Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: SQOu4V+H+Eht9NR4Rwr9hVRB4zh4z3Np+oQrSpRfGtM=
Subject key identifier: 00:F2:A3:AA:B3:CD:69:74:87:B7:C3:89:D1:1B:FA:5D:3E:93:CB:63
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 019D2583B82368D9987069E73334A36BA837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 1280
Signing time: Wed 25 Mar 2026 15:01:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Thu 26 Mar 2026 15:01:22 +0000
Files and hashes: 1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: fa8Qh6atNsEsn8SjBPp0pkc5B4vrl3sCdYoWKFU89+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b8:23:68:d9:98:70:69:e7:33:34:a3:6b:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 26 15:01:22 2026 GMT
Subject: CN=00f2a3aab3cd697487b7c389d11bfa5d3e93cb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:a8:02:a3:c0:2d:b1:9e:a1:8a:3a:09:45:
a3:90:e9:2c:bf:b0:fc:d5:50:bc:2f:ba:32:26:b6:
6b:ad:94:fe:d2:d3:8c:b6:7a:f5:65:20:52:78:29:
6d:7a:42:32:09:e2:f5:9b:a2:bd:7a:4e:de:86:1d:
11:16:76:d7:fd:59:25:b0:8e:75:1b:ea:e6:c8:16:
7e:26:b8:da:d0:73:a7:f2:79:96:0e:8d:54:17:87:
b5:e4:13:1a:55:2e:db:cb:84:29:57:c4:12:cb:e2:
66:73:bd:19:21:b8:15:0e:a4:3f:6b:d8:20:57:65:
d8:20:b1:0b:56:a4:5d:1d:02:2a:f5:1f:aa:d4:31:
27:35:4b:06:7a:ea:e7:72:80:0c:4e:8a:6e:7f:8a:
1b:22:fd:3a:37:26:00:77:35:fd:4c:df:01:76:fa:
5b:15:0a:67:11:59:68:a0:7d:d4:17:07:f9:36:14:
85:b2:94:01:5a:36:5f:b9:8c:81:76:5e:d0:d6:d4:
4f:c3:08:f9:fe:da:2f:c0:ab:7b:bb:b2:2e:51:56:
76:67:2b:d9:70:cc:63:26:b8:62:08:da:20:fa:d6:
8a:e2:34:09:31:c5:39:a0:e6:a4:95:29:66:a3:71:
d5:16:d3:65:81:71:31:87:77:bc:43:96:0c:42:97:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:A3:AA:B3:CD:69:74:87:B7:C3:89:D1:1B:FA:5D:3E:93:CB:63
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:83:03:6b:32:9c:da:9a:98:11:8d:0b:23:cd:49:be:de:
d1:7d:23:c1:cf:d1:9c:df:4e:c1:3c:64:39:03:36:a1:ac:2a:
2f:14:9e:78:f3:87:38:33:44:5d:af:e4:8a:37:d5:83:c4:10:
1d:7d:5d:6f:7a:e7:d9:b9:f4:1f:3b:08:30:0a:0e:7a:b1:48:
b2:6f:64:c0:39:8c:17:3b:e0:f7:e8:69:4e:46:d1:76:1f:46:
d6:7d:39:6e:e4:60:74:f0:4d:4d:21:11:5a:c1:8e:79:9d:0e:
68:0f:86:a3:67:ea:00:7f:4f:6b:9e:bd:a7:78:89:5e:2a:fb:
e3:5c:93:68:49:a6:1c:d6:6f:ad:f4:97:ef:51:fa:60:6b:50:
fd:7a:3f:49:5f:36:44:c6:14:11:9d:74:81:38:56:66:96:73:
25:b5:b5:d4:80:e2:0e:d0:8d:74:14:64:2e:38:56:43:f7:c0:
be:23:dc:69:8c:e3:da:1e:82:01:84:36:79:08:15:d6:4a:37:
16:05:64:c3:c1:45:a3:8b:8b:eb:9d:47:b2:8d:2b:66:6e:c8:
d6:42:fa:c4:32:30:7e:4a:4c:4e:e2:02:9c:48:bf:0e:b1:78:
f7:5b:98:77:a8:77:a4:70:1b:7a:e0:f2:26:7e:80:08:24:6a:
cc:d5:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:44 2026 by rpki-client