Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.mft (raw, json)
Hash identifier: Xlw1+h3Va1qTZwMFXDzXuq6elOqoklOUde+4aII0rY0=
Subject key identifier: 83:F8:03:0C:B3:64:A1:30:BB:28:60:55:8A:05:CB:5F:56:65:27:94
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019D2BBC0D071D31B3CED8D9F13399FB56B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
Manifest number: 68
Signing time: Thu 26 Mar 2026 20:00:37 +0000
Manifest this update: Thu 26 Mar 2026 20:00:37 +0000
Manifest next update: Fri 27 Mar 2026 20:00:37 +0000
Files and hashes: 1: EWXPgb9aPQz1nUExFIp2HzS_nKg.crl (hash: 8BRZXrHb4dy0W5QDRb/pR/nHzW1v2XbhmuKHRuWO504=)
2: Niis1CvHmgu0murfxragV9VItkc.roa (hash: E9NbgdUKgVnnBg4sHFYFf1Tcl3McpQql43eZKvfPeVo=)
3: WWhjfuGXzWeUF3SrP6qTW0kig3w.roa (hash: YpBQprObA5U7M9d1rKXR9BWlTRND9KaDzkg+3msX8mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:0d:07:1d:31:b3:ce:d8:d9:f1:33:99:fb:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: Mar 26 20:00:37 2026 GMT
Not After : Mar 27 20:00:37 2026 GMT
Subject: CN=83f8030cb364a130bb2860558a05cb5f56652794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:b0:26:2f:6b:25:66:e1:7f:c3:22:de:d2:
b0:fc:08:e7:7c:12:d4:6e:01:e1:dd:ce:18:50:4a:
c1:b6:5b:09:a9:3c:59:6a:aa:ac:49:82:6c:b9:ae:
c4:0b:76:7d:f7:fd:7c:c2:44:3c:fb:72:28:06:f0:
f9:f9:2e:a9:d7:a0:27:89:21:9f:c8:4e:69:da:d3:
4a:5a:73:af:51:0d:28:c0:b2:cc:ce:e7:e0:3c:45:
c0:57:5b:16:d6:ad:5d:0a:42:33:eb:58:d0:51:3b:
02:66:01:5c:66:34:f5:ef:66:17:e7:53:9f:c6:5f:
2a:d4:12:60:9e:23:f2:c0:d2:27:46:d1:5c:63:5e:
ed:55:cd:9a:72:1e:40:fc:1d:65:68:3c:b3:27:73:
fe:f2:6a:b9:48:22:04:64:12:28:40:d0:a0:e7:1b:
71:04:e2:72:03:31:8d:18:b0:8c:f0:85:58:32:7c:
4f:fe:72:3c:1b:de:af:db:c3:e1:fe:a2:f9:f4:89:
4d:62:ef:8f:b9:a5:43:dd:ca:9d:ee:59:20:7e:a1:
ec:4a:ae:ca:98:f4:e5:41:42:bd:31:7f:b9:fe:da:
e5:a2:47:1d:6e:93:e0:69:d4:59:6a:db:24:6c:ef:
6f:0f:63:e4:d2:c4:f3:6b:47:d8:fa:98:3a:32:2d:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:03:0C:B3:64:A1:30:BB:28:60:55:8A:05:CB:5F:56:65:27:94
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:4a:76:7d:63:bc:b9:32:5b:3a:20:bc:a2:38:18:d4:ce:
4f:14:92:06:5a:fc:96:c9:63:c4:d5:e0:d8:7b:c6:05:17:77:
86:59:b0:f9:f7:2c:1c:b8:86:97:4b:36:ed:d6:d5:2e:f2:33:
11:fc:54:65:57:c1:ee:46:87:cd:a4:49:2c:90:7d:5f:4e:55:
4c:d5:cd:8a:c3:6f:34:60:83:f3:a9:3b:8c:7b:58:e8:a8:87:
02:4d:df:6a:35:19:9f:a8:a9:25:9b:47:3b:71:fb:3b:0e:9f:
92:a5:49:a9:39:a9:05:8a:9f:d8:02:78:40:cd:fc:63:ab:2b:
4d:ce:71:e2:30:c6:06:89:f2:79:8c:33:7e:75:72:13:a3:b6:
32:e3:dc:58:61:c9:8f:27:9e:ac:c2:c5:a7:a4:35:e0:7d:88:
c4:74:67:d8:2c:b6:49:99:d5:90:f7:44:3b:b9:82:7d:5b:6c:
ae:b0:ae:00:74:98:09:69:da:9a:6a:a7:a9:98:c8:ca:41:88:
e1:71:ea:19:24:4a:54:57:22:88:f8:ed:31:74:44:c7:09:df:
29:9f:aa:20:8c:c2:b9:e1:d4:68:26:f0:ad:cc:65:b1:d5:1b:
95:6c:1e:5e:6d:98:5a:cd:d3:8f:f7:69:10:bb:57:cf:5f:86:
b6:7b:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:14:25 2026 by rpki-client