Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: kPKuMzuaSoVOO05fbvvJhOBdonaa+qy8Oc19+7zFFhc=
Subject key identifier: 98:10:4E:44:1F:0E:EE:51:26:43:80:E7:CF:37:32:CD:F5:CA:E3:29
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 019D28BBDE3F7FB0B2BF5C21B077F2842466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0EB6
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: FimLlEHnvKKP2vQ6iYOaRRqK4wk.roa (hash: 4dhHOmJ9IK2XSV5MdZmfvh0gFyZkol+nQOYNb3BGTGU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: HXOcBMg9daXjuwuDY+19husBWOFh04gfXZr69ZdfyUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:de:3f:7f:b0:b2:bf:5c:21:b0:77:f2:84:24:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=98104e441f0eee51264380e7cf3732cdf5cae329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:5b:89:22:b2:d6:60:91:d4:21:d2:cd:cc:
34:a7:77:75:58:e5:88:4a:73:cb:3c:b4:ef:d9:8f:
51:03:50:75:06:17:12:53:16:83:59:e0:32:b2:2b:
d3:04:7e:5e:0a:f1:b6:73:b5:d6:35:e9:e7:8a:70:
30:ad:46:fa:57:5b:6a:16:8b:d8:1c:d4:0a:8f:aa:
c4:f0:c8:ca:a2:e5:27:a6:c7:3c:19:ee:71:29:e8:
d7:d3:03:8a:cc:77:48:da:75:d5:9d:ae:d1:36:0d:
e8:59:d6:dc:44:63:e2:86:39:53:6d:57:a8:fd:38:
4b:59:db:c7:82:98:3e:00:c3:b1:88:66:b4:ca:7a:
b2:d7:64:34:2e:a2:12:dc:b5:3c:af:83:a8:bb:33:
e5:e2:4c:82:9b:b5:cb:e8:c1:cb:73:f2:86:8e:bc:
0f:e0:76:ef:c1:a3:5e:f1:c5:f3:da:19:2d:27:5e:
a8:6f:88:b7:95:10:88:4b:a6:6d:c8:e5:78:cf:60:
08:a4:36:64:7c:e6:9d:ae:32:5b:02:cb:7d:d7:d8:
f1:31:15:e3:0b:c4:04:bc:71:aa:d1:98:81:58:d7:
2f:d0:f8:f4:09:30:01:27:70:86:1d:eb:81:b7:ed:
80:9a:f2:38:93:e0:60:73:2b:1c:8d:62:67:e6:78:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:4E:44:1F:0E:EE:51:26:43:80:E7:CF:37:32:CD:F5:CA:E3:29
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:64:44:ed:1a:b3:b3:56:2c:1b:e1:69:d0:8b:2e:41:7b:a1:
09:64:8f:60:d6:7a:a0:57:34:a2:35:01:20:9f:56:51:0d:bc:
81:c5:76:f8:c7:9c:44:51:3c:fd:d2:e2:01:d9:0d:ae:ce:f0:
33:b5:bd:45:96:4c:c3:f3:91:ab:14:01:f2:fd:21:3b:0a:82:
56:e2:da:d3:6d:b0:a9:16:45:5e:5d:46:be:c7:e3:8e:13:ae:
ee:5d:06:75:b8:07:8a:9d:d4:68:fd:01:be:39:ce:68:ae:e5:
4c:35:0e:28:88:e9:c6:55:7c:b3:9e:0b:a7:d2:f0:a5:5e:fc:
65:9c:06:e9:e0:a6:55:f6:bc:6c:31:ee:f9:aa:4b:cf:88:1c:
8a:56:f0:8f:b6:4c:7e:50:ad:95:8a:89:ad:b1:c9:09:36:c0:
9e:60:72:a9:6b:82:83:6d:94:27:6c:4a:6a:6a:91:16:ad:f1:
fa:43:3b:19:da:93:87:38:4f:28:c2:90:df:e7:ef:d5:16:b1:
73:a0:82:1e:50:85:7b:ab:02:15:4f:a9:96:89:2f:6d:34:ba:
87:18:32:da:af:eb:f6:0b:d4:4b:c4:43:cc:33:59:ca:07:ef:
30:57:94:ad:51:b1:ff:14:1e:ae:06:0d:95:39:e3:a5:d7:8c:
f8:f8:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:12 2026 by rpki-client