Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: UaS/gS/sLkk7bUSOSVWZHRZJgJqhmXGs3LrYIc77hHA=
Subject key identifier: AD:D7:FB:43:14:0C:75:BA:9E:3A:AD:F6:CF:B2:21:4A:7F:AB:2B:1C
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 019D26CCB53243A26E915D6BC558D6A99E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: 32xNrqfn_40-iDBmk-rm9VjKVfI.roa (hash: JPXRakEsfFUtjCtyDn2J8TNXfU3lMwghua3Q9mcoWwI=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: ee2wLWzApX+lulJ2pY7oggP27PAvRMSJlIkISii9PqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b5:32:43:a2:6e:91:5d:6b:c5:58:d6:a9:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=add7fb43140c75ba9e3aadf6cfb2214a7fab2b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:e5:66:bb:a1:03:8b:8a:de:2a:45:fc:09:
0d:ac:34:9c:69:d8:57:40:87:65:95:01:f9:14:34:
dc:54:86:62:bf:d9:3c:7a:52:0c:8e:52:69:e7:1f:
9b:66:5e:e3:2f:e2:f8:02:06:f4:8b:56:a5:c6:8d:
ca:f1:a2:9a:b1:04:b1:65:46:33:23:5d:42:a1:3a:
14:2d:65:a6:80:f1:0f:76:f7:71:7f:d8:2e:42:95:
87:80:65:7f:70:72:24:3a:13:92:34:47:f6:4d:07:
9d:37:90:27:a4:4a:93:a2:d4:f6:15:41:96:fd:cb:
d9:bc:35:05:84:4c:ec:01:b2:4d:9c:db:4d:73:d0:
b9:11:5f:b4:d6:48:b8:6a:f6:88:00:76:e0:88:85:
90:ca:a2:d3:20:ec:de:eb:1d:b2:59:43:08:b1:e4:
ac:eb:a6:06:a9:e9:8f:0c:e4:34:74:2d:c1:09:69:
b3:23:4d:96:a2:71:90:d7:ca:ce:97:75:8b:1b:c2:
c5:88:ca:90:e6:6b:26:40:5a:d8:ca:5b:5f:1a:85:
db:62:71:21:e2:d2:d7:99:c0:55:67:88:e9:98:8a:
27:0b:67:40:96:59:98:0f:17:3b:83:bf:be:1e:f5:
2c:2b:e1:e3:b7:1b:32:c4:2f:52:91:6f:56:91:88:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:FB:43:14:0C:75:BA:9E:3A:AD:F6:CF:B2:21:4A:7F:AB:2B:1C
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f9:92:cc:ad:7e:76:d4:c2:13:7e:ef:3a:da:e8:f1:92:f4:
04:b2:2d:9c:f4:f3:9a:2b:c7:51:d4:38:0b:3c:90:14:7e:9f:
35:a0:b0:bb:af:46:56:87:9b:81:ea:9f:72:30:c6:26:99:c1:
32:c7:f8:74:c4:f5:da:1b:e7:59:a4:04:48:91:84:a4:7b:2a:
22:65:de:b9:3f:cb:bb:aa:f9:a9:34:79:d0:86:d6:0f:31:3d:
41:0f:e4:ce:f4:b1:66:99:4c:3f:2d:fc:e1:06:c1:bd:f8:e8:
7c:c8:05:5b:60:95:3d:52:5a:37:2b:a6:2d:bb:b8:55:c8:7f:
4c:49:3f:58:1f:0b:d3:2f:e0:57:49:90:e6:b1:1f:40:92:6b:
71:77:4a:04:71:d4:0a:bc:01:37:75:43:2d:5c:c5:73:7c:23:
c0:76:73:0c:14:34:75:49:97:8a:2a:59:2d:9e:98:a1:a8:a1:
2f:fe:93:24:62:39:d9:17:6a:7c:18:75:1e:ac:34:d8:71:4f:
fa:e5:7d:95:01:21:82:00:8f:96:88:31:5a:5e:e3:b4:6c:cf:
66:9d:0f:ba:41:26:a9:85:9f:b7:27:d0:cd:30:e0:0c:e0:96:
07:b9:e0:f6:96:d9:f1:48:cf:7d:e9:13:4f:88:27:09:74:38:
6c:1d:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:21 2026 by rpki-client