Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: RKMFMg8qO+wyPMQoOwXury3fNrW2QRJazbcJRnLdfTE=
Subject key identifier: A2:CD:52:96:44:F3:22:F8:61:95:DE:58:0C:FD:E5:9E:4F:0B:B5:81
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 019CABA1F84AB26F0524BC395CAE0D0A92BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: DUh21kc3_st9zmx6FjCgEwY4O-g.roa (hash: 6N33Nz1wYaJrweY5UTdtSITSNvvX1UF/vvjIlm8O7gE=)
2: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: XmWm+VCW7NRrat3ttN5lALBmk1lRB4uAEPaExJJa3xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f8:4a:b2:6f:05:24:bc:39:5c:ae:0d:0a:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=a2cd529644f322f86195de580cfde59e4f0bb581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:8f:c1:f2:b7:48:ea:fa:25:ca:2f:8d:da:
fc:1c:06:1b:31:21:45:fc:cd:56:c7:f0:cf:43:82:
75:31:52:c0:df:8e:a2:59:cf:f0:a6:a0:58:d6:2a:
a1:8e:9c:44:82:e3:73:d6:44:09:8b:55:c9:07:7f:
23:5b:bc:a3:93:80:15:42:e9:cb:7f:d2:04:1b:1a:
16:03:bf:51:07:1f:27:5e:02:30:5a:29:04:a5:38:
4d:f3:f1:8b:53:37:f8:68:dd:99:2d:26:a8:de:9e:
84:28:30:1b:ae:41:bb:f1:69:89:c7:68:9c:ab:76:
9b:af:74:2b:94:44:a7:a1:1d:06:5e:4d:9b:a2:dd:
88:a3:3e:3b:ad:1a:b5:fd:6a:ed:6d:d5:1c:b6:43:
d4:4f:77:0e:fd:48:39:bd:16:25:6a:e2:99:aa:12:
79:6f:5e:95:4a:70:40:73:b8:c9:8b:67:c1:83:86:
ac:35:73:35:0a:51:ba:76:6e:66:d7:1c:70:e0:14:
89:f6:c0:9b:bf:73:77:e8:8a:8b:61:ca:28:dd:1d:
7b:3c:25:77:4d:42:89:52:c2:17:1b:41:fe:da:18:
09:78:8c:fb:85:97:a7:a0:e6:1b:fd:72:69:f9:90:
1c:d5:59:1c:71:b2:1f:de:81:61:3e:84:a5:d9:1b:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:52:96:44:F3:22:F8:61:95:DE:58:0C:FD:E5:9E:4F:0B:B5:81
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:83:ef:53:60:d4:e4:8b:a1:b5:c7:b4:75:d1:52:6e:24:bc:
b1:07:5a:e2:43:2d:b7:36:6c:69:5a:be:b4:f2:73:cd:b3:3f:
53:51:b1:0a:32:af:c2:89:35:31:b3:d7:fc:2b:cf:e6:92:33:
3b:5b:1a:fa:34:c3:17:60:41:d7:cb:f5:e8:59:11:e4:03:ab:
27:c3:3c:54:6a:8c:ef:f9:fa:69:57:8a:13:42:ec:db:68:3e:
c0:4e:ec:21:ec:3e:a5:87:43:e5:16:82:43:5f:db:ab:a5:86:
95:d3:67:f6:ce:43:8e:77:b1:63:4c:bd:d1:6b:95:a5:5e:9e:
d4:cf:ab:4d:39:40:61:3c:2b:22:1b:cf:db:93:9e:bc:57:7b:
a6:7e:c5:41:2c:5a:79:23:c3:96:e9:af:8c:f6:77:16:40:f7:
43:fe:8a:36:7a:8f:f2:22:1c:de:b4:08:f9:eb:2f:9b:8f:96:
67:8e:87:f7:0c:73:e4:56:a1:5d:36:a2:d8:18:03:37:c8:6e:
cb:0b:cc:f8:87:57:25:2c:ac:32:75:5d:e0:6b:6e:35:9e:b1:
dc:37:6a:1e:0d:f3:51:f2:a1:af:f4:d9:08:54:10:46:8d:48:
99:29:fc:47:5b:23:cc:f5:06:0f:75:31:a2:16:80:3b:66:67:
d2:e5:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:40 2026 by rpki-client