Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.mft (raw, json)
Hash identifier: EeEYka/PkORtKIIUpWYcZrJPqYZh93rqlz7MkwH+Zqw=
Subject key identifier: 20:07:C2:83:E1:DE:D6:F5:B6:04:E6:0D:4F:73:BC:4C:82:53:BE:D9
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019E20FF67347A29AD524D3C2C7CBFE23FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
Manifest number: E7
Signing time: Wed 13 May 2026 11:01:09 +0000
Manifest this update: Wed 13 May 2026 11:01:09 +0000
Manifest next update: Thu 14 May 2026 11:01:09 +0000
Files and hashes: 1: EWXPgb9aPQz1nUExFIp2HzS_nKg.crl (hash: jkVksueQxn2ap20SP6OYOHXX/hHjTiKWMJUGPcADD2Q=)
2: Niis1CvHmgu0murfxragV9VItkc.roa (hash: E9NbgdUKgVnnBg4sHFYFf1Tcl3McpQql43eZKvfPeVo=)
3: WWhjfuGXzWeUF3SrP6qTW0kig3w.roa (hash: YpBQprObA5U7M9d1rKXR9BWlTRND9KaDzkg+3msX8mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:67:34:7a:29:ad:52:4d:3c:2c:7c:bf:e2:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: May 13 11:01:09 2026 GMT
Not After : May 14 11:01:09 2026 GMT
Subject: CN=2007c283e1ded6f5b604e60d4f73bc4c8253bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:2f:de:0d:20:9d:23:b9:d0:bf:2b:1f:99:
a9:71:0e:00:64:93:a0:54:6e:79:68:7c:88:b9:80:
a3:8d:ce:3a:39:42:70:98:da:dd:26:d9:cd:be:47:
62:68:c0:d1:e9:25:54:29:4c:fd:42:1d:36:9d:6f:
29:aa:bb:56:6f:9b:0c:6b:1c:e5:67:c8:07:80:3e:
cd:c8:ae:2b:35:a6:6a:fd:a5:53:11:db:dd:85:f5:
c0:a9:67:33:55:d6:3b:29:38:34:38:10:20:27:32:
e6:f2:ca:b2:0f:d3:07:fd:be:15:32:f2:d6:de:5b:
37:f0:e3:dc:56:db:08:90:89:b4:cb:30:db:f5:a4:
e5:fd:7a:ae:fa:9f:02:c9:15:7e:7e:fb:ec:22:fb:
03:b1:a4:2a:bc:39:cc:52:11:01:8f:1b:71:01:c9:
c5:46:ca:8f:00:ab:cc:54:0c:67:64:44:bd:15:6b:
5d:38:cf:c6:9d:90:39:a7:d9:14:65:27:f1:1b:fd:
70:15:ce:19:b6:88:99:3f:bb:2d:f7:e4:6e:ed:e3:
bb:fc:64:59:a4:68:5c:21:1f:e1:30:24:6c:12:c3:
ef:68:94:b2:6e:74:76:da:07:7d:39:e0:5d:09:7c:
d3:3b:cb:90:45:3d:c1:82:7f:bf:bb:61:cb:de:e5:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:C2:83:E1:DE:D6:F5:B6:04:E6:0D:4F:73:BC:4C:82:53:BE:D9
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:1d:50:f3:aa:df:97:de:d4:0e:7f:84:29:5c:ad:9b:55:
28:97:67:ec:97:17:e0:13:fe:f2:b6:6b:f2:53:9c:cf:82:4c:
63:d4:f3:9e:33:a1:1d:b5:5a:85:d8:f7:02:fa:35:01:b3:b3:
6c:b9:4a:30:96:98:f8:ba:19:98:d7:75:a4:c3:44:46:a3:6d:
60:89:ee:97:35:39:12:6e:a8:50:fe:d5:56:04:65:a8:63:33:
88:b2:d1:70:13:b3:24:ab:82:52:d1:90:f3:f2:5c:f7:4d:2f:
2c:a8:c7:12:25:41:97:9d:4d:90:9d:d8:a2:ad:3e:d0:2a:11:
8d:aa:83:5a:c8:29:c1:9d:1a:26:69:2a:fd:6d:1a:ca:fc:c3:
2b:a8:03:87:53:9b:71:d6:50:fe:53:30:11:5c:10:85:7e:ce:
81:c2:cf:b1:9e:bd:12:31:4b:94:c1:e2:aa:32:01:c1:98:eb:
b0:34:81:09:33:f7:bf:5f:b5:a2:fa:52:70:9c:2e:9f:29:55:
bb:6a:39:c4:22:98:9c:10:35:2b:a2:4d:73:97:74:44:d8:77:
55:cd:2c:fa:6e:9f:27:ac:28:af:61:1e:af:24:c9:a2:ce:44:
81:64:c8:8e:e6:fc:47:11:51:d9:b8:32:12:8a:1e:28:85:68:
f3:dc:ba:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/2c0eimtUk08LHy/4j+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjVjZjgxYmY1YTNkMGNmNTlkNDEzMTE0OGE3NjFmMzRi
ZjljYTgwHhcNMjYwNTEzMTEwMTA5WhcNMjYwNTE0MTEwMTA5WjAzMTEwLwYDVQQD
EygyMDA3YzI4M2UxZGVkNmY1YjYwNGU2MGQ0ZjczYmM0YzgyNTNiZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwAv3g0gnSO50L8rH5mpcQ4AZJOg
VG55aHyIuYCjjc46OUJwmNrdJtnNvkdiaMDR6SVUKUz9Qh02nW8pqrtWb5sMaxzl
Z8gHgD7NyK4rNaZq/aVTEdvdhfXAqWczVdY7KTg0OBAgJzLm8sqyD9MH/b4VMvLW
3ls38OPcVtsIkIm0yzDb9aTl/Xqu+p8CyRV+fvvsIvsDsaQqvDnMUhEBjxtxAcnF
RsqPAKvMVAxnZES9FWtdOM/GnZA5p9kUZSfxG/1wFc4ZtoiZP7st9+Ru7eO7/GRZ
pGhcIR/hMCRsEsPvaJSybnR22gd9OeBdCXzTO8uQRT3Bgn+/u2HL3uWQRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAHwoPh3tb1tgTmDU9zvEyCU77ZMB8GA1UdIwQY
MBaAFBFlz4G/Wj0M9Z1BMRSKdh80v5yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMt
OTNiYTgyMGE3NWI3LzEvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMtOTNiYTgyMGE3NWI3
LzEvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohUdUPOq
35fe1A5/hClcrZtVKJdn7JcX4BP+8rZr8lOcz4JMY9TznjOhHbVahdj3Avo1AbOz
bLlKMJaY+LoZmNd1pMNERqNtYInulzU5Em6oUP7VVgRlqGMziLLRcBOzJKuCUtGQ
8/Jc900vLKjHEiVBl51NkJ3Yoq0+0CoRjaqDWsgpwZ0aJmkq/W0ayvzDK6gDh1Ob
cdZQ/lMwEVwQhX7OgcLPsZ69EjFLlMHiqjIBwZjrsDSBCTP3v1+1ovpScJwunylV
u2o5xCKYnBA1K6JNc5d0RNh3Vc0s+m6fJ6wor2EeryTJos5EgWTIjub8RxFR2bgy
EooeKIVo89y6qA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:21:43 2026 by rpki-client