Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: 97TfEFLH9qyP7x4urSv6EHq8KMO28kwjqgMyXrEsNpA=
Subject key identifier: CA:71:BB:14:E7:31:72:D5:74:58:DB:1D:1D:12:C2:67:67:33:FC:C3
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 019D284E3E13CA6FF1AF6ADD0953FE4DBF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 091B
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: 1-CcdGpM9DcuLRpqwbiMu3odID9g.roa (hash: pKdfKPtLXW/w7Hq1cLOFELO9jRtinOQ6Uq5RI4M/bWQ=)
2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: Sluj6W9fhuR61pmy8eCSzIrpL9UWNWkC9PwhZXrS9do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3e:13:ca:6f:f1:af:6a:dd:09:53:fe:4d:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=ca71bb14e73172d57458db1d1d12c2676733fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:01:71:ba:00:2f:e7:46:95:30:db:b8:a1:
d1:b4:5c:3c:3c:80:6d:53:e1:6f:a2:0f:8b:36:93:
54:52:0d:0d:2c:5a:6c:0f:13:ae:b9:84:ee:b2:a4:
a5:fb:7d:b3:46:0e:36:76:29:55:78:72:26:63:73:
e6:f1:90:a5:13:2e:c3:66:d1:9e:bd:d7:8b:68:18:
80:51:65:2d:93:74:ad:3f:a3:c4:a0:fa:2f:42:ea:
62:b5:46:67:4a:42:64:22:ce:36:11:a5:81:c6:a6:
77:cc:ce:e3:89:90:7d:6d:b4:06:b1:1f:5f:c8:de:
36:6d:87:2e:d1:80:25:13:88:d2:aa:25:07:61:39:
5f:62:05:a8:33:a4:b9:50:38:d3:ab:23:04:4c:20:
69:46:3a:2b:f6:fb:eb:f8:f5:ae:25:fd:2d:f9:80:
5b:15:15:e6:bd:f4:2b:08:80:c9:5a:05:58:9c:f3:
ef:ce:61:f5:1b:5d:cb:11:df:2f:ca:bd:63:a1:df:
b6:80:27:1b:7e:fd:7e:92:69:06:f5:e1:0e:c6:ad:
ad:2b:56:18:f0:2a:af:aa:48:45:ca:51:f7:3b:b3:
9e:d3:ba:89:af:02:17:cd:fb:e1:43:43:f7:55:ba:
b2:19:e2:2f:47:84:2f:ad:8c:5e:b0:e0:4d:a7:2b:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:BB:14:E7:31:72:D5:74:58:DB:1D:1D:12:C2:67:67:33:FC:C3
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:1d:7e:46:92:a3:d9:8b:05:98:07:88:9f:cd:5d:42:65:
57:d1:b2:88:c5:02:fe:e4:a1:4b:1b:58:a5:84:d8:28:29:d5:
12:e8:d7:bc:7e:e9:d8:85:bd:06:ab:aa:28:06:7f:7c:6a:54:
d7:7d:af:34:cf:bf:d0:d3:35:c8:d3:8b:53:b5:30:c5:0a:6e:
75:45:d5:79:21:f5:f5:40:03:96:d9:7d:12:37:9c:6d:e8:c3:
65:62:b0:9c:d5:18:35:97:f6:3e:3f:ae:c4:1f:6a:e2:aa:16:
a9:9f:91:ec:10:63:b7:6e:ad:84:64:5e:44:71:be:be:80:9b:
07:9d:5f:7e:2c:4b:f8:c5:f1:4e:36:24:7a:94:69:81:79:3f:
58:55:c4:cf:cd:42:b4:d6:f3:81:e9:e2:8a:20:6b:44:5b:f6:
e4:18:94:be:a4:48:3f:06:d7:cb:5c:36:eb:fe:0d:4c:e0:02:
38:59:80:e8:d0:06:ae:a2:e5:d3:e5:6c:44:7b:e4:46:8c:74:
36:d3:68:e6:86:9a:f4:5f:d5:27:52:aa:14:7e:21:67:29:2c:
63:7e:76:08:46:7a:8e:a2:66:b6:b1:4d:a8:fa:1e:57:00:c6:
9a:d8:de:ab:7b:cc:ee:ce:2c:00:44:35:25:30:95:b3:17:e5:
b7:10:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:36 2026 by rpki-client