Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier: jv1YQSd+BFZPn2EfOY68r7kznLsRwqYtS5SvwE/6G1Y=
Subject key identifier: CF:CC:38:5B:1E:08:61:5E:0A:41:FF:16:3F:20:33:E1:99:CB:82:F0
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 019E1C7DF91E8CFDBCA53A11ED0E6BA19AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number: 1896
Signing time: Tue 12 May 2026 14:01:18 +0000
Manifest this update: Tue 12 May 2026 14:01:18 +0000
Manifest next update: Wed 13 May 2026 14:01:18 +0000
Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: yzc2BtXwLeXuREsaHignJm4YFqHHO5Kp3z3ZBM7INBI=)
2: puAauCowFLGfgpH2sTlBVHLWBTc.roa (hash: 0G+aE9T8CvclKyxOZpNXpaee8LqEvJEggHfWPPQiT5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f9:1e:8c:fd:bc:a5:3a:11:ed:0e:6b:a1:9a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: May 12 14:01:18 2026 GMT
Not After : May 13 14:01:18 2026 GMT
Subject: CN=cfcc385b1e08615e0a41ff163f2033e199cb82f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:f5:83:5c:05:7a:07:cd:c5:46:73:d1:37:
a3:4e:92:8e:d2:cb:a1:59:22:24:f2:84:13:fe:ff:
33:4c:d2:e6:c8:5d:b0:ca:88:db:7f:a0:f2:89:48:
27:be:2d:fd:c8:c8:2e:62:c3:e5:ba:33:29:fe:be:
8b:a4:ac:33:33:c1:db:ab:d5:84:55:00:be:53:27:
38:7e:e6:2d:6c:03:26:cc:47:68:ea:d6:00:c6:33:
ed:22:bb:60:9c:f6:ae:f7:66:bf:77:f4:2e:e8:e0:
2d:07:32:3e:27:a0:ac:a1:19:d2:a3:f0:cd:58:50:
40:14:81:64:f3:f1:f5:58:c2:47:29:ff:e6:17:83:
df:2b:c0:0f:e2:7f:ca:e6:6d:a8:df:ba:f4:ee:9d:
3e:91:56:46:a8:9c:35:0f:0c:b4:ef:91:49:84:d0:
3a:60:05:d8:21:b1:b8:8e:3c:f6:8a:53:c9:5a:c2:
1a:42:4f:2a:64:9c:0f:fb:0f:59:1e:6a:05:59:49:
f0:4a:a6:43:81:4c:7d:e9:ac:12:9e:29:d7:dc:23:
7f:84:a1:8a:58:e3:af:b9:d7:e3:c8:91:e2:9c:3f:
ed:16:41:38:ef:1f:ae:1e:42:bf:e3:24:0b:14:bc:
39:ae:da:0a:37:24:08:6f:70:15:f6:f9:61:be:12:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:38:5B:1E:08:61:5E:0A:41:FF:16:3F:20:33:E1:99:CB:82:F0
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:1f:bd:ae:77:ba:b5:f7:b4:52:79:52:5f:e3:01:a2:da:
3d:77:2d:8b:09:ba:12:fb:28:35:24:44:45:60:d9:e0:ad:ed:
07:7b:74:ba:44:7e:d7:d1:7f:51:43:11:b3:14:c5:dc:bf:0f:
d8:b4:4f:00:30:9a:f7:8f:ec:7d:b8:3b:ca:d5:4e:d2:08:3d:
bc:40:b4:88:3d:f1:95:d2:b3:ab:71:34:cc:e4:1f:64:53:de:
ff:92:5a:32:cf:c1:92:7d:8d:10:2f:12:a1:ce:89:b1:ad:d1:
cf:9b:95:d5:8d:50:38:67:e6:b8:d6:e9:a9:a9:a6:bb:94:b2:
fb:8a:cf:68:22:22:0c:b1:0e:cc:84:91:d9:05:14:40:54:9d:
9d:28:a2:39:68:58:0b:97:30:39:6b:92:6e:58:59:5d:e1:03:
27:4c:af:1e:ff:eb:e2:77:6e:0b:74:e6:1e:e6:39:dd:35:6a:
4e:cb:aa:68:4a:8f:a6:26:44:ca:57:0a:f6:30:ed:ce:fa:c6:
69:b3:bd:7e:8d:23:9e:68:9a:8e:10:e3:24:29:9f:a3:e9:59:
7d:07:cb:13:f7:c1:96:f1:82:6f:20:05:a3:ff:e5:01:08:5a:
82:65:e1:a1:cf:75:a2:da:f5:de:d7:ca:17:b0:06:89:fa:7c:
5a:f1:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:32 2026 by rpki-client