Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: hGL1cNBg5xB2MD//lI3ES2UW1c/MSqxQMLAQNB7NghQ=
Subject key identifier: C1:EF:F3:E7:54:07:CD:7A:E0:80:5F:87:D9:E5:3B:45:60:89:67:2E
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 019D2816B02091C7174AF0313214855097A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 103D
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa (hash: 4btrLU4Yp51Rk7dJr+hkTDUzW5uwF4yGfkuoF/u5R5U=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: qG+RYqWqq0bR4QpOYdikio9elOlVaDTryKKZhe+AdUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b0:20:91:c7:17:4a:f0:31:32:14:85:50:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=c1eff3e75407cd7ae0805f87d9e53b456089672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:8c:db:66:67:a9:77:8e:a5:be:de:fc:3e:
e1:1a:26:7a:27:15:06:74:9c:d6:d1:56:47:a1:63:
da:fe:5d:dd:92:90:af:2a:d7:c9:df:6a:3f:4f:ba:
0d:4c:e0:4f:d0:31:c1:d2:ec:24:50:21:e4:c6:52:
e7:fc:a4:ad:29:2f:3f:56:b9:13:24:fc:0e:f0:3d:
38:87:b6:41:16:e0:2f:2a:cb:eb:e9:b0:d2:02:8d:
d2:cc:81:1c:2c:e0:29:af:2e:70:41:8c:1a:02:af:
30:58:0c:3c:ae:f6:18:9a:bf:8e:6f:67:3e:02:14:
06:bd:26:d7:eb:c5:3b:b5:fa:65:85:b6:28:a3:1b:
a9:e1:ff:e5:72:a8:c6:5a:44:50:8f:56:8b:b2:2b:
08:7d:b4:3f:0a:14:2f:c7:5a:0a:f8:18:77:3a:01:
06:4d:fe:3a:1b:88:18:4b:4c:78:eb:2a:df:16:c7:
a0:02:df:b7:c7:5b:85:db:58:b7:ea:03:0b:54:ca:
4f:46:fd:18:56:c4:c2:60:6a:80:c8:57:f2:58:1e:
35:18:78:a3:1e:7c:c5:36:5d:95:62:79:56:76:76:
31:23:54:89:14:4e:90:1d:c2:cd:0d:76:32:57:7e:
af:9e:72:96:fc:68:15:9c:2a:42:ba:b7:89:f6:ae:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:F3:E7:54:07:CD:7A:E0:80:5F:87:D9:E5:3B:45:60:89:67:2E
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:a2:5f:94:e4:9d:2f:ac:bd:0b:1e:51:9c:8b:ed:4a:94:
d4:76:2e:1d:c0:b2:97:4b:e1:37:cb:49:c7:38:b7:21:f3:0a:
54:69:7c:3c:b7:f7:8a:0c:be:46:36:0c:f3:22:2d:53:d7:56:
3e:fe:ef:3f:d3:97:0a:01:68:ec:18:4d:90:27:69:eb:4d:20:
65:11:8e:90:59:2c:71:2e:3b:1c:75:77:c7:69:78:25:ab:97:
57:06:f6:93:c1:49:ed:08:e5:84:96:38:e4:25:63:20:85:03:
ae:da:0a:a8:f1:ca:07:dc:92:ca:71:1c:8e:4e:08:fe:6b:93:
83:d2:09:47:10:3a:07:01:e7:f7:9e:f8:91:e6:c9:34:53:5e:
b3:c0:e6:08:a4:46:2d:98:6c:c9:9c:cc:73:82:04:8f:8c:73:
e7:9d:fe:8e:90:3c:de:09:9e:a4:fd:78:ff:3b:f0:42:56:c2:
ff:47:63:bd:36:55:35:c8:0c:8e:c4:73:97:63:1b:32:32:02:
69:7f:3f:af:0f:ee:bb:13:04:93:a4:ae:5e:1e:d9:dd:06:f3:
1d:7b:c3:5b:72:9b:77:9b:02:64:2a:ef:02:b2:c1:18:1b:d5:
f9:89:03:8c:32:2e:22:7e:b0:38:0f:d1:d2:fc:b7:1f:4d:33:
e4:70:1e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrAgkccXSvAxMhSFUJejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh
YjkwYjEwHhcNMjYwMzI2MDMwMTA4WhcNMjYwMzI3MDMwMTA4WjAzMTEwLwYDVQQD
EyhjMWVmZjNlNzU0MDdjZDdhZTA4MDVmODdkOWU1M2I0NTYwODk2NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkleM22ZnqXeOpb7e/D7hGiZ6JxUG
dJzW0VZHoWPa/l3dkpCvKtfJ32o/T7oNTOBP0DHB0uwkUCHkxlLn/KStKS8/VrkT
JPwO8D04h7ZBFuAvKsvr6bDSAo3SzIEcLOApry5wQYwaAq8wWAw8rvYYmr+Ob2c+
AhQGvSbX68U7tfplhbYooxup4f/lcqjGWkRQj1aLsisIfbQ/ChQvx1oK+Bh3OgEG
Tf46G4gYS0x46yrfFsegAt+3x1uF21i36gMLVMpPRv0YVsTCYGqAyFfyWB41GHij
HnzFNl2VYnlWdnYxI1SJFE6QHcLNDXYyV36vnnKW/GgVnCpCureJ9q6p9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHv8+dUB8164IBfh9nlO0VgiWcuMB8GA1UdIwQY
MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt
YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4
LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONeiX5Tk
nS+svQseUZyL7UqU1HYuHcCyl0vhN8tJxzi3IfMKVGl8PLf3igy+RjYM8yItU9dW
Pv7vP9OXCgFo7BhNkCdp600gZRGOkFkscS47HHV3x2l4JauXVwb2k8FJ7QjlhJY4
5CVjIIUDrtoKqPHKB9ySynEcjk4I/muTg9IJRxA6BwHn9574kebJNFNes8DmCKRG
LZhsyZzMc4IEj4xz553+jpA83gmepP14/zvwQlbC/0djvTZVNcgMjsRzl2MbMjIC
aX8/rw/uuxMEk6SuXh7Z3QbzHXvDW3Kbd5sCZCrvArLBGBvV+YkDjDIuIn6wOA/R
0vy3H00z5HAeIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:55 2026 by rpki-client