Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: uzCLO2ZdtSXAZA1IcX/OLbvWfGubJR3GA39JREGSg8Q=
Subject key identifier: 57:35:B3:A9:74:C4:F2:DF:90:F4:BC:EA:8A:D4:42:3D:4C:9D:0A:F7
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019D9A3EA6D5DF76DAA0FD6D46DA78B464AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 17E0
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: QTTicBhRdjNiKBPPYCsqg5gwxNnPap7mRn6JFyvZ7xM=)
2: rJGAs6X1h64jP6R35e61qsCTXFY.roa (hash: GVSlFoAaLCK/f0Zjs4b7sBkaI33tH8EXTGwc45c8NVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a6:d5:df:76:da:a0:fd:6d:46:da:78:b4:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=5735b3a974c4f2df90f4bcea8ad4423d4c9d0af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:f2:48:74:a6:79:45:b9:c3:9d:f1:0d:d5:
41:de:3c:0c:8e:37:91:0b:7d:e2:d6:de:c6:65:a3:
99:23:64:ea:d4:5a:2d:a7:32:03:0a:af:63:6c:48:
75:90:f3:4e:6f:87:2d:f0:ec:7b:ed:f7:85:81:03:
c7:a6:d7:b6:66:1c:5f:c6:ce:f2:f8:23:db:fe:e0:
1c:12:2f:35:dc:87:e4:7a:e5:df:28:a8:a3:0a:8b:
b2:62:10:74:fb:f4:e9:b2:c8:73:e0:f8:c1:64:d3:
21:df:4b:85:c9:c6:a0:1e:b9:c1:19:33:8a:21:59:
b6:f8:8e:f4:06:54:d9:73:00:4e:96:d6:c1:1d:fb:
cf:c8:57:15:86:48:69:b7:2c:0e:63:08:2c:75:0f:
44:5b:dc:ed:61:de:80:7e:c0:46:a2:d1:84:b9:8f:
80:f7:2b:8e:b1:b2:4e:cb:f7:0d:b4:41:e9:ad:29:
20:fa:f4:60:3e:8c:08:a7:fd:fc:07:72:e9:84:2c:
b7:e6:b8:9c:e7:0c:4c:02:20:c9:cd:0c:1f:45:1f:
e0:bc:08:e1:2f:1c:88:10:96:4e:7d:0e:3b:bf:af:
1c:10:8c:db:29:d6:00:5e:3d:12:cc:41:44:35:90:
20:57:b8:b5:ab:21:72:06:db:ab:ee:bf:c2:73:71:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:B3:A9:74:C4:F2:DF:90:F4:BC:EA:8A:D4:42:3D:4C:9D:0A:F7
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d8:26:ef:39:18:1b:0c:70:a0:c2:67:83:bb:6d:ef:9e:af:
cd:f5:6c:86:2b:4f:fa:31:b3:10:0d:84:42:b5:31:79:57:bf:
3d:e2:f6:5b:91:a7:31:e4:d2:92:87:6f:eb:38:45:59:77:f4:
10:f8:c8:da:cf:4b:06:f3:35:77:e0:ee:78:d1:04:e7:fc:10:
9d:5e:a2:92:c4:cf:2b:5c:2e:1a:ce:8a:20:91:1a:2e:e3:e0:
ed:1d:6e:36:87:ad:23:10:6e:f7:9d:d3:06:70:b7:3f:79:a6:
43:fa:43:2b:cb:3c:69:8c:2b:99:3f:e6:d6:dc:b4:e3:e0:a1:
79:fa:bd:ae:1d:94:39:60:8e:68:53:65:fd:02:b6:1a:11:b0:
44:91:a2:0a:80:3f:dc:48:e4:48:c2:84:b9:1d:81:83:b1:85:
42:45:35:b9:97:55:4c:ad:87:22:68:66:50:70:37:b9:fd:9f:
ce:3e:8f:bf:a7:ad:ad:30:20:7e:61:87:43:d4:87:2e:9d:b0:
07:3e:1f:e6:e0:12:cb:8a:0f:de:10:df:89:41:96:34:44:ea:
7f:56:70:9f:97:e1:e6:6f:f3:81:e0:a4:bf:1f:6c:25:31:91:
c2:c3:dc:7c:aa:fe:13:17:40:8c:0a:4d:14:0d:96:e0:c5:da:
2c:b1:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:35 2026 by rpki-client