Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: ppgWqN7A3tyFzdYrUr5WjvcM5OKXTsjPyXlIQxPK0Og=
Subject key identifier: E0:E5:CD:BE:E6:A8:9B:BF:F2:41:1C:B9:F0:1C:9E:E6:42:87:0B:DA
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 019D2772C6EF22F57320D62C14441625F401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 096B
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: +ZSGJW2rBfHcBaZCh0b5Z0QGoHEK3Kj8EOaUMIUptWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c6:ef:22:f5:73:20:d6:2c:14:44:16:25:f4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=e0e5cdbee6a89bbff2411cb9f01c9ee642870bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:39:18:47:d2:9b:65:88:7b:25:89:b0:5a:
42:da:1b:78:80:0f:97:39:48:a2:de:74:c2:b3:43:
52:75:2f:cc:e2:2c:15:82:98:01:15:e4:11:b5:6d:
f4:f2:31:a1:1f:8f:ab:72:2c:bd:76:3c:ef:2c:87:
9d:c8:29:34:cd:a1:db:51:bf:7a:84:cc:51:50:c9:
c8:cc:c0:92:b0:5e:d1:36:91:2d:77:b1:14:b3:35:
a9:d0:21:46:89:e6:af:7e:15:56:6c:7a:e2:7d:39:
2a:54:9c:9e:af:64:0b:06:e7:62:ca:1e:2d:ba:8e:
46:c4:d9:a3:a3:9f:0f:3f:07:14:cc:79:8c:8c:6d:
6d:d6:a3:d0:f6:e8:8a:39:63:4a:c7:17:fe:af:53:
55:86:f6:8d:61:b2:37:d3:b7:d0:1b:35:d1:6a:70:
b8:ea:60:8b:ba:9a:ea:d3:2c:4e:60:43:db:f3:ba:
00:f3:ac:37:bf:6c:45:84:8a:83:b6:bb:95:e6:50:
9b:87:4f:25:2c:dd:d5:4f:36:89:fd:a5:61:10:96:
4c:6a:f0:24:51:3d:cf:c2:6b:ee:8c:9c:28:bc:40:
a1:4f:55:04:a9:15:6a:af:92:1d:f4:1c:76:7c:c6:
8d:aa:e1:67:2a:29:5b:4c:0b:c0:e7:2d:e5:9d:b1:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:CD:BE:E6:A8:9B:BF:F2:41:1C:B9:F0:1C:9E:E6:42:87:0B:DA
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:cf:9e:04:93:ac:1c:b6:b0:77:a5:50:67:e6:97:8f:1a:
cb:36:0a:f3:e3:d5:48:f0:7b:14:bd:ea:6f:b4:cd:ab:66:e3:
4e:84:a9:48:56:a5:1a:3d:10:e3:4f:b6:f3:f0:e1:43:db:d5:
c8:c6:00:fb:1c:f5:86:93:ed:7d:10:c5:11:d8:1c:f6:4a:c4:
a6:39:cd:cc:15:e5:45:57:a5:2a:a7:f3:d9:cd:77:f5:57:3c:
6c:c2:e2:2b:33:f2:f9:de:a5:61:ae:23:61:ce:c1:fa:aa:38:
ce:31:b5:29:fb:d1:d7:90:a0:bb:09:7e:ea:e2:90:ca:39:fc:
1a:1b:31:af:fc:51:62:8b:80:be:3a:53:6b:b6:fc:c7:fc:fa:
1a:3b:d7:1a:9f:0c:79:55:57:84:90:03:6c:cf:b8:8e:0b:eb:
6b:3e:12:23:99:73:57:e9:42:32:c0:1c:d6:7a:e7:14:32:a1:
da:8c:6a:4a:89:19:4b:20:4f:da:12:f3:38:40:aa:86:fb:b1:
ad:1c:c9:c1:16:7d:c5:fa:b6:b2:9f:db:ed:84:91:67:8b:4c:
f2:b8:a3:dc:ae:8c:9b:18:90:f0:de:b3:e1:c5:21:29:1d:2b:
e7:63:c9:a4:51:74:70:bd:f9:12:0d:82:a4:13:9f:c9:68:a5:
2b:f9:74:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsbvIvVzINYsFEQWJfQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGIzYjM5NDg2NWU0Yjg1YjY4NmEzOWY1NWVkNGJlNjUz
NmE0ODIwHhcNMjYwMzI2MDAwMjA2WhcNMjYwMzI3MDAwMjA2WjAzMTEwLwYDVQQD
EyhlMGU1Y2RiZWU2YTg5YmJmZjI0MTFjYjlmMDFjOWVlNjQyODcwYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudU5GEfSm2WIeyWJsFpC2ht4gA+X
OUii3nTCs0NSdS/M4iwVgpgBFeQRtW308jGhH4+rciy9djzvLIedyCk0zaHbUb96
hMxRUMnIzMCSsF7RNpEtd7EUszWp0CFGieavfhVWbHrifTkqVJyer2QLBudiyh4t
uo5GxNmjo58PPwcUzHmMjG1t1qPQ9uiKOWNKxxf+r1NVhvaNYbI307fQGzXRanC4
6mCLuprq0yxOYEPb87oA86w3v2xFhIqDtruV5lCbh08lLN3VTzaJ/aVhEJZMavAk
UT3PwmvujJwovEChT1UEqRVqr5Id9Bx2fMaNquFnKilbTAvA5y3lnbHodQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODlzb7mqJu/8kEcufAcnuZChwvaMB8GA1UdIwQY
MBaAFHsLOzlIZeS4W2hqOfVe1L5lNqSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYt
MmM4ZDAwMTFlODhhLzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYtMmM4ZDAwMTFlODhh
LzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdPPngST
rBy2sHelUGfml48ayzYK8+PVSPB7FL3qb7TNq2bjToSpSFalGj0Q40+28/DhQ9vV
yMYA+xz1hpPtfRDFEdgc9krEpjnNzBXlRVelKqfz2c139Vc8bMLiKzPy+d6lYa4j
Yc7B+qo4zjG1KfvR15Cguwl+6uKQyjn8Ghsxr/xRYouAvjpTa7b8x/z6GjvXGp8M
eVVXhJADbM+4jgvraz4SI5lzV+lCMsAc1nrnFDKh2oxqSokZSyBP2hLzOECqhvux
rRzJwRZ9xfq2sp/b7YSRZ4tM8rij3K6MmxiQ8N6z4cUhKR0r52PJpFF0cL35Eg2C
pBOfyWilK/l0Fg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:42 2026 by rpki-client