Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: h+5buFIGb+onjtfp1iS0nqnArTE2nq0rNmq47TpDKds=
Subject key identifier: EB:78:8F:DF:36:DE:BE:87:BE:79:AC:B3:44:1F:E3:A0:BE:70:89:2B
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 019D37C0025F3CA76B266DF3BCFC64470217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 0923
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: 1-CcdGpM9DcuLRpqwbiMu3odID9g.roa (hash: pKdfKPtLXW/w7Hq1cLOFELO9jRtinOQ6Uq5RI4M/bWQ=)
2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: 0uzerM1F1P2NxRY0r+wmz9+kMutcpkwV18ijBrBrQ6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:02:5f:3c:a7:6b:26:6d:f3:bc:fc:64:47:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=eb788fdf36debe87be79acb3441fe3a0be70892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:da:c2:9d:39:e9:c6:ea:a9:41:15:27:48:
a1:e5:4c:d1:89:90:65:92:35:52:41:4f:e2:0e:99:
2f:b4:67:d0:54:80:96:96:df:c0:2f:a7:72:9d:6c:
8e:0e:80:7c:5f:ac:1e:55:f4:af:98:e0:e1:d3:79:
46:d5:c1:cd:0c:84:30:9c:4f:1b:50:50:8e:5e:e8:
7c:ed:5d:1a:8d:8c:4c:78:b2:44:fe:a7:bb:97:46:
fc:3e:9a:99:4b:25:67:98:7f:4b:56:3d:74:60:5b:
71:47:6f:1b:1d:0d:6a:2f:d7:7e:78:6d:d8:7a:98:
6d:a2:4f:c0:d3:b7:dc:8d:69:35:e1:c2:e4:d6:0d:
aa:56:05:78:f3:4e:36:91:93:ad:8d:c4:ba:65:e7:
23:6b:62:84:c2:e7:8e:26:a4:d2:26:42:0f:86:26:
74:fd:d2:d1:56:51:93:93:df:2f:64:31:23:53:f4:
52:ae:c5:3a:19:39:98:35:1c:c6:c9:57:bc:0a:eb:
69:28:cd:68:91:03:68:38:a6:c2:b0:9e:fe:b3:12:
cc:e6:e8:c1:a8:1f:98:81:1e:d8:0e:5e:14:e4:c4:
20:d2:32:cb:53:87:50:24:05:98:e8:a1:44:25:51:
92:48:df:6b:89:eb:0d:80:bd:8a:64:58:0f:08:01:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:8F:DF:36:DE:BE:87:BE:79:AC:B3:44:1F:E3:A0:BE:70:89:2B
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:92:a1:d8:31:81:3b:fb:47:d6:1c:9f:09:ee:5a:d5:71:
be:f3:26:9a:ff:32:a0:4e:4c:e9:58:58:4b:18:89:8b:f7:01:
09:64:a9:ea:dc:be:f7:5d:19:87:ba:8d:04:a4:d4:c2:8b:f7:
45:0e:2c:ed:b7:4a:ac:21:c6:de:89:35:91:d1:98:79:ef:72:
c1:9c:91:09:85:7e:08:87:a0:95:f5:58:a5:6b:0c:b8:92:e4:
72:0f:81:ad:f8:c0:a7:ae:4b:28:6c:26:42:97:c4:48:86:28:
29:c2:25:81:ae:04:c4:e3:ed:5e:35:61:56:10:2a:1c:13:a8:
fb:5f:2e:99:0a:bb:72:8e:f5:ef:79:ca:70:04:68:ed:e2:81:
fb:b8:bc:f9:88:f1:f0:5b:20:2d:0d:63:6f:89:ad:6c:53:df:
a1:5c:e4:24:c9:ce:12:64:00:fa:71:07:58:99:d8:cb:14:be:
da:af:41:85:ad:81:00:05:16:19:54:f4:92:70:f9:c8:a0:2c:
22:a9:e8:70:0c:13:23:30:61:1d:7a:ce:ab:2c:c3:c4:a3:d6:
2d:65:23:05:8b:b5:19:ae:46:9b:6d:6c:a3:97:76:92:92:b3:
23:d4:11:67:d9:a5:2e:82:09:82:f6:44:80:02:4a:84:81:73:
3d:0c:95:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wAJfPKdrJm3zvPxkRwIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDNhOWIyMGQyYWZkMDFkOWExYzYyOGQzMDFiOTljODdj
YzVhY2QwHhcNMjYwMzI5MDQwMDIzWhcNMjYwMzMwMDQwMDIzWjAzMTEwLwYDVQQD
EyhlYjc4OGZkZjM2ZGViZTg3YmU3OWFjYjM0NDFmZTNhMGJlNzA4OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fawp056cbqqUEVJ0ih5UzRiZBl
kjVSQU/iDpkvtGfQVICWlt/AL6dynWyODoB8X6weVfSvmODh03lG1cHNDIQwnE8b
UFCOXuh87V0ajYxMeLJE/qe7l0b8PpqZSyVnmH9LVj10YFtxR28bHQ1qL9d+eG3Y
ephtok/A07fcjWk14cLk1g2qVgV48042kZOtjcS6Zecja2KEwueOJqTSJkIPhiZ0
/dLRVlGTk98vZDEjU/RSrsU6GTmYNRzGyVe8CutpKM1okQNoOKbCsJ7+sxLM5ujB
qB+YgR7YDl4U5MQg0jLLU4dQJAWY6KFEJVGSSN9riesNgL2KZFgPCAHmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt4j9823r6Hvnmss0Qf46C+cIkrMB8GA1UdIwQY
MBaAFHsDqbINKv0B2aHGKNMBuZyHzFrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMt
YTdkMTllYzA3ZjEzLzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMtYTdkMTllYzA3ZjEz
LzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz6Sodgx
gTv7R9YcnwnuWtVxvvMmmv8yoE5M6VhYSxiJi/cBCWSp6ty+910Zh7qNBKTUwov3
RQ4s7bdKrCHG3ok1kdGYee9ywZyRCYV+CIeglfVYpWsMuJLkcg+BrfjAp65LKGwm
QpfESIYoKcIlga4ExOPtXjVhVhAqHBOo+18umQq7co7173nKcARo7eKB+7i8+Yjx
8FsgLQ1jb4mtbFPfoVzkJMnOEmQA+nEHWJnYyxS+2q9Bha2BAAUWGVT0knD5yKAs
IqnocAwTIzBhHXrOqyzDxKPWLWUjBYu1Ga5Gm21so5d2kpKzI9QRZ9mlLoIJgvZE
gAJKhIFzPQyV6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:17 2026 by rpki-client