Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: LZzhwQUQ6E+hIkMvrUdXnJLHDZBljpFCi99R0ufCLWs=
Subject key identifier: 00:61:F9:AC:07:9A:01:39:1F:71:A8:C5:C6:2F:78:FE:D3:9E:2D:14
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019D29291D43E9E87B4F4BA89250DBB26EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 1626
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (hash: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: 8dXTKRce7mhDp225sK8d90RQkxuak6YkCw/YsUuf7qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1d:43:e9:e8:7b:4f:4b:a8:92:50:db:b2:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=0061f9ac079a01391f71a8c5c62f78fed39e2d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:d6:d2:6b:f5:2b:58:04:c6:c6:1a:58:4e:
06:55:da:fc:17:d9:ea:66:e4:c1:1f:c9:3d:89:99:
ad:70:f3:e0:0c:97:05:8d:6c:71:80:31:8e:50:d9:
1b:78:d0:06:6f:7d:dc:55:0b:23:d7:74:72:bc:16:
fa:4c:b8:3f:dd:b3:be:af:0e:aa:a0:d1:75:c2:2e:
f1:43:c8:72:81:bc:f8:9e:04:b2:ee:f7:49:b0:0c:
c4:7e:f9:04:91:8b:84:4b:62:4e:76:a4:8e:a4:01:
2f:b1:fc:ee:45:8f:29:c8:69:e1:d4:c0:07:af:24:
db:85:e9:d0:d6:b6:c7:e7:be:09:1d:d6:7b:66:7a:
55:e9:33:ab:d1:aa:3f:8c:78:35:81:29:e3:33:bb:
49:40:31:f9:fc:b4:0d:08:d3:0b:5c:3a:ce:61:00:
38:aa:8c:57:f8:7d:65:8e:a6:27:54:a2:49:1f:99:
9d:8b:4e:9b:af:82:39:1d:e8:30:ab:52:98:a7:32:
65:81:ab:d8:fd:15:c5:8e:87:76:85:b5:15:ee:12:
05:b6:ed:48:90:e7:ae:32:f0:02:b5:ce:8e:c5:8a:
fd:cf:15:4b:25:e0:51:6a:92:a2:b0:bd:d1:96:7d:
be:2e:7d:68:f1:b0:e7:dd:0a:4f:51:c3:50:5e:8b:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:F9:AC:07:9A:01:39:1F:71:A8:C5:C6:2F:78:FE:D3:9E:2D:14
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:af:3c:55:9d:80:4f:13:89:f7:9d:ed:c4:2c:c4:fb:99:
64:a9:0c:25:a3:3d:5d:c3:89:c2:5c:00:29:b4:79:cb:8e:17:
4c:c5:e0:d7:60:60:e4:07:ce:bd:a1:76:43:ff:97:6c:a4:ff:
85:ec:05:8d:3e:dd:f0:d4:35:d4:d2:d3:b3:ed:ac:25:df:62:
b4:47:29:d9:5b:38:d6:39:de:02:bc:92:df:24:c5:87:1c:72:
7a:c4:bd:47:bc:df:31:69:65:3b:6c:ed:75:98:35:bc:17:77:
c4:e0:33:90:b2:ad:7e:33:e5:43:d0:0c:17:03:8b:7c:90:99:
fd:c5:47:26:9a:03:5a:fb:2b:e3:75:90:4d:0a:e5:ad:5b:f4:
34:59:d5:14:90:96:1d:8e:77:63:dd:19:a4:8b:45:9e:f4:40:
55:19:7b:9e:5d:52:06:1f:39:0e:24:07:0a:16:19:35:e6:a7:
c9:3c:f6:ec:38:56:5e:62:d2:77:7d:2b:d4:1d:37:6c:e8:98:
a3:c7:ae:5f:c7:f7:72:c8:28:88:21:30:76:67:70:86:01:45:
4d:fc:44:82:70:5f:27:d9:80:10:94:fc:aa:0e:c5:fb:99:b8:
01:7c:b2:a7:6c:a6:54:17:01:41:ba:98:45:9e:de:1f:1c:ab:
a3:01:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:54 2026 by rpki-client