Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: SuWUyzl8pmGdEXCJ7b5n5SQpnj93+AzGgMItv1VYkts=
Subject key identifier: 3D:42:AC:91:B2:43:F1:E8:52:09:F3:49:49:5D:FD:FB:6F:1D:70:1D
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 019D390A55A059F72C3CDA0BB989F7A1EC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: S56uT9PTSMhrLlV3y08oWUXK81ErBLylFuq53ZP2IWE=)
2: fVvGqH3zEVd_s4J0halsJF-eP-s.roa (hash: orRehBWRsFtnD+6UipYdY3n2n1iHa23oEjEmiLrn/lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:55:a0:59:f7:2c:3c:da:0b:b9:89:f7:a1:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=3d42ac91b243f1e85209f349495dfdfb6f1d701d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:03:f8:61:f6:cc:74:2b:23:a7:8e:1b:28:
f0:39:18:79:e9:c4:98:ff:19:47:11:84:36:62:e2:
8e:a6:da:e8:22:a9:ff:b4:9b:22:fe:46:d4:7e:a3:
dc:9f:4f:55:36:35:45:ee:cd:05:88:d6:58:c7:d6:
5f:c2:cb:bc:f8:b0:8a:e0:3a:f1:cc:99:73:04:dc:
06:0b:d7:1f:71:ce:12:f5:0c:1b:61:f1:4b:d2:bf:
7e:b3:73:82:9e:01:9e:16:93:76:ba:ba:6c:17:90:
48:0b:8f:42:62:01:07:bd:b1:da:ef:2d:0a:a8:95:
d0:2f:99:14:9d:82:0e:0a:c3:b3:da:30:29:75:b5:
a3:e7:b4:4d:da:a9:da:ac:f1:11:eb:1b:a6:6e:79:
7a:5d:ec:05:ff:59:83:a3:45:8d:89:a9:34:d4:ef:
df:8f:13:0f:ab:94:06:5d:1c:4e:e9:72:84:96:9d:
e1:22:73:f1:7a:87:7a:7f:fe:95:47:58:a3:11:42:
0e:39:28:7e:bd:11:27:58:dd:ff:cc:03:a8:13:d3:
8e:63:e1:19:45:ce:5b:17:61:51:a5:34:7c:e4:8e:
80:6b:7f:49:86:2f:37:ef:32:0c:2c:50:e6:a7:db:
f0:b3:34:a0:d8:e7:de:26:59:ba:4c:2e:6b:72:d5:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:AC:91:B2:43:F1:E8:52:09:F3:49:49:5D:FD:FB:6F:1D:70:1D
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:25:eb:e8:3c:f1:fa:7c:d8:07:0d:21:4e:98:c6:55:12:26:
94:fd:8b:81:0a:28:4b:a4:76:03:e3:f2:f1:c0:75:ac:1e:63:
da:89:10:e1:9b:ed:80:f2:76:8f:f0:5f:fc:01:86:fc:4a:da:
af:d5:21:9b:de:0c:02:53:ba:60:6c:34:a7:3d:23:ed:31:74:
38:32:f2:38:c5:8d:7d:5a:c9:71:7f:9d:c0:04:c7:98:ee:b6:
7c:36:a4:aa:86:53:ac:c4:d7:f1:4a:17:ce:55:d4:1f:92:71:
79:e3:bc:a2:44:7c:51:dc:3b:d2:bc:87:a1:e2:ff:76:8b:9a:
da:07:80:85:32:6a:51:01:80:d8:f6:89:fd:06:9c:d4:37:5b:
89:94:87:e6:5c:a5:66:0e:3e:08:12:fa:46:24:39:96:b7:13:
23:a6:fa:5d:d9:00:a5:a0:bb:d8:36:f7:e5:d9:3e:ae:9f:df:
d4:bf:57:65:41:66:3b:1e:63:cb:31:4d:cd:64:50:a8:c7:98:
09:38:6c:c7:95:ad:6d:de:6a:c5:f6:44:7c:a1:e4:ac:cd:4f:
1a:70:ac:c3:59:75:de:59:a8:bb:2c:3a:a9:89:74:0f:17:94:
8c:c2:ea:9d:e6:5f:f9:4a:79:4b:dc:08:1b:c5:ef:30:a1:d6:
cc:03:c3:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ClWgWfcsPNoLuYn3oewDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3
YThkZDIwHhcNMjYwMzI5MTAwMTExWhcNMjYwMzMwMTAwMTExWjAzMTEwLwYDVQQD
EygzZDQyYWM5MWIyNDNmMWU4NTIwOWYzNDk0OTVkZmRmYjZmMWQ3MDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDAD+GH2zHQrI6eOGyjwORh56cSY
/xlHEYQ2YuKOptroIqn/tJsi/kbUfqPcn09VNjVF7s0FiNZYx9Zfwsu8+LCK4Drx
zJlzBNwGC9cfcc4S9QwbYfFL0r9+s3OCngGeFpN2urpsF5BIC49CYgEHvbHa7y0K
qJXQL5kUnYIOCsOz2jApdbWj57RN2qnarPER6xumbnl6XewF/1mDo0WNiak01O/f
jxMPq5QGXRxO6XKElp3hInPxeod6f/6VR1ijEUIOOSh+vREnWN3/zAOoE9OOY+EZ
Rc5bF2FRpTR85I6Aa39Jhi837zIMLFDmp9vwszSg2OfeJlm6TC5rctWfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1CrJGyQ/HoUgnzSUld/ftvHXAdMB8GA1UdIwQY
MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt
NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi
LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyXr6Dzx
+nzYBw0hTpjGVRImlP2LgQooS6R2A+Py8cB1rB5j2okQ4ZvtgPJ2j/Bf/AGG/Era
r9Uhm94MAlO6YGw0pz0j7TF0ODLyOMWNfVrJcX+dwATHmO62fDakqoZTrMTX8UoX
zlXUH5JxeeO8okR8Udw70ryHoeL/doua2geAhTJqUQGA2PaJ/Qac1DdbiZSH5lyl
Zg4+CBL6RiQ5lrcTI6b6XdkApaC72Db35dk+rp/f1L9XZUFmOx5jyzFNzWRQqMeY
CThsx5Wtbd5qxfZEfKHkrM1PGnCsw1l13lmouyw6qYl0DxeUjMLqneZf+Up5S9wI
G8XvMKHWzAPDeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:52 2026 by rpki-client