Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: AfFIwALyOvTtsvmW986Y2PNK7Gg6gaMr5eGIfAIiY+I=
Subject key identifier: C9:3F:69:1E:D8:50:1E:1D:9E:65:C7:55:A9:3A:6A:3B:DD:43:D4:25
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 019D26286EA47CB2BB42C111ED0B7CD81314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 17CC
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: IOJ_IuxrPhU7ERFs81G1nbxR8to.roa (hash: 8D5brBAEHZ/yOCBGlmqvRZETRlUwEQyzFztv6q9hPDM=)
2: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: 66JQG6j6DMCI3wgDct/BI0/A7weUPiU5nzMJ5Ffw++c=)
3: sIMXhU48nRnJhtkFS0ovznJIg5Q.roa (hash: BCAw434iZ2D2AbMltSpB4NTSwE7tv654mLk+khObkaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6e:a4:7c:b2:bb:42:c1:11:ed:0b:7c:d8:13:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=c93f691ed8501e1d9e65c755a93a6a3bdd43d425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:be:d2:db:ea:99:6e:83:83:54:fe:25:1f:
31:74:65:05:fb:a4:bc:f5:f3:74:5a:a3:fe:b9:7f:
64:93:f6:22:f0:fd:58:fb:be:c5:f9:8d:57:ca:b8:
a5:24:79:83:11:dc:92:01:91:fd:9a:93:8f:24:d5:
04:ab:72:37:0f:52:d8:ca:56:99:f4:09:fb:b5:98:
64:7f:74:7b:9d:2b:7e:b7:27:dd:7d:db:e4:01:ff:
a5:e0:75:4e:4d:f0:46:d5:d5:18:1f:83:88:06:59:
32:ec:c3:1f:12:85:83:ea:90:72:71:c7:80:54:4d:
0a:67:f6:34:f1:7b:4e:c3:91:84:35:78:b7:d5:f3:
d4:10:fc:64:52:8a:b0:dd:5f:d5:32:3b:f9:ac:ec:
30:6b:81:46:53:58:11:d8:db:e7:cb:95:bc:7e:c8:
37:0e:ff:25:f7:e0:70:45:8c:1b:74:ac:d2:10:e6:
3b:01:d4:8f:9e:c7:a0:b7:11:d5:89:87:46:5a:4b:
a2:1c:af:3a:73:70:8d:dd:97:a6:13:78:a2:42:5d:
24:ff:a6:95:76:3b:ff:5d:2b:14:6a:a6:42:09:69:
0a:8a:8f:49:53:09:cb:6d:6f:b4:46:a7:df:0c:c2:
1b:a1:57:19:55:84:ff:99:b5:32:78:30:c2:c0:a7:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:69:1E:D8:50:1E:1D:9E:65:C7:55:A9:3A:6A:3B:DD:43:D4:25
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:1e:b0:99:4e:5b:4f:be:08:6a:d0:d4:97:8b:c4:c0:33:
fd:8b:c6:4d:bd:ea:f6:73:1b:6e:de:dc:1e:20:de:64:8c:5e:
96:c5:33:b3:86:04:1c:36:2e:99:9a:c0:a4:fe:89:38:e3:44:
1c:bb:b8:62:a6:62:1a:79:56:1a:c8:d5:06:58:88:ce:4c:73:
81:89:94:3f:23:d1:f2:14:51:7b:d9:9f:59:5e:2c:90:c2:95:
04:79:70:20:60:c9:b6:9b:af:45:4c:ee:3e:06:a9:9f:07:26:
e7:7c:2d:18:52:0e:c8:ae:17:32:e2:e5:d4:75:41:be:ef:5a:
ed:9c:20:cb:53:a5:d6:1b:d8:3a:fc:78:b2:f5:53:5f:10:92:
17:bc:77:96:a1:15:b9:98:67:ae:18:93:bc:94:02:85:29:d7:
22:9d:35:17:ac:c2:f9:f0:7a:ac:81:fe:c0:1a:c2:b8:1a:4c:
96:a9:3d:f8:77:77:61:e2:5c:63:10:b3:c6:ad:4a:3a:7a:5a:
17:77:16:94:ac:5e:10:00:a3:b5:d3:f8:33:0b:6f:97:71:85:
6f:ce:24:31:66:2b:c2:f6:18:83:1e:73:ba:e0:87:f9:33:1e:
f5:03:e2:13:42:e1:88:e1:5a:20:37:6d:61:d7:ed:0b:9f:af:
f2:59:c7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKG6kfLK7QsER7Qt82BMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjQ2YjM4YzNkODdkMzMxNDViNjM0YjRlMWRjYzIxNDVm
NjQxNmMwHhcNMjYwMzI1MTgwMTE3WhcNMjYwMzI2MTgwMTE3WjAzMTEwLwYDVQQD
EyhjOTNmNjkxZWQ4NTAxZTFkOWU2NWM3NTVhOTNhNmEzYmRkNDNkNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoa+0tvqmW6Dg1T+JR8xdGUF+6S8
9fN0WqP+uX9kk/Yi8P1Y+77F+Y1XyrilJHmDEdySAZH9mpOPJNUEq3I3D1LYylaZ
9An7tZhkf3R7nSt+tyfdfdvkAf+l4HVOTfBG1dUYH4OIBlky7MMfEoWD6pBycceA
VE0KZ/Y08XtOw5GENXi31fPUEPxkUoqw3V/VMjv5rOwwa4FGU1gR2Nvny5W8fsg3
Dv8l9+BwRYwbdKzSEOY7AdSPnsegtxHViYdGWkuiHK86c3CN3ZemE3iiQl0k/6aV
djv/XSsUaqZCCWkKio9JUwnLbW+0RqffDMIboVcZVYT/mbUyeDDCwKey1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk/aR7YUB4dnmXHVak6ajvdQ9QlMB8GA1UdIwQY
MBaAFHlkazjD2H0zFFtjS04dzCFF9kFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEt
ZTEzNmM5ODliZTMzLzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEtZTEzNmM5ODliZTMz
LzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm4esJlO
W0++CGrQ1JeLxMAz/YvGTb3q9nMbbt7cHiDeZIxelsUzs4YEHDYumZrApP6JOONE
HLu4YqZiGnlWGsjVBliIzkxzgYmUPyPR8hRRe9mfWV4skMKVBHlwIGDJtpuvRUzu
Pgapnwcm53wtGFIOyK4XMuLl1HVBvu9a7Zwgy1Ol1hvYOvx4svVTXxCSF7x3lqEV
uZhnrhiTvJQChSnXIp01F6zC+fB6rIH+wBrCuBpMlqk9+Hd3YeJcYxCzxq1KOnpa
F3cWlKxeEACjtdP4Mwtvl3GFb84kMWYrwvYYgx5zuuCH+TMe9QPiE0LhiOFaIDdt
YdftC5+v8lnHwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:10 2026 by rpki-client