Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier: N6BqaDxdCSrwaJL4FAdOb1/AG0FZQ66f1XYkocH1eTg=
Subject key identifier: FF:1C:17:33:2E:3D:0D:80:10:AB:27:92:6F:7C:9A:B3:20:04:2F:CB
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 019D33E41C2BE4A9C37541FCC50332469160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 10:01:20 +0000
Manifest this update: Sat 28 Mar 2026 10:01:20 +0000
Manifest next update: Sun 29 Mar 2026 10:01:20 +0000
Files and hashes: 1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: 6hnKnA2Ah5jylTN9JqhgZ2oi95FHEIlHyIq9NvNwn04=)
2: s6W8XaPi6fAwOIAgY3aMpDeIa6g.roa (hash: Nlq5/Q8dZX4aJdFT62wfCPIirNtyzobB0dAY9K3L3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:1c:2b:e4:a9:c3:75:41:fc:c5:03:32:46:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Mar 28 10:01:20 2026 GMT
Not After : Mar 29 10:01:20 2026 GMT
Subject: CN=ff1c17332e3d0d8010ab27926f7c9ab320042fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:17:9e:5c:fd:48:a7:d3:6f:e9:d1:94:64:
0d:9a:37:71:e2:74:50:dc:c5:9b:80:ac:42:ff:61:
1b:ed:a9:f3:8d:fa:78:46:bd:1d:6a:c2:0e:2f:3e:
36:67:7c:69:55:f5:3d:ac:1d:15:7e:ad:a5:cf:68:
bd:49:8f:e9:88:60:e6:a9:c4:43:e5:d1:b8:1d:6f:
cb:15:93:85:31:5c:f4:7b:98:27:26:42:d6:d5:4e:
04:f3:53:07:07:58:92:7a:8a:7b:54:6c:9d:8c:d2:
2d:f1:23:c8:84:f3:9d:f8:b4:a0:a8:76:2c:67:87:
3a:37:56:f2:6a:b8:5b:cf:ed:2b:3f:76:74:27:e3:
23:5c:d1:9a:a9:e8:20:ab:4b:02:6a:1e:5b:57:8f:
89:82:7d:29:9e:9c:f2:d9:58:c5:e2:f1:a8:8f:e7:
80:3f:a0:11:80:ef:03:4a:98:7b:76:17:7d:64:74:
e2:d2:d3:cf:2e:14:2a:6d:22:51:11:3b:0a:02:6a:
46:36:74:47:df:87:ad:dc:33:0d:05:d5:42:db:fb:
e0:4c:5f:08:4a:3b:ac:6a:44:c9:33:a9:ef:44:50:
40:91:d5:f8:07:21:26:00:b1:6c:82:1c:38:56:81:
e2:85:32:fe:9f:26:97:90:1c:ef:ba:45:cf:0c:5e:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:17:33:2E:3D:0D:80:10:AB:27:92:6F:7C:9A:B3:20:04:2F:CB
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a2:8e:eb:fc:7c:a0:f6:cc:84:da:22:37:5c:cd:df:7a:6b:
6d:18:f4:d7:05:78:4e:a0:83:c1:84:6d:bf:09:1b:d6:e7:14:
ee:c4:2e:0a:fa:3f:e5:88:dd:da:ce:27:bc:d8:dd:b1:16:38:
ab:bb:a2:88:49:6b:35:6f:72:e0:66:a2:23:80:62:2c:61:cb:
8c:8d:d3:4a:60:0f:e3:cd:4a:57:1d:9d:d6:bd:76:ec:bf:ce:
ec:6c:fa:15:90:87:98:42:65:4a:9d:78:65:c2:45:b7:df:62:
71:b3:1f:65:8b:5e:a0:da:cb:31:d3:58:68:f9:ed:70:6f:4d:
6c:71:1c:4d:e8:fa:18:be:7d:ae:25:2a:b5:13:3d:0b:71:12:
2a:87:94:50:ce:8d:d7:c4:6e:d4:30:5c:da:75:70:17:3f:de:
4a:bc:e6:c9:41:eb:12:01:d3:34:bc:f9:1c:1b:21:1c:e9:e5:
02:5a:ee:f2:20:1a:09:00:62:d4:41:3a:78:12:57:fd:08:d5:
a7:86:6f:a5:fb:af:50:ff:c9:d9:0d:53:65:e0:43:eb:5b:b8:
ed:b6:27:45:15:3c:40:6f:5a:35:22:95:0f:10:3f:32:4e:f8:
9d:9b:e5:05:a9:8b:aa:e8:29:f9:5c:a8:07:07:56:40:a2:88:
07:1c:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:35 2026 by rpki-client