Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier: FK4KT1QRwXrRUejRM71D2Gds+4oOBk68MRWYkhUGRJ8=
Subject key identifier: 09:BF:23:68:FE:AD:17:CB:C1:8A:02:BE:F1:C8:0D:85:6C:A6:5A:A0
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial: 019D28F25B846DFE82956E1385B3393C388F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number: 0498
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: IedCdF1rzXUbyH7J6rd9VSth456M4l63FKRGyY4PKRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5b:84:6d:fe:82:95:6e:13:85:b3:39:3c:38:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=09bf2368fead17cbc18a02bef1c80d856ca65aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:b7:8f:f4:5d:3a:c9:ca:0b:2d:b5:39:a1:
ad:88:d5:99:c3:f4:f3:be:8e:ec:05:ac:0e:c1:09:
1e:ba:5f:2b:e3:88:df:3c:75:4a:c8:e3:12:a7:be:
58:ba:89:31:27:60:a9:b1:f8:8f:a7:9c:fa:89:1f:
40:fe:4a:53:e4:54:40:fa:31:b3:57:81:d1:b8:9e:
b4:34:ca:ad:fc:c7:81:d0:ad:39:bd:99:77:57:5c:
91:90:8e:9f:69:d1:fa:d4:b6:88:98:dc:b2:8a:6b:
5c:ac:40:52:15:f5:7b:10:78:69:aa:84:45:0e:a0:
83:1d:fe:d0:f3:85:8b:97:47:43:2d:5e:30:0a:fc:
e5:98:c6:7c:7a:00:0d:50:70:d3:38:14:ac:16:35:
07:82:6a:1c:36:ef:ca:75:1f:05:66:8b:56:49:4a:
89:6c:9e:16:8b:10:0d:53:d9:09:7d:f2:89:d7:00:
94:33:ee:17:db:e5:f1:61:f5:9b:a2:db:43:2e:21:
82:ab:31:8c:7b:60:b9:66:e0:b2:e6:2e:ad:1d:15:
d2:87:22:29:7b:3d:19:87:f0:13:33:f4:06:36:07:
92:af:6c:b1:3f:5d:eb:5e:3c:19:59:f9:fb:32:d4:
00:e5:a6:2e:12:1d:0c:0e:73:9d:44:80:8d:ed:a3:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:23:68:FE:AD:17:CB:C1:8A:02:BE:F1:C8:0D:85:6C:A6:5A:A0
X509v3 Authority Key Identifier:
keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:46:49:49:17:e0:e4:48:14:c3:2e:4e:18:d2:5e:47:07:
e9:09:01:06:ef:0f:5b:fe:38:b9:9e:30:2d:58:a2:9f:04:7c:
fb:75:ca:69:42:27:3f:17:6b:bc:91:bc:6a:ed:69:5a:a9:29:
87:d5:cb:21:01:ca:e4:b1:6a:ff:c4:7b:d1:97:96:7b:16:db:
47:ce:a0:1d:4d:0e:22:5b:03:dc:d2:35:a0:05:95:2d:03:38:
8f:29:ac:1b:42:08:35:c5:fd:73:19:87:80:ef:38:78:2e:ca:
bf:79:84:89:9f:0b:38:a6:5f:78:94:ea:ec:60:41:8f:cb:5e:
be:86:c7:77:1f:9e:67:47:58:0f:7c:ef:13:6a:a1:b3:99:fe:
3a:c8:44:71:40:de:77:65:3d:ec:b4:78:b9:6b:14:72:d3:4c:
28:bc:00:0f:2d:c3:12:38:67:8d:53:28:51:b1:fb:0a:1f:b6:
14:c7:d0:65:70:89:82:1b:29:d4:a2:fb:d8:b9:de:8b:95:d2:
41:4f:cc:9f:57:68:a1:07:80:f1:cb:8b:96:74:53:75:68:cc:
3f:40:6f:c0:16:c5:5a:6a:08:75:58:0e:e1:70:c5:8b:9d:92:
81:17:34:85:ba:25:b7:c5:bc:70:bf:66:b3:77:d4:98:0f:89:
f1:19:62:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8luEbf6ClW4ThbM5PDiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjhjNGQzZmZjYThlNzM3ODY4YTQ1Njk2YTE5OGZkZTA5
ZmQ0NTcwHhcNMjYwMzI2MDcwMTA0WhcNMjYwMzI3MDcwMTA0WjAzMTEwLwYDVQQD
EygwOWJmMjM2OGZlYWQxN2NiYzE4YTAyYmVmMWM4MGQ4NTZjYTY1YWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ni3j/RdOsnKCy21OaGtiNWZw/Tz
vo7sBawOwQkeul8r44jfPHVKyOMSp75YuokxJ2CpsfiPp5z6iR9A/kpT5FRA+jGz
V4HRuJ60NMqt/MeB0K05vZl3V1yRkI6fadH61LaImNyyimtcrEBSFfV7EHhpqoRF
DqCDHf7Q84WLl0dDLV4wCvzlmMZ8egANUHDTOBSsFjUHgmocNu/KdR8FZotWSUqJ
bJ4WixANU9kJffKJ1wCUM+4X2+XxYfWbottDLiGCqzGMe2C5ZuCy5i6tHRXShyIp
ez0Zh/ATM/QGNgeSr2yxP13rXjwZWfn7MtQA5aYuEh0MDnOdRICN7aO3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm/I2j+rRfLwYoCvvHIDYVsplqgMB8GA1UdIwQY
MBaAFHloxNP/yo5zeGikVpahmP3gn9RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTkt
MDc3M2VkNmY0ZmZkLzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTktMDc3M2VkNmY0ZmZk
LzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe49GSUkX
4ORIFMMuThjSXkcH6QkBBu8PW/44uZ4wLViinwR8+3XKaUInPxdrvJG8au1pWqkp
h9XLIQHK5LFq/8R70ZeWexbbR86gHU0OIlsD3NI1oAWVLQM4jymsG0IINcX9cxmH
gO84eC7Kv3mEiZ8LOKZfeJTq7GBBj8tevobHdx+eZ0dYD3zvE2qhs5n+OshEcUDe
d2U97LR4uWsUctNMKLwADy3DEjhnjVMoUbH7Ch+2FMfQZXCJghsp1KL72Lnei5XS
QU/Mn1dooQeA8cuLlnRTdWjMP0BvwBbFWmoIdVgO4XDFi52SgRc0hbolt8W8cL9m
s3fUmA+J8RliIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:13 2026 by rpki-client