Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: q5zvfWhFLd9nJ3IYI39iLx/WGC9iYK3AXpM3dVtl0CI=
Subject key identifier: 9A:B2:95:6B:02:19:46:41:33:E2:70:4A:B7:95:5C:B4:63:90:D0:E0
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019CAAC6F40C1B15036893E6EB0573E9E5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 1764
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: wuyGPVxrBlKo0j0YIzlCo9dWYDvoRZTI4+Qz4mGLq6s=)
2: rJGAs6X1h64jP6R35e61qsCTXFY.roa (hash: GVSlFoAaLCK/f0Zjs4b7sBkaI33tH8EXTGwc45c8NVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f4:0c:1b:15:03:68:93:e6:eb:05:73:e9:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=9ab2956b0219464133e2704ab7955cb46390d0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:4a:c8:df:85:08:7e:8f:eb:5b:34:56:e1:
4a:a9:f7:03:f8:06:a8:18:f9:4e:29:db:f9:23:64:
64:5f:97:7b:50:06:7a:61:54:b4:de:37:9b:1d:0b:
63:e1:2c:b8:cb:d2:b2:58:e8:26:d6:d7:e1:7f:57:
bc:99:ea:a6:c8:6a:70:67:fd:5d:8a:d9:d5:42:90:
2e:00:bd:e7:1c:60:fb:59:75:69:78:53:11:7a:e1:
32:ca:20:66:7d:a2:9b:54:c1:84:f4:50:c3:85:04:
0a:6d:a5:88:54:a4:63:11:a4:e0:76:be:63:f5:e7:
38:c0:4c:34:f6:4e:26:0e:0a:37:cf:d2:a8:59:33:
8a:a2:66:d5:6b:d0:6b:dc:c0:87:a6:89:a9:b6:b0:
32:c1:13:02:09:f2:91:de:f6:02:68:90:16:5e:e6:
81:2b:65:6e:16:d9:43:d4:d8:09:47:c5:54:6d:62:
e4:c5:bb:81:c5:aa:ea:d0:ac:0d:61:0e:1f:cb:96:
77:1e:87:d4:fd:da:6d:ff:c3:76:5c:50:f1:a3:f4:
64:67:52:7c:35:14:f2:d7:70:8e:37:8c:46:d0:6a:
d4:34:77:5b:cd:69:fa:d8:27:e9:92:c9:d6:58:9c:
03:a1:05:14:bf:a8:94:35:ec:a7:fd:b1:10:56:a5:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:95:6B:02:19:46:41:33:E2:70:4A:B7:95:5C:B4:63:90:D0:E0
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:10:b1:93:8d:cd:16:d8:5b:58:75:ee:16:1f:16:52:75:5d:
9f:d8:3f:d6:05:c8:89:02:71:72:a1:20:d0:54:82:8d:93:f3:
05:24:5c:99:c1:57:18:48:01:39:7a:3f:76:ba:d2:3c:34:ad:
67:7d:b0:cb:70:86:0e:f7:5f:00:2d:94:1b:f8:0b:51:33:63:
60:e3:2f:af:6f:9b:b9:09:52:6e:6a:3c:aa:8b:46:31:ad:1e:
b7:7f:68:df:94:08:0c:06:66:f7:c7:1a:95:79:58:dc:9a:b6:
56:bd:af:a5:c9:73:a5:25:ba:59:9a:ad:a0:8a:51:c9:de:c1:
9e:65:5a:54:9f:c8:53:bd:cb:0f:47:63:cd:f0:30:ce:59:74:
fe:cc:20:1c:97:12:38:19:9d:25:0a:ed:8f:e6:31:1a:77:ae:
a5:b0:a5:2e:66:30:8e:bb:3b:ae:75:f4:f8:b9:b9:52:c8:84:
e0:bb:1d:2e:7c:ac:26:05:eb:6e:c8:c9:ea:bf:9a:39:d6:0c:
50:26:07:11:8e:2c:26:fc:5c:cd:e9:a2:82:61:43:a6:a5:03:
1e:9a:21:a1:14:0c:d6:de:14:a7:31:e3:eb:a1:7c:25:8d:e7:
94:ed:b8:59:68:d8:37:5d:25:3a:e0:21:c8:68:6b:bc:3b:a7:
c2:c1:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:04 2026 by rpki-client