Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.mft (raw, json)
Hash identifier: hL0h659t51cdkL0c8QpaFLzxDDnNGiacT5BGwwb0hFA=
Subject key identifier: D0:7C:F0:FD:EF:17:DC:F6:53:D2:D8:54:40:47:47:6E:36:7D:AB:D3
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019CB023B054F8335A715F980E34E3BE680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
Manifest number: 26
Signing time: Mon 02 Mar 2026 20:00:54 +0000
Manifest this update: Mon 02 Mar 2026 20:00:54 +0000
Manifest next update: Tue 03 Mar 2026 20:00:54 +0000
Files and hashes: 1: Bg-OtisBUwjdEBIGSM7g7FBg2VM.roa (hash: ozuaJObBitpJuXLUUTDns0BTPq/twpAoYpCqyXvMtNc=)
2: EWXPgb9aPQz1nUExFIp2HzS_nKg.crl (hash: mMHXXLRPmLtjfcaykgCQYW+3yzK/R8e+QWgz0wy/hNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:b0:54:f8:33:5a:71:5f:98:0e:34:e3:be:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: Mar 2 20:00:54 2026 GMT
Not After : Mar 3 20:00:54 2026 GMT
Subject: CN=d07cf0fdef17dcf653d2d8544047476e367dabd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:cd:67:ea:a0:f2:4f:f6:67:68:ef:ef:40:
ae:8a:1c:8e:47:ae:c5:37:17:0d:83:d2:75:07:6c:
57:55:cb:53:d3:ce:fe:23:2e:a9:5a:98:de:d7:7b:
9d:9d:14:81:72:62:ff:d8:8f:42:b5:37:90:1d:b8:
54:ad:01:c9:2b:08:b0:10:db:da:51:8f:3d:3e:76:
07:ba:72:11:4d:14:dc:bb:e5:36:02:5f:51:81:fa:
48:e3:cc:fe:fb:f8:3a:ff:ac:08:87:b3:48:6a:0e:
e1:85:59:68:13:82:ec:96:b4:06:1b:c9:d6:95:4a:
b1:4e:e8:57:8d:92:3a:43:c4:3c:5c:71:d4:e8:49:
55:f5:25:9a:70:59:21:14:71:bd:09:08:f8:9c:12:
4d:b3:07:b8:f5:52:d2:e4:1e:6c:fe:79:15:0d:87:
52:a9:23:8b:55:85:63:4c:d8:2c:11:8a:63:ee:95:
77:68:5e:da:be:9f:a0:d1:17:3d:6a:21:1d:fd:0d:
32:a2:82:f4:92:28:c0:5c:7c:b0:df:fa:a2:e3:9a:
2c:28:71:b5:c1:9e:b5:d7:0e:eb:ac:be:79:8c:de:
c5:c4:b3:27:18:6b:5c:a3:d2:34:89:22:af:c6:71:
49:03:ba:a7:df:70:86:14:f8:36:17:7c:99:fc:97:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:F0:FD:EF:17:DC:F6:53:D2:D8:54:40:47:47:6E:36:7D:AB:D3
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:40:0c:40:e4:94:33:ba:e9:49:30:19:08:df:0b:74:3c:
56:cb:62:94:97:68:4a:85:f5:d6:76:ab:ea:f9:8c:f1:a6:d4:
8c:55:a7:01:0f:d2:98:b8:62:c5:bb:71:24:d6:ca:6d:41:e9:
b0:6f:83:14:b7:04:85:8a:9d:67:89:85:be:fe:0a:cc:d2:b3:
09:27:92:24:a4:97:a8:b9:e4:c1:d3:ce:71:2a:c6:63:78:bf:
1d:7b:19:68:8b:44:51:c8:21:b3:b7:c6:47:59:c6:41:d9:69:
02:34:b2:d9:5b:cc:c6:0b:d4:23:d9:60:f8:c0:7e:cd:6d:61:
b8:2e:11:95:cb:96:c2:7d:86:cb:73:56:b9:07:5b:f9:60:eb:
a6:17:83:2a:5a:dc:0a:9b:38:26:f0:c6:2b:fe:04:9b:03:43:
de:16:21:5c:af:81:db:06:56:87:15:a8:6f:18:9b:12:32:b5:
9e:b7:a3:09:93:83:50:77:bb:c1:88:34:44:31:2f:1f:88:3c:
d4:6a:16:22:ad:98:c2:c9:26:d8:8f:64:f9:d6:75:11:12:e6:
cb:54:45:48:a9:3d:bc:6a:43:6f:42:9b:e7:5a:a2:c6:18:86:
5e:e8:01:5f:45:e0:e8:34:00:0c:73:03:ab:14:d4:d7:34:96:
d1:b4:73:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywI7BU+DNacV+YDjTjvmgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjVjZjgxYmY1YTNkMGNmNTlkNDEzMTE0OGE3NjFmMzRi
ZjljYTgwHhcNMjYwMzAyMjAwMDU0WhcNMjYwMzAzMjAwMDU0WjAzMTEwLwYDVQQD
EyhkMDdjZjBmZGVmMTdkY2Y2NTNkMmQ4NTQ0MDQ3NDc2ZTM2N2RhYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMnNZ+qg8k/2Z2jv70CuihyOR67F
NxcNg9J1B2xXVctT087+Iy6pWpje13udnRSBcmL/2I9CtTeQHbhUrQHJKwiwENva
UY89PnYHunIRTRTcu+U2Al9RgfpI48z++/g6/6wIh7NIag7hhVloE4LslrQGG8nW
lUqxTuhXjZI6Q8Q8XHHU6ElV9SWacFkhFHG9CQj4nBJNswe49VLS5B5s/nkVDYdS
qSOLVYVjTNgsEYpj7pV3aF7avp+g0Rc9aiEd/Q0yooL0kijAXHyw3/qi45osKHG1
wZ611w7rrL55jN7FxLMnGGtco9I0iSKvxnFJA7qn33CGFPg2F3yZ/JeMhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB88P3vF9z2U9LYVEBHR242favTMB8GA1UdIwQY
MBaAFBFlz4G/Wj0M9Z1BMRSKdh80v5yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMt
OTNiYTgyMGE3NWI3LzEvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMtOTNiYTgyMGE3NWI3
LzEvRVdYUGdiOWFQUXoxblVFeEZJcDJIelNfbktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAdADEDk
lDO66UkwGQjfC3Q8VstilJdoSoX11nar6vmM8abUjFWnAQ/SmLhixbtxJNbKbUHp
sG+DFLcEhYqdZ4mFvv4KzNKzCSeSJKSXqLnkwdPOcSrGY3i/HXsZaItEUcghs7fG
R1nGQdlpAjSy2VvMxgvUI9lg+MB+zW1huC4RlcuWwn2Gy3NWuQdb+WDrpheDKlrc
Cps4JvDGK/4EmwND3hYhXK+B2wZWhxWobxibEjK1nrejCZODUHe7wYg0RDEvH4g8
1GoWIq2Ywskm2I9k+dZ1ERLmy1RFSKk9vGpDb0Kb51qixhiGXugBX0Xg6DQADHMD
qxTU1zSW0bRzCw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:25:56 2026 by rpki-client