Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier: surdKr3UU286rvtJSZHlais4JJrtB5SaW6FZUIWh0p0=
Subject key identifier: 32:C8:2E:F3:29:07:F0:A5:BD:89:28:07:E3:F4:3A:C2:15:53:D1:F2
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 01A0CFDB1C7B9CB224AB8A78207029E7AC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 20:00:38 +0000
Manifest this update: Wed 23 Sep 2026 20:00:38 +0000
Manifest next update: Thu 24 Sep 2026 20:00:38 +0000
Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: KqzwM96aXC0TnZXW6IHWgD/DucM93RNVp/wOy4bptHM=)
2: puAauCowFLGfgpH2sTlBVHLWBTc.roa (hash: 0G+aE9T8CvclKyxOZpNXpaee8LqEvJEggHfWPPQiT5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:1c:7b:9c:b2:24:ab:8a:78:20:70:29:e7:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: Sep 23 20:00:38 2026 GMT
Not After : Sep 24 20:00:38 2026 GMT
Subject: CN=32c82ef32907f0a5bd892807e3f43ac21553d1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:2d:33:90:c2:48:71:f2:1b:75:90:11:d7:
3f:7a:5c:fc:0a:26:83:e1:35:0d:d9:d8:94:1d:63:
88:f5:62:02:0f:f1:b7:81:16:42:df:dc:ef:fe:c7:
24:06:af:ea:bb:f8:78:f1:1a:8c:5c:09:b3:33:e5:
fc:39:2d:24:b9:79:56:a8:85:30:c9:f6:f9:50:11:
9a:aa:b9:be:24:29:ff:b4:23:42:5d:68:d8:46:81:
8e:f2:82:68:20:0c:36:d1:d8:eb:82:ea:c7:58:64:
93:eb:54:a3:f6:c3:f9:1f:c7:f0:db:da:65:cb:2a:
46:68:fe:c9:ac:de:9c:f2:9c:7c:6d:80:b1:96:f4:
35:e9:7e:7f:38:d3:18:75:26:53:f3:3f:ce:11:8b:
67:63:33:cd:09:94:b6:3a:d6:ef:ae:3d:08:5c:53:
00:79:c6:0c:fc:ea:01:79:cf:97:93:3f:73:9d:f9:
18:f6:75:9a:8f:b8:58:18:e7:7c:80:80:47:76:4c:
df:c1:b0:dd:be:9f:b9:f0:e0:40:2c:22:cd:84:9f:
9d:76:19:aa:e5:c0:36:db:0b:7c:5d:03:8b:87:6b:
5d:b1:e7:0c:be:8b:58:90:31:ab:74:de:e1:6a:63:
ac:36:0d:41:cb:a6:88:6e:91:20:83:5d:25:44:1c:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:2E:F3:29:07:F0:A5:BD:89:28:07:E3:F4:3A:C2:15:53:D1:F2
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:c2:b8:9d:06:fe:48:f8:fa:92:d6:31:ec:65:18:69:c7:
7a:db:0e:3d:f7:69:5e:63:71:bb:7c:6d:7f:3a:fe:3d:77:bf:
79:ef:11:53:99:ae:d5:1c:55:8b:65:c0:43:ac:5b:d4:18:db:
68:1f:8d:3e:8f:f6:38:f6:18:8f:eb:bd:48:49:9d:2e:f8:a3:
17:c1:ad:8d:31:97:be:e6:ac:40:21:67:a1:26:c2:f9:88:97:
fa:55:5f:55:08:32:71:24:b2:49:2b:77:6b:99:86:9a:aa:c5:
75:c0:84:27:c7:6e:e7:a9:80:2f:be:7a:3f:b2:57:96:39:cb:
d1:a3:23:11:30:ea:76:0d:d8:e9:8d:3d:7d:b1:74:90:cb:31:
5b:70:25:fd:14:15:ae:a7:2a:0b:a4:a4:6f:69:a6:9f:9f:55:
78:29:8f:99:61:17:9a:7a:7f:2c:e8:a7:c4:6a:61:1e:d3:80:
90:f6:71:d2:d0:a3:8b:68:26:ec:41:68:67:97:00:d8:2c:33:
87:a1:7f:47:17:da:dc:94:21:76:70:9e:40:70:23:20:4f:b8:
04:54:81:14:63:0c:75:63:34:2a:0c:06:43:4f:fb:c0:2d:6c:
5c:09:c4:2f:fc:b1:ab:3e:ac:66:a3:13:88:1b:f4:d6:67:9a:
6a:1d:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:59:55 2026 by rpki-client