Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier: HzOrz0mnJKyWvobWQkEZ1+/+t+vXuUg1hc/r79GYPj0=
Subject key identifier: 47:FA:5D:A7:AD:00:84:DB:64:DD:12:9D:8B:D1:8F:B7:21:65:6D:CA
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 019D27E0543AA25FE58391B9DCD687EF571E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number: 0843
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: At+rumBor063MgBlsNagG5RkbPXdyBcWnPFoHbFu/Eo=)
2: RAfVG18yCt4jh5FG1I0sWJIfckM.roa (hash: Wp606GEzY+EhNjoXu6RVUaxY49i31QSSjn97TR3qURg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:3a:a2:5f:e5:83:91:b9:dc:d6:87:ef:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=47fa5da7ad0084db64dd129d8bd18fb721656dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:43:23:8b:99:9e:61:b5:fe:7c:30:81:d5:
5a:35:1b:ab:af:04:c7:19:90:ca:e5:a6:9f:ec:02:
14:67:dd:5b:69:78:2f:35:e0:43:e9:f3:9d:a0:f4:
d5:dd:f0:1d:a8:84:98:45:6d:8b:ca:21:e2:13:85:
51:c2:c2:f5:df:a9:07:a1:0d:88:14:e3:55:7d:56:
14:bf:78:3a:a2:7c:66:b9:36:f4:e3:c0:b7:04:f2:
e8:cb:ce:79:36:a5:7f:b8:e3:65:06:44:8a:a9:08:
6d:45:00:d9:61:86:f8:cb:b6:f6:5d:54:a8:fc:5e:
d2:98:5e:9e:2f:62:98:c0:b3:f4:03:2f:12:6d:05:
21:b2:04:3a:93:8e:07:0d:7b:75:26:a0:6d:22:66:
f6:d3:d4:cf:5b:7b:d1:1b:91:c9:8f:40:fd:51:c3:
59:0a:95:f2:f0:19:4c:75:34:dd:9c:4a:3e:b7:a2:
0f:54:db:a9:f9:27:49:1d:43:7a:80:f9:1c:a2:70:
31:e7:73:b5:a3:48:75:e3:0e:18:74:e5:26:c6:33:
59:6c:74:f4:31:03:15:cd:c8:d7:d9:a5:6a:ea:b4:
74:5b:e8:fc:2f:af:c7:13:69:2f:6f:39:d4:7c:dc:
fc:08:26:f9:46:65:03:0d:7b:3f:0d:48:24:73:74:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:5D:A7:AD:00:84:DB:64:DD:12:9D:8B:D1:8F:B7:21:65:6D:CA
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:fb:b0:7d:21:49:57:fa:cd:9d:a6:fb:bc:85:ad:16:92:
c6:be:2f:3e:d2:4c:92:5a:eb:a1:38:ac:0a:73:be:33:b5:fe:
f7:7c:6c:6a:f6:ce:e5:ac:26:33:1e:f1:27:e0:6e:c7:90:53:
ad:ca:49:d5:e8:e3:53:73:21:fa:94:b7:3e:16:3b:2f:d8:d3:
0f:5c:4a:aa:f3:20:c4:70:83:10:65:78:42:d8:f6:00:29:36:
fa:3d:8e:a1:c2:d3:b7:7d:03:43:97:27:15:a3:27:96:6f:8b:
34:cb:a4:c1:3c:3c:1e:ea:ed:29:ee:99:b1:5c:14:86:39:10:
97:87:4c:be:a3:bc:f5:71:0d:aa:cf:49:c8:a3:59:d0:f2:f8:
38:ad:00:70:8e:1f:9f:8f:9f:42:79:7d:25:4d:16:2e:4a:35:
1f:9c:e5:94:73:4e:04:6a:bc:d8:7b:83:16:84:0b:c1:6a:48:
1e:be:81:8b:07:31:d5:07:06:fe:42:b1:7c:aa:c0:e0:d4:09:
49:a1:f2:7c:5c:8c:9b:f7:60:e6:16:27:77:64:49:43:32:a5:
e9:43:9b:02:af:8f:0f:a9:03:23:aa:91:c5:72:93:c6:3b:7a:
76:75:d4:e6:c5:90:81:fa:58:92:36:07:07:76:18:fb:b7:77:
5d:78:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:55 2026 by rpki-client