Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: xheM7+rPNNRO2zzSZTNp4/3T6+VSOdq3NFoYYqmyo6Y=
Subject key identifier: 7E:57:15:FC:A4:F8:17:6F:12:5E:E6:9E:78:3C:61:EA:DB:67:B2:32
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019D273AFAA3D64524E080A8C8C4DF31EAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 14E5
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: zKc6sSReE+imMHCoWlrow1T2feavNNyMy3BOVpDe9Z8=)
2: wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa (hash: ZLevBUhsYa+Tvumsittqd4RBNaIZU4P2yF0LkML8N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fa:a3:d6:45:24:e0:80:a8:c8:c4:df:31:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=7e5715fca4f8176f125ee69e783c61eadb67b232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:6c:42:f4:b5:8b:24:2e:b1:cb:93:37:6b:
e1:9e:3e:39:a4:9f:d7:51:ba:71:e4:f1:db:cb:e4:
7a:a7:ad:0c:37:4b:f6:88:24:10:df:69:eb:9a:e1:
e9:57:1c:b2:64:df:8b:74:84:50:ee:21:ea:88:bb:
3b:f9:15:f0:85:69:42:96:a7:2e:57:30:a1:83:cf:
13:7b:12:4d:6a:5c:c4:7b:f8:87:1a:a6:da:df:86:
f9:fb:6d:1d:87:f3:2e:4e:5f:75:7a:55:ff:68:d5:
07:4b:ff:93:ce:f7:74:ad:b9:77:97:68:67:bc:17:
35:75:4d:74:36:92:3f:93:9d:2b:2d:f5:3a:46:cb:
ca:86:af:8e:42:ff:99:98:b9:fe:40:82:ff:a5:e7:
2f:52:72:ea:f8:6d:09:c2:2f:c0:7c:a2:7b:fe:c9:
d5:49:ac:17:c5:7d:22:2c:56:48:0a:27:ab:b5:45:
95:ca:96:84:cc:2d:0f:ea:1f:9a:e3:18:e2:6e:95:
96:e6:9b:92:ab:26:3c:21:cf:ca:fd:aa:e2:9e:44:
45:ac:8a:74:24:7f:f9:20:88:22:3f:7f:66:9b:a9:
ff:ae:6e:6d:04:23:ce:1a:18:86:c2:cf:54:36:3c:
5b:d7:1f:e0:53:f9:eb:43:f8:03:3e:85:05:67:c6:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:15:FC:A4:F8:17:6F:12:5E:E6:9E:78:3C:61:EA:DB:67:B2:32
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:f8:0d:58:7d:e6:37:42:d9:e2:1f:32:9c:2a:e8:1a:33:
04:a9:64:9b:b4:e4:1e:e1:d0:a4:fa:a8:f5:4d:fb:75:5a:bf:
96:69:53:53:1a:6b:51:53:c2:0f:7f:32:40:24:d1:5a:2d:b0:
ea:78:7f:91:f2:3c:c8:62:99:43:08:3c:0e:36:8c:97:94:17:
8d:ed:12:a2:1c:12:36:77:c7:95:6d:89:b7:77:bd:ec:e8:42:
56:95:d7:b3:1d:55:51:37:2b:71:65:51:5a:f1:87:ca:38:4e:
c0:b0:65:e8:4f:f8:d8:3d:ae:72:8a:87:e1:ab:1a:ba:a4:54:
ea:24:b2:8d:af:c9:e8:38:41:2b:63:91:ab:3c:91:c4:b5:48:
7c:87:16:17:e4:73:4f:4c:01:29:7b:60:dd:42:8c:2d:da:a4:
02:ff:c0:4d:68:6a:9a:66:cd:bf:76:6e:b5:4b:45:eb:d2:8e:
6b:a0:c6:e7:8c:53:23:80:d1:70:20:f5:53:91:75:43:24:aa:
81:e3:0f:85:d0:14:58:c6:9d:0f:03:09:70:04:99:8f:67:7e:
db:73:72:3b:49:3d:af:70:29:a0:23:96:5b:ed:80:b0:d5:c7:
84:66:80:f8:dc:19:b9:40:c5:82:6c:80:8b:d5:ce:10:d5:35:
e2:6a:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:48 2026 by rpki-client