
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: 5U6FwbumRmzyUC9mMH3J6KQCLEV5Yeh+iiBu6J+QgZ0=
Subject key identifier: 2F:BD:9B:CD:41:50:C7:5F:E6:5C:DE:17:24:55:B1:49:08:66:BF:82
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 019CB1A40E9C5E1E07AB5D3C4FF85B0EFBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 092E
Signing time: Tue 03 Mar 2026 03:00:44 +0000
Manifest this update: Tue 03 Mar 2026 03:00:44 +0000
Manifest next update: Wed 04 Mar 2026 03:00:44 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: ghmOecuamDYZoh6sfLvoVhD7HVES+HLRjrChuHJtVkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:a4:0e:9c:5e:1e:07:ab:5d:3c:4f:f8:5b:0e:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Mar 3 03:00:44 2026 GMT
Not After : Mar 4 03:00:44 2026 GMT
Subject: CN=2fbd9bcd4150c75fe65cde172455b1490866bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:ab:36:ca:d1:12:72:71:c7:c7:67:30:9d:
ee:8b:87:d7:17:45:ee:18:33:dc:cd:47:19:93:64:
d2:67:2a:31:01:0f:28:52:48:c8:27:22:33:da:28:
a0:e8:9d:f4:62:2d:57:a9:87:29:3b:b8:50:9e:86:
ec:eb:0f:a1:03:f1:a7:f5:2e:4b:0e:30:b5:72:a8:
b7:97:10:4c:68:1e:a4:e0:33:4e:cf:2f:de:de:2f:
84:a0:f8:e2:de:98:68:32:3f:92:0c:dc:67:4d:6d:
39:e1:bf:fb:d5:b1:fb:d5:50:9b:2f:bb:f2:24:16:
bb:b3:08:29:65:b8:fd:22:58:b2:10:8b:d5:19:d5:
c8:7f:ab:d2:26:63:f3:cb:bb:05:28:76:cf:9e:51:
54:b7:19:6a:e2:85:1a:0f:f2:d8:fa:94:45:87:fc:
27:80:ff:5f:43:26:a8:70:4b:b7:15:97:ac:85:37:
da:25:ef:6f:61:2f:8e:3f:5f:7a:a7:83:49:fc:ab:
9b:39:2f:be:92:32:65:dc:12:72:41:6c:70:4e:10:
99:aa:de:05:d6:1d:52:85:75:a7:72:0a:5d:0a:98:
4c:3b:92:34:da:11:1d:d7:07:f4:1e:dd:7a:bb:47:
a8:72:6b:27:a5:3d:68:80:d2:ac:69:3d:f3:34:1f:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:9B:CD:41:50:C7:5F:E6:5C:DE:17:24:55:B1:49:08:66:BF:82
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7b:4c:6a:28:fb:25:8a:95:ad:9b:0d:29:8e:11:56:4c:44:
c2:a5:1c:a8:c3:91:10:fa:02:aa:60:2a:45:67:58:92:2a:1d:
a4:48:8a:1f:12:88:04:cc:74:9d:fa:4e:dc:8e:75:49:e6:d4:
a3:ef:2e:ad:cf:69:bd:d0:c7:b4:af:ec:88:1e:2d:cb:2b:ea:
f2:35:da:29:3c:dd:51:65:9d:cf:da:98:4f:db:47:3e:d2:6e:
88:fe:c5:66:99:0e:c4:ff:0a:68:f7:84:93:2a:38:94:24:af:
06:80:37:50:59:ca:47:c0:93:6c:0a:21:2c:bd:bf:1b:20:d3:
bd:6f:9c:38:ff:d4:dd:e7:45:d0:be:5c:48:8b:79:03:17:71:
d1:68:6b:8b:a6:9d:a1:2e:0d:48:bb:49:15:4f:d1:cb:4b:1e:
a3:85:7a:25:37:06:34:0f:06:e8:e4:85:2f:04:2a:b1:10:f9:
c5:80:1a:c7:a2:3a:57:7b:ac:ae:6f:52:84:d8:31:72:13:5d:
ad:a1:ab:ef:f2:7b:31:78:b8:cc:9b:86:49:de:a0:93:3c:6e:
7b:0a:4f:a1:19:75:aa:7d:58:6e:de:38:80:cb:04:ec:7e:9b:
c1:8e:11:e9:46:3c:22:0d:68:65:94:47:a1:8a:cf:d1:01:22:
bc:4e:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:52 2026 by rpki-client