Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: 7LtgImgCbgD/ihHrNxEtvOKs1biPZOIF975cASG+dyw=
Subject key identifier: 71:66:E1:69:C8:FA:88:AE:6A:83:0B:EB:F9:31:B0:E9:97:A9:6E:3E
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019D284E4933027AF6176C63F4D7A32348B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 17A5
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: t5uxKTQaRDtCYZdXSG76Ie5MpHB5qMCd3VcLy0aUB5g=)
2: rJGAs6X1h64jP6R35e61qsCTXFY.roa (hash: GVSlFoAaLCK/f0Zjs4b7sBkaI33tH8EXTGwc45c8NVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:49:33:02:7a:f6:17:6c:63:f4:d7:a3:23:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=7166e169c8fa88ae6a830bebf931b0e997a96e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:95:70:05:ac:4b:75:32:f7:7d:44:39:d1:
bb:4b:c6:e1:de:4a:88:f4:0d:1d:2b:39:2d:de:c0:
ad:a5:a6:8f:7d:89:48:6e:ac:56:d3:6a:a5:45:c0:
f2:e7:50:35:3d:de:5f:7e:18:ac:0f:e4:4a:40:fd:
be:d2:2e:2d:f8:f0:ac:00:6d:81:1d:42:da:77:88:
4f:bb:01:ef:77:c6:5a:e2:e2:67:cc:0a:fb:a4:cd:
99:80:e5:e5:73:9e:c0:f3:cc:09:85:d6:05:47:c3:
c4:ea:ff:97:4d:03:0a:36:f1:b9:0f:51:a6:69:af:
c2:0c:95:49:a0:69:79:cb:b0:aa:bf:a1:cb:51:26:
d1:86:bb:79:c9:87:df:30:c2:43:b0:9f:25:37:b0:
90:10:d7:1a:99:db:50:b2:28:1c:20:59:2f:73:9d:
ac:9f:d9:09:3e:bd:e3:21:f3:32:59:f1:a1:b0:8e:
45:7d:76:d6:15:99:c2:ae:c2:43:5e:c2:7a:de:cd:
ab:24:fb:e3:87:2c:ed:10:c6:0f:97:87:18:ba:33:
f2:85:70:87:1c:5f:b7:f9:73:12:a4:2c:97:d6:f8:
d9:df:9d:85:34:7b:eb:3d:0c:53:31:5a:cc:8e:0e:
d5:a3:49:df:61:6c:b3:88:c8:ce:39:e6:0c:ba:f2:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:66:E1:69:C8:FA:88:AE:6A:83:0B:EB:F9:31:B0:E9:97:A9:6E:3E
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e4:24:d9:a3:d0:1b:ab:92:e3:dc:12:48:0a:09:28:92:33:
07:13:76:e4:36:82:27:35:7c:6e:f0:4d:3f:32:d0:dc:8d:97:
e2:a7:7d:36:1b:e1:8b:65:d1:4c:54:f9:ca:77:2e:cd:74:06:
48:71:a5:8b:9a:4c:c9:11:a4:be:f9:d4:ab:78:79:92:32:cf:
e4:54:d2:dc:59:64:41:a6:03:d6:2d:1b:b1:a9:27:d0:f9:d0:
5e:7f:94:b3:c9:e3:32:da:06:f1:08:a0:86:63:de:ad:80:d3:
47:8b:ec:b9:4a:05:5f:6c:9c:2f:ad:98:90:86:30:21:9a:ec:
5e:24:cc:1b:23:26:f1:fc:34:41:13:5e:d8:43:20:2a:61:1a:
d1:fc:33:08:0f:53:3e:ae:b4:53:a4:33:c2:ca:5b:4b:4f:3d:
c3:f5:7a:03:90:55:95:9a:85:32:66:69:13:57:5a:30:76:88:
e3:71:40:88:95:f5:65:e5:a6:a8:8c:47:a3:3e:e1:b9:f6:38:
0e:40:f8:7e:31:75:6b:2d:19:8f:b1:d4:f4:54:ee:d8:a1:89:
18:3c:f8:4e:28:53:00:cb:df:54:60:1b:d7:f5:9d:20:31:16:
1e:b1:c6:5c:9f:1d:3c:83:4f:eb:ad:8a:a5:81:d7:f6:f5:5b:
dd:3b:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:58 2026 by rpki-client