Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File: EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier: aM91/YgC7NcofdG8Hnhi+JirEHby04YYs/z22a7UKyw=
Subject key identifier: CB:05:62:47:EF:2A:2C:61:55:AE:95:4C:55:B0:F0:3F:8F:70:BA:7B
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial: 019D2A7291447D2E92236798CB3894D8B4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number: 12E5
Signing time: Thu 26 Mar 2026 14:00:44 +0000
Manifest this update: Thu 26 Mar 2026 14:00:44 +0000
Manifest next update: Fri 27 Mar 2026 14:00:44 +0000
Files and hashes: 1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: cJ0f3WUF0jZ3YbWKzQda3t8GV1Lr/GDU4d9rdzx0//A=)
2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:91:44:7d:2e:92:23:67:98:cb:38:94:d8:b4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Validity
Not Before: Mar 26 14:00:44 2026 GMT
Not After : Mar 27 14:00:44 2026 GMT
Subject: CN=cb056247ef2a2c6155ae954c55b0f03f8f70ba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:88:8e:0a:70:e8:3d:b4:67:d7:0e:b1:a3:
b5:29:02:19:ac:5f:d4:74:70:8a:26:23:cc:09:ba:
68:48:3b:84:33:1f:a1:03:77:cf:b9:2a:3e:9b:08:
1d:43:f5:03:95:2d:56:e8:e4:2e:81:16:fa:11:2c:
b7:3a:45:3a:c5:b8:3c:7e:6c:e6:9f:8e:9b:08:ee:
8b:a9:e9:1d:3b:bd:e0:fb:e7:43:6c:db:f7:88:2b:
47:db:bc:33:98:2a:24:4a:22:da:9f:ba:49:cc:8e:
22:54:e4:8c:2e:cd:aa:2d:ce:e4:8c:81:ae:5a:77:
1d:8f:32:c0:e2:fc:4b:e5:b8:62:14:7f:ec:3e:4b:
59:ac:80:a2:65:48:47:e9:da:3c:a1:9f:de:64:40:
ab:aa:b8:1b:44:00:f8:9e:ab:9f:a8:ea:9c:7f:f0:
e6:c2:38:38:87:4d:8d:08:04:bf:be:42:e9:bf:2d:
61:70:10:de:af:d4:6d:2f:7d:bd:30:db:eb:93:71:
38:78:51:e7:a2:1c:78:fd:51:c9:69:84:89:df:b6:
5b:cd:74:41:ec:9b:05:78:de:5c:d0:ec:bc:35:97:
49:ed:2f:5f:0d:ee:e7:83:f6:75:f4:37:ae:1f:10:
88:58:bd:87:8a:7e:cb:35:93:b2:6c:f2:ad:2e:6e:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:62:47:EF:2A:2C:61:55:AE:95:4C:55:B0:F0:3F:8F:70:BA:7B
X509v3 Authority Key Identifier:
keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:fa:d2:38:26:06:21:32:45:bc:6a:45:f1:f1:c8:89:78:
48:93:81:25:50:78:7c:c6:b9:ad:7d:6e:55:b2:b5:af:41:2d:
fb:df:01:48:bc:17:99:46:7e:c3:25:9b:0d:34:d8:d1:07:3b:
03:83:ce:8d:39:f0:cc:f6:4b:a3:cb:3f:ad:f0:e7:91:9f:f0:
81:44:da:c6:04:d1:35:b1:6a:13:01:a4:84:2e:b6:01:3c:bb:
28:56:20:22:2f:3a:63:bd:82:49:4d:f9:44:b0:39:75:d0:23:
47:d6:72:4e:df:61:86:17:cf:67:42:6a:ce:6a:79:3a:02:6d:
fe:3e:d5:01:7f:fb:28:0a:c6:b9:80:6e:7a:a4:00:bd:5c:1f:
e8:07:da:3d:aa:b5:11:f3:fa:5c:da:b1:a8:2c:3a:31:b5:f8:
b7:cc:c9:47:83:ab:0d:f5:b8:3c:dc:48:5e:26:0f:af:12:2e:
2e:67:90:aa:f3:85:1a:25:3f:fb:f4:63:8d:a3:e2:3d:c9:e5:
08:ff:15:f9:60:a2:2b:3c:dd:ea:65:bc:f8:e0:ca:2b:58:bc:
16:9f:25:52:9b:9a:24:b9:12:61:17:c9:9b:2e:15:95:ad:f0:
10:ea:4c:48:d5:8f:f9:30:cc:55:49:b0:ad:68:af:da:c0:c0:
3c:70:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:42:34 2026 by rpki-client