Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: obL2KagVBy2yh5uN56Dd0FWA+wehQ6IozoWIyf4ExDo=
Subject key identifier: C6:A5:E8:20:B5:67:02:C5:58:17:63:E1:00:9C:B5:3E:55:23:16:3E
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 019D273AB239EA977A97EF2C8EE4E55DF5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: DUh21kc3_st9zmx6FjCgEwY4O-g.roa (hash: 6N33Nz1wYaJrweY5UTdtSITSNvvX1UF/vvjIlm8O7gE=)
2: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: JEBUY/dzNfMKKUmb2ksuPyCioCUUTTshtPuAI3VGmVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b2:39:ea:97:7a:97:ef:2c:8e:e4:e5:5d:f5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=c6a5e820b56702c5581763e1009cb53e5523163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:f3:b6:bc:69:cb:51:6a:53:77:45:84:47:
e7:c7:01:2c:8e:83:86:d7:87:21:1b:bf:08:8f:ec:
67:f1:10:9b:25:fc:b3:80:1d:53:97:84:ec:6e:57:
6f:ee:c1:66:b3:51:b4:79:78:ad:f1:92:53:ff:d5:
c2:e6:28:32:95:8a:67:3b:82:87:ce:6e:2f:ac:a4:
04:13:42:72:22:d2:db:87:e4:cc:27:24:01:7c:7c:
04:cf:e2:fe:7a:4e:46:95:db:e7:df:3d:d8:c0:f6:
37:7f:62:1b:9f:2f:da:7f:78:bb:c6:f4:c8:03:60:
35:4e:9b:03:a4:87:af:ea:ec:8f:73:3c:8d:c9:46:
09:b5:0a:14:d0:e8:95:58:0d:9b:f6:ba:f3:ec:d3:
67:61:e7:fb:f7:07:d3:1c:e8:ed:28:27:98:d4:3d:
84:5c:24:55:4e:5b:c3:08:d4:95:b9:25:b6:a2:e6:
7a:6a:e8:93:d6:e3:d3:6d:ca:ff:4f:03:d0:0a:53:
fb:5a:24:a9:be:f9:66:0e:6b:b9:4d:0f:e5:ac:5a:
34:3f:67:92:d0:1f:4b:2b:36:93:d5:22:27:5b:2f:
39:99:fb:fe:d1:c4:df:b7:9a:5b:a8:27:56:d8:ae:
0e:e4:3c:90:a8:06:ce:1d:ab:ac:a5:a0:7d:c3:0e:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:E8:20:B5:67:02:C5:58:17:63:E1:00:9C:B5:3E:55:23:16:3E
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:fa:3e:3f:96:e1:be:9d:a1:e6:a3:7b:7e:f8:f2:24:21:
1a:ce:1f:5b:aa:c3:30:d2:71:1f:3a:ee:43:9a:6a:20:42:f3:
86:8d:c9:ed:a5:b0:2e:e4:fc:fb:d5:f6:18:31:6a:f5:b9:52:
5e:77:9e:e0:92:43:e7:49:70:c2:77:29:12:e2:57:85:c1:fd:
ca:2a:46:68:b1:00:10:34:ed:67:9c:46:9c:a6:53:84:a4:53:
1a:ea:71:d0:e7:ac:29:dc:db:1e:66:67:8a:ed:f3:2d:06:cc:
c7:72:3b:b2:8c:20:a2:6a:0c:a8:88:15:56:cc:00:e1:06:33:
ad:2c:67:57:9e:cb:17:9a:14:b9:62:fa:58:90:e7:de:f2:a4:
cd:d7:2b:17:30:f1:ed:46:fd:aa:3d:12:96:85:c9:32:c6:e4:
65:de:ba:18:bc:6c:b0:b4:da:44:46:20:03:a0:33:6b:72:36:
bf:8e:1d:97:73:a4:c8:ed:2c:91:43:4b:92:2a:c7:2c:c7:69:
3f:15:43:66:1a:35:c3:5d:c4:1a:3f:bb:1e:fa:f9:6d:c9:f8:
8f:8f:3c:1f:e5:0a:7b:93:3c:6c:18:5f:bc:ef:e1:f3:58:11:
da:a8:ed:51:68:3e:5c:da:2f:f0:e2:97:31:f3:64:58:57:2e:
fb:ef:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:52 2026 by rpki-client