Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.mft (raw, json)
Hash identifier: +89eMELyalZTnAmvfeVv6pUobyT3l9cJnMdLJvrQ10c=
Subject key identifier: 7E:21:D3:CA:F0:E1:62:78:27:0C:C8:DF:80:25:6E:24:18:32:54:87
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019EC337D65484CBC11AC9C6EAC1E6E325DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
Manifest number: 013B
Signing time: Sat 13 Jun 2026 23:01:16 +0000
Manifest this update: Sat 13 Jun 2026 23:01:16 +0000
Manifest next update: Sun 14 Jun 2026 23:01:16 +0000
Files and hashes: 1: EWXPgb9aPQz1nUExFIp2HzS_nKg.crl (hash: hkpli3dRnTalrZRs6UIZHj3UQvGkDFPXf873UllTYS0=)
2: Niis1CvHmgu0murfxragV9VItkc.roa (hash: E9NbgdUKgVnnBg4sHFYFf1Tcl3McpQql43eZKvfPeVo=)
3: WWhjfuGXzWeUF3SrP6qTW0kig3w.roa (hash: YpBQprObA5U7M9d1rKXR9BWlTRND9KaDzkg+3msX8mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:d6:54:84:cb:c1:1a:c9:c6:ea:c1:e6:e3:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: Jun 13 23:01:16 2026 GMT
Not After : Jun 14 23:01:16 2026 GMT
Subject: CN=7e21d3caf0e16278270cc8df80256e2418325487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:12:1b:4e:a0:4e:85:c2:b8:e0:db:b7:5c:
06:76:f5:55:77:26:cf:b1:6f:ac:66:b3:03:07:2c:
f8:98:be:fb:0c:7a:91:12:70:25:83:ce:c8:2b:a3:
ac:87:c8:7e:92:55:52:66:7c:96:37:64:d6:9d:83:
c5:e7:4e:5f:0e:84:65:9c:51:86:33:25:f3:35:20:
94:dc:0b:ea:0a:7f:bb:e7:22:e8:f9:85:90:b4:21:
89:4d:ad:09:c9:68:54:7c:89:dd:e3:16:5f:21:d3:
7e:07:b0:bd:6d:4e:97:4e:2e:39:85:e7:92:cb:00:
a8:d5:70:57:45:b4:e1:b6:78:76:6f:af:b8:a2:af:
59:37:48:8c:b1:74:16:3b:3f:4d:57:9c:1f:22:2c:
2a:2a:bb:e8:ab:1b:e1:a9:93:d7:e8:26:8c:3b:c7:
55:d0:44:fe:71:44:00:15:8a:b2:e5:1d:7a:2a:b3:
27:c7:23:d0:0e:7a:c2:ac:87:18:cd:ef:62:50:c6:
fc:94:5b:ad:37:d8:fd:5c:3e:3b:ae:f0:1e:67:90:
06:4d:1b:c0:6e:af:57:a1:85:ec:ed:96:5e:d5:7f:
6b:a7:e2:09:c0:02:05:d1:06:37:b5:c4:63:af:15:
81:ce:93:70:7d:1a:eb:79:35:fb:2a:be:98:fb:1f:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:D3:CA:F0:E1:62:78:27:0C:C8:DF:80:25:6E:24:18:32:54:87
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:24:a5:3f:d3:15:08:48:4a:31:d3:8d:29:26:4f:aa:b2:
6a:bf:11:79:1c:87:19:45:7e:64:a3:af:b1:77:28:d6:e7:46:
8d:51:7c:69:cf:9e:54:42:fa:b2:3c:93:74:ef:31:8d:a8:a6:
50:26:ab:81:64:ce:70:30:8b:1a:3c:72:db:f5:30:c1:5c:81:
cf:d9:1f:fe:60:12:1a:73:9b:85:5b:83:94:0b:91:cb:a3:73:
9f:79:86:4f:77:19:0d:df:8f:ca:07:bd:8f:64:3f:01:1a:9b:
c4:67:dc:bc:92:30:9e:1f:2a:fd:7d:ed:34:18:dd:de:83:8d:
1c:0f:14:1b:18:02:08:f3:91:fd:76:a2:76:ea:05:1a:89:dc:
82:d2:db:da:b8:96:fd:41:94:05:68:d4:04:a2:af:5e:3d:58:
87:25:9f:e1:8a:fe:c5:37:21:ad:5f:e1:a2:20:ac:b3:0b:ec:
0a:f1:d0:73:ae:0b:09:03:0c:7a:f1:74:44:8c:93:e3:2f:ed:
d5:1f:e4:1a:22:38:df:ba:1f:7e:df:47:2f:5a:2b:96:40:4a:
71:a4:4e:e1:a0:bf:e4:8d:17:8e:80:38:05:46:09:0b:20:b0:
57:40:b5:df:22:2e:8d:37:06:ca:b1:47:3a:82:26:92:ec:18:
15:4e:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:58 2026 by rpki-client