Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: PmOC4fsdvOQUGrvoIH/GobynYoYo5ys8Qhb+D+EpIJA=
Subject key identifier: A5:41:3A:1B:00:9A:E2:0B:F8:2D:C7:A2:5E:85:D0:24:AE:87:3B:C9
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 019D2996F2F0D213DF686BC644B1AF385C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 132D
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: dqAVlvg/t9HBXi09uCaVv33CoAGlEwnHEmaEFyqt3/E=)
2: EvYaMnO8iuW5cBkFIRoD_nhendI.roa (hash: v4CkHhI/skWxg/dd6iMZ2P6Y9SZcQGoDEFALE6/zmFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f2:f0:d2:13:df:68:6b:c6:44:b1:af:38:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=a5413a1b009ae20bf82dc7a25e85d024ae873bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:67:1e:73:a1:07:4c:a8:41:90:ca:6c:c3:
df:12:7d:11:f5:8e:b4:b9:3e:a8:4d:29:0d:75:24:
33:e0:54:80:6b:be:82:13:30:ad:b6:4d:db:a2:dc:
c4:ed:fc:06:e8:69:f5:92:51:60:0b:91:ff:71:be:
48:62:ab:3e:72:0b:fe:8a:ab:80:5c:b8:2a:80:6a:
10:7f:39:02:77:29:bf:2f:12:f6:11:dd:13:a0:e9:
f3:64:f5:06:85:0d:b8:e8:66:92:08:bd:45:bb:22:
04:a3:ec:85:89:18:83:d8:39:bf:e7:00:ce:73:76:
d5:bc:8c:21:97:c0:2c:c2:91:86:ee:90:e1:00:0a:
e7:c4:cb:9b:3e:9b:2d:95:88:c6:da:da:4a:a4:95:
1a:01:5c:ac:ac:f4:94:fb:cb:d6:80:5b:21:cf:74:
4a:9f:13:3d:8a:86:5f:0b:d3:63:cd:a7:74:4c:4f:
c4:51:d7:80:e2:13:4d:c4:43:0e:c7:9a:c0:65:3c:
e7:27:84:63:76:af:93:1e:65:b7:53:ae:50:57:d4:
aa:57:31:aa:52:24:c8:f1:3c:39:de:da:ea:fe:9d:
f7:00:7d:a1:bc:ec:05:a9:6d:09:96:b8:32:c9:33:
35:e5:b2:05:f6:12:9e:a7:89:1c:ca:5c:d3:38:ef:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:3A:1B:00:9A:E2:0B:F8:2D:C7:A2:5E:85:D0:24:AE:87:3B:C9
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:26:b2:49:55:54:42:3d:c7:07:f5:dc:32:bf:01:df:5b:6a:
fd:88:cb:8d:74:a5:3a:be:1d:81:49:b9:4a:fe:66:6a:c9:47:
3a:6c:cf:cf:3f:2a:ab:71:d4:0e:12:ae:bb:7c:b9:e6:5f:75:
7a:a6:c3:dc:88:f7:b2:c8:d4:ba:b6:5a:49:ac:96:16:dd:aa:
d6:25:6d:b8:eb:47:49:11:3a:bf:44:d9:3a:c7:3c:54:26:af:
68:0f:2b:29:1b:bc:f9:8b:13:3e:9a:97:d4:d7:1b:b1:95:f9:
ce:7b:a9:54:d7:69:7a:21:97:06:a6:cd:13:d4:44:63:32:07:
ee:8a:07:ff:f0:e1:31:c6:ba:56:46:50:56:6f:f5:c3:d8:9c:
5c:3b:44:c5:29:90:d2:bb:64:08:68:7e:52:4f:ff:df:97:db:
d6:68:04:be:fb:c5:aa:9f:a2:f4:4a:fc:9c:d9:6a:8f:05:43:
da:66:2b:4a:0e:b9:3c:1d:1b:25:4e:91:ac:bd:5b:85:0b:2a:
4d:00:a7:d8:2e:41:85:d1:22:23:14:8a:bf:59:20:b0:bb:b8:
a9:6e:88:91:fe:d4:70:33:97:28:fc:6c:65:4f:68:de:cc:96:
d5:25:26:46:27:2c:2e:a4:6d:2e:40:9a:02:60:17:39:cf:b1:
1e:91:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:18 2026 by rpki-client