Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: AFoPcgV8eJAQkma785vtI+OZwnY57sUtZmNXh8fSxsA=
Subject key identifier: 82:34:55:89:B7:D7:BD:E3:E6:60:BB:9E:E9:1F:FC:CB:BD:02:59:A2
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 019CAAC60CA7E212C3EDCF24B592C2DE817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 0676
Signing time: Sun 01 Mar 2026 19:00:31 +0000
Manifest this update: Sun 01 Mar 2026 19:00:31 +0000
Manifest next update: Mon 02 Mar 2026 19:00:31 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: efR/4L6uUTC74aq1AUpHaeOXspYqOem2ALcKaV88MLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0c:a7:e2:12:c3:ed:cf:24:b5:92:c2:de:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Mar 1 19:00:31 2026 GMT
Not After : Mar 2 19:00:31 2026 GMT
Subject: CN=82345589b7d7bde3e660bb9ee91ffccbbd0259a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:d5:49:a2:68:15:73:8c:2a:02:37:95:6d:
b6:42:eb:f3:c5:9b:0f:6a:0a:68:d2:e5:33:cb:5f:
62:33:85:77:68:38:2e:96:91:4a:92:7a:ad:75:08:
0f:6a:19:1f:07:a5:f8:c6:56:94:ec:ff:c8:a7:7b:
a2:51:46:35:7b:db:f3:33:0a:08:28:65:89:21:66:
c7:92:f6:11:4a:7a:a2:54:df:67:ff:d9:ff:c4:a8:
9d:82:70:a3:50:87:08:a4:74:53:54:4f:3f:03:49:
0e:9b:80:d4:ec:1d:e7:93:84:99:18:a7:25:77:22:
be:59:97:90:8e:1c:57:39:4f:3b:70:f0:e6:4a:fa:
19:41:18:7f:f9:31:2f:5a:13:d2:d6:94:2b:54:56:
3a:72:56:fd:40:9d:34:87:b9:33:bb:c4:ea:3c:26:
ff:ed:9d:53:b8:22:be:0f:17:6b:e4:70:5e:4b:a5:
98:d9:f6:f0:a8:e6:e4:7c:46:a7:a8:bb:92:76:b7:
c9:cb:bb:05:d9:cc:f7:ab:19:02:49:aa:0e:b3:2c:
a8:4c:c9:73:da:f8:2e:77:34:b0:d7:81:7f:19:1a:
fd:97:86:e8:48:c3:7c:3b:4e:bc:b3:0c:39:40:ae:
52:3c:13:d2:0a:b5:c1:63:31:8b:fe:41:56:67:0b:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:55:89:B7:D7:BD:E3:E6:60:BB:9E:E9:1F:FC:CB:BD:02:59:A2
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:a7:37:5e:ab:99:fd:e0:e6:51:13:11:48:e8:ea:a3:8e:
ad:46:de:cb:15:bf:aa:79:91:13:48:4b:01:d3:1f:f2:4e:7b:
9c:94:56:d0:bd:a0:92:0a:e6:4d:04:1a:03:8a:db:52:69:31:
6f:7e:36:c5:93:5b:ee:2f:68:5e:2c:f3:30:8e:0d:4f:32:ee:
14:b8:9d:c6:10:1b:57:89:83:34:67:04:85:42:d6:9a:70:84:
bf:76:28:fe:95:f3:23:53:b5:74:47:68:34:82:b2:e6:2d:59:
42:12:2f:40:d6:95:bf:05:00:02:e2:eb:d8:34:00:8a:87:6d:
34:c9:b0:5c:16:fa:5c:26:d5:78:1d:1f:48:77:c2:f9:b5:22:
be:9c:83:d5:88:f7:ed:74:75:e4:d9:3d:52:d6:9a:46:e9:97:
e5:80:ec:65:6c:11:dc:e7:c2:ad:d4:f0:6a:e4:d8:4c:ac:55:
04:2a:d7:97:4f:a5:c8:6e:6f:a4:18:90:87:26:ad:50:8f:1e:
bb:f3:12:8b:56:02:7b:38:f9:3e:42:b9:91:c3:7a:70:93:00:
33:7c:9b:dc:58:10:a0:bf:41:97:32:3b:17:2d:ca:0a:f0:64:
67:06:37:89:a4:f2:71:f4:9a:63:2d:a7:c2:12:0c:60:6b:f3:
86:74:69:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgyn4hLD7c8ktZLC3oF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGQ0NmM1ODIyY2FkOTI1M2VhNTNhMTAwZjNkOTM2MjI0
YWU2ODcwHhcNMjYwMzAxMTkwMDMxWhcNMjYwMzAyMTkwMDMxWjAzMTEwLwYDVQQD
Eyg4MjM0NTU4OWI3ZDdiZGUzZTY2MGJiOWVlOTFmZmNjYmJkMDI1OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F7VSaJoFXOMKgI3lW22QuvzxZsP
agpo0uUzy19iM4V3aDgulpFKknqtdQgPahkfB6X4xlaU7P/Ip3uiUUY1e9vzMwoI
KGWJIWbHkvYRSnqiVN9n/9n/xKidgnCjUIcIpHRTVE8/A0kOm4DU7B3nk4SZGKcl
dyK+WZeQjhxXOU87cPDmSvoZQRh/+TEvWhPS1pQrVFY6clb9QJ00h7kzu8TqPCb/
7Z1TuCK+Dxdr5HBeS6WY2fbwqObkfEanqLuSdrfJy7sF2cz3qxkCSaoOsyyoTMlz
2vgudzSw14F/GRr9l4boSMN8O068sww5QK5SPBPSCrXBYzGL/kFWZwvL4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII0VYm3173j5mC7nukf/Mu9AlmiMB8GA1UdIwQY
MBaAFHsNRsWCLK2SU+pToQDz2TYiSuaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAt
YmFhNTllY2UyYjYzLzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAtYmFhNTllY2UyYjYz
LzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaOnN16r
mf3g5lETEUjo6qOOrUbeyxW/qnmRE0hLAdMf8k57nJRW0L2gkgrmTQQaA4rbUmkx
b342xZNb7i9oXizzMI4NTzLuFLidxhAbV4mDNGcEhULWmnCEv3Yo/pXzI1O1dEdo
NIKy5i1ZQhIvQNaVvwUAAuLr2DQAiodtNMmwXBb6XCbVeB0fSHfC+bUivpyD1Yj3
7XR15Nk9UtaaRumX5YDsZWwR3OfCrdTwauTYTKxVBCrXl0+lyG5vpBiQhyatUI8e
u/MSi1YCezj5PkK5kcN6cJMAM3yb3FgQoL9BlzI7Fy3KCvBkZwY3iaTycfSaYy2n
whIMYGvzhnRpDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:25 2026 by rpki-client