Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: PaHHCoGyXDh5myqaOUiPhzH2OGQt+Hcc9d6dcCdd3Fw=
Subject key identifier: 86:42:08:4A:E4:07:E7:48:62:06:EC:B4:8D:B1:B8:59:64:70:E8:B9
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 019D284E5E29C2D0903591AE751AB42EB625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 06B7
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: d7VJ8BM4eXOPNCQpKE0cZFNAgppmkNcNv62uE+GOqGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5e:29:c2:d0:90:35:91:ae:75:1a:b4:2e:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=8642084ae407e7486206ecb48db1b8596470e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:35:5e:8b:d2:52:87:31:35:34:4b:9d:c3:
b0:b9:41:2f:21:e2:56:0c:a4:fe:a5:68:47:24:72:
a9:13:3c:30:d7:08:bd:79:bf:e3:15:95:39:28:c1:
e4:e8:cb:d6:3d:75:1c:b7:16:17:5d:8c:ac:d2:60:
26:5d:05:60:98:f9:30:1e:bc:3f:01:15:73:bb:1f:
9b:6f:ba:f1:9e:4a:f4:b9:c8:e7:9c:32:42:47:04:
d5:c8:db:75:63:f1:6a:95:ff:d1:af:6a:0e:21:cc:
03:d3:f1:3a:62:98:c5:7c:7e:3e:2e:95:26:b1:61:
8a:d9:e5:f8:af:bd:48:38:cc:95:59:34:b1:02:c1:
0b:59:36:e4:ba:7d:dc:68:7b:36:61:e4:ee:5b:88:
02:60:f3:2b:af:c8:5b:a8:79:4e:bd:7d:1f:31:c7:
1d:fe:3c:3b:ea:ee:55:52:eb:ef:a4:ab:2e:4a:24:
59:99:bb:3b:37:2f:b9:85:3c:ce:f0:17:6d:3d:d4:
ab:7c:df:9c:80:5c:95:de:1d:fb:7d:f1:1b:66:c5:
d7:ba:6c:04:17:ea:c5:13:63:b7:4a:6a:d7:14:42:
df:2f:63:0c:dc:18:36:43:01:17:39:8e:90:a2:b8:
33:84:a9:ae:7c:ca:e5:ea:cd:0c:a6:4a:9b:83:95:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:08:4A:E4:07:E7:48:62:06:EC:B4:8D:B1:B8:59:64:70:E8:B9
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:4e:10:3c:81:80:d1:8b:85:0f:b2:55:54:70:ef:ed:28:
ab:3c:f1:90:8e:25:9b:e7:28:0f:0e:9b:09:df:60:59:08:f4:
3b:47:16:a6:c7:8c:f8:a3:76:b1:6d:b8:29:2b:33:51:79:59:
2e:bd:3d:b0:7e:ab:34:52:8b:df:3a:ab:c9:d2:7f:a4:69:37:
a1:3a:01:60:07:84:d9:0f:08:86:8e:8f:8a:97:89:4d:d1:6d:
9c:6b:f6:12:5f:c3:48:a5:df:58:f7:c3:e5:df:66:1e:d5:55:
d9:f6:0e:b0:a5:d3:cf:30:61:59:b6:58:1e:6c:b2:a6:d0:c3:
aa:54:6b:e8:3d:c7:04:4d:2d:21:9d:e6:6b:14:6d:ba:36:75:
87:6a:06:c7:e0:5d:ea:28:d0:ce:37:25:a0:6f:f0:5f:fb:dd:
48:f6:ab:a3:db:45:a7:f5:c8:ef:fa:f0:a6:63:f9:9e:0d:24:
8e:1b:53:bd:75:ce:ca:ff:0a:37:b2:34:9a:18:29:b8:6d:5d:
64:b8:d2:dd:a7:0a:44:3b:13:98:51:c2:db:c7:f3:48:09:6f:
82:54:92:4e:c4:c6:b7:35:b2:71:f4:65:6e:94:10:a0:a1:20:
65:f0:30:14:ac:5a:81:69:43:0d:73:4b:15:99:20:39:08:1d:
79:9b:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:58 2026 by rpki-client