Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: XbAJhmjcVJt3oElAfPy6wLQlxd3SklRdP9uND9zxsbI=
Subject key identifier: 92:95:25:EA:FD:11:FC:D9:90:1F:17:E4:0B:DF:40:75:39:23:14:BE
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 019D2703C62282F5263EE30BA320C916E24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 1636
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: WeTUbPU5gHbUhmE0AUqjcDzWHr3UwQH+J+noopsEG0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c6:22:82:f5:26:3e:e3:0b:a3:20:c9:16:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=929525eafd11fcd9901f17e40bdf4075392314be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:dd:f8:e2:2d:d2:46:fd:47:c8:54:05:02:
08:d5:be:c9:14:41:cb:c6:fe:b8:21:8f:2a:93:6f:
b9:d8:0c:49:11:5a:fb:b5:d7:73:c3:93:03:b7:70:
69:5a:62:8d:85:d2:7f:5c:1c:55:cd:3e:cd:a7:13:
69:d3:28:eb:2d:e0:2a:bc:14:06:f3:8d:9f:ac:2a:
f0:db:b4:d3:04:3c:a1:05:d3:0d:ed:49:89:87:75:
0c:8a:1e:30:43:70:d6:e2:6a:85:bb:cc:50:46:3e:
e8:4b:08:0d:5d:ea:17:93:e4:ab:13:9e:88:6e:87:
a2:33:c8:7b:8c:31:b3:8b:8a:fb:64:e1:3e:d9:85:
fd:c4:f5:af:d7:96:1e:df:3b:d0:f1:30:fd:9c:5a:
5b:76:b6:9a:82:e2:ff:18:0f:36:53:ad:25:3a:ae:
87:6c:b9:d7:2a:ee:05:ee:85:e9:a2:01:ef:4a:a6:
1a:7a:40:16:80:4e:6c:7c:c7:9d:2e:1f:05:ee:81:
85:90:db:5d:30:60:49:0d:55:ba:2f:ac:67:dc:43:
5d:28:b5:95:20:a0:01:b1:8b:56:e9:bf:ce:18:d8:
74:0e:17:4a:58:bf:7d:1b:c8:29:dd:d2:08:3c:ec:
0b:bf:d5:52:ea:45:d8:54:f0:42:13:59:ef:8b:16:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:25:EA:FD:11:FC:D9:90:1F:17:E4:0B:DF:40:75:39:23:14:BE
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3d:7c:aa:dd:10:a0:ea:7d:3b:6f:af:17:d4:6c:3e:78:03:
cd:8b:39:a2:5f:e8:7b:fa:1d:12:a4:ee:46:f2:55:5e:94:a8:
c4:ca:ea:f1:67:ce:37:36:bc:c8:a1:a7:b0:b6:35:ca:95:07:
62:32:56:64:63:33:ca:9f:32:ad:2a:ea:e5:48:55:4f:7d:23:
f2:2c:dc:8d:b4:e2:50:13:5e:7a:3b:a8:b5:66:bd:5d:fd:28:
89:13:ef:ab:d9:6d:b3:b1:4c:7f:b1:09:b8:80:91:87:bf:6f:
2f:55:eb:96:3b:07:96:ae:9f:c1:fe:4d:52:49:e2:b0:cd:b5:
ee:d7:a3:1e:1b:9b:dd:43:66:9e:69:fa:57:9b:45:29:bc:ac:
83:8c:c2:b2:2f:83:1a:e4:ba:d5:bf:fc:bf:7c:b3:ef:d8:34:
8b:80:13:83:b5:94:c9:71:a7:83:6b:f8:72:75:0f:3a:23:a5:
06:b7:3f:77:21:4e:c1:4a:14:18:ab:ef:ae:f5:04:5a:a9:ba:
55:9e:b7:0d:fc:06:dc:76:02:f3:6e:5b:d4:f2:5a:6c:5a:b9:
40:a9:79:ae:fe:1b:60:52:e4:d7:2c:a1:2a:64:c4:bd:93:27:
96:2b:c5:13:b3:6d:a2:0b:31:aa:e3:bb:54:f0:5d:14:da:65:
69:3e:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:57 2026 by rpki-client