3e:f9:4b:a5:2f:41:92:82:4c:0a:95:48:
4b:29:f4:e2:ec:86:f1:b0:85:77:2c:08:cd:a8:1d:f4:ac:dd:
bc:72:53:a3:89:87:ff:66:37:86:7a:77:9e:2a:fe:06:db:95:
94:d2:47:ff:f7:15:1b:81:cd:0b:db:e6:f8:9d:d0:8d:73:c2:
9a:4b:64:f2:5f:f6:a4:d4:91:2c:94:2f:be:d5:41:db:f4:30:
d5:39:b6:26:06:2c:50:28:54:6c:9d:48:59:06:95:b4:9e:5a:
d0:0f:d1:dd:4c:b7:0a:81:74:a1:52:25:80:c6:e3:53:56:74:
c9:37:f6:30:a8:73:56:24:fd:7e:c6:49:dd:3f:03:e4:b0:58:
4c:cc:e6:fb:bb:eb:66:5c:0c:55:e8:73:9f:00:09:93:1d:2c:
3c:7b:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:42 2026 by rpki-client