Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: HKGE4L2qAJX05hFNsXTDzsBdinAX/ckCa/ueIRi3D/4=
Subject key identifier: 4D:61:2D:EF:6B:80:36:49:E7:11:CB:CA:9B:27:D5:CC:16:01:3C:05
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 019DAD8E6861289F905091B776662C0067C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 06FC
Signing time: Tue 21 Apr 2026 01:01:24 +0000
Manifest this update: Tue 21 Apr 2026 01:01:24 +0000
Manifest next update: Wed 22 Apr 2026 01:01:24 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: xttrUfaBIpXlo/9zbWU16U0s/5vIuU5lM9ppNVbUzis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:8e:68:61:28:9f:90:50:91:b7:76:66:2c:00:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Apr 21 01:01:24 2026 GMT
Not After : Apr 22 01:01:24 2026 GMT
Subject: CN=4d612def6b803649e711cbca9b27d5cc16013c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7c:e3:6d:e5:f0:ea:27:b8:b7:30:d6:cc:38:
4e:8b:78:9f:08:26:f8:5f:1d:60:b0:07:2f:fb:8b:
3d:5b:8d:f5:c9:e7:b0:fa:4d:66:b1:a5:0e:d7:c0:
42:ec:f4:cc:c8:53:58:8e:c1:92:a0:4a:bd:bf:6a:
ca:57:13:9d:37:3c:71:ea:bc:50:1a:61:1b:02:af:
a3:0b:3a:8c:59:84:33:9e:7f:37:29:f9:be:d3:d0:
90:9d:18:b4:27:36:3a:5d:96:15:2b:6a:4a:7b:35:
c1:73:2f:85:cc:c6:ab:6b:99:e6:17:0a:96:05:c1:
8c:0d:00:9b:79:01:4d:62:e9:81:3c:26:f0:eb:f5:
7e:21:f4:e0:d9:26:e4:41:33:72:4c:52:e8:21:a7:
d4:3f:9e:bc:46:fe:9a:25:56:6a:cd:2f:e0:d8:d8:
99:ab:05:0d:4d:14:74:1f:9b:54:72:cf:1f:63:75:
17:42:1c:cf:9b:0d:e2:9d:b5:73:12:27:97:c2:c9:
6d:a1:43:5e:6a:1c:5a:7b:fb:fb:87:1e:57:96:0b:
48:18:cc:a7:b0:9e:3b:9e:7d:de:e5:81:c8:02:a6:
58:63:fe:15:0f:07:84:ee:5a:e6:3d:56:63:7f:34:
e7:15:67:98:b5:0d:f9:9a:6f:08:3f:1b:98:66:e9:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:61:2D:EF:6B:80:36:49:E7:11:CB:CA:9B:27:D5:CC:16:01:3C:05
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8c:28:4b:8d:18:6f:2f:e7:66:80:1f:f3:38:e4:4a:1c:31:
bb:be:12:27:a3:2b:b9:fd:3d:2e:53:9a:cb:80:d0:d9:80:3c:
97:3f:10:63:c9:17:11:d2:c3:88:57:8f:01:08:99:56:e1:9f:
17:c5:16:af:9e:b0:5e:ac:d0:3d:09:8d:81:e5:f9:f5:4c:73:
8f:19:7d:75:7f:9e:5d:ee:a3:c4:27:c2:11:b7:3e:0b:36:dc:
2e:68:db:4d:c1:a3:94:0a:f9:ac:5f:67:46:25:91:60:71:30:
f9:d4:5b:98:44:0d:e1:a5:13:ad:a4:9e:6a:d1:b8:36:98:e7:
b4:e8:bf:cc:f8:04:b3:8e:99:9e:63:ee:c9:e5:6f:c9:8b:55:
9a:36:7f:22:c7:86:39:b5:e7:fa:21:88:f6:14:c7:54:cb:3e:
52:4f:c2:d2:71:9d:b3:d2:1a:86:7b:7b:41:23:f4:4e:41:57:
3e:95:12:49:23:a3:af:a6:89:65:2c:4b:13:84:99:b7:df:a3:
1a:df:47:36:c5:22:e0:10:9d:f3:eb:78:26:46:a9:5c:df:58:
04:54:c8:5a:c4:1c:00:56:30:eb:6b:bf:24:19:a3:1a:c8:8f:
e4:a0:5f:88:2e:d8:70:1e:8d:c2:36:1d:f4:38:0a:12:1d:14:
3a:0b:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:31:22 2026 by rpki-client