Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
File: ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json)
Hash identifier: 4bYzYK+jJpy2XyrX1yo6lhNJ/xNBlK+P1iCCiy74rN8=
Subject key identifier: 0C:87:A1:89:14:63:04:B3:E8:E5:07:3D:2D:7F:06:53:4F:9C:1A:50
Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Certificate serial: 019D382E793AFD06D08F8F6C65946063230C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
Manifest number: 029A
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: COlPjvzoiLOPREU6Xl4JmzPhARs.roa (hash: 5C49uxVNsaO0/i4gZlUTQ3BJ2tqns4mMti2FLTSC2o4=)
2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: hAIE0gyzFJtTKryzuFaovUz1zme1nZuDzFGwc64XoKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:79:3a:fd:06:d0:8f:8f:6c:65:94:60:63:23:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=0c87a189146304b3e8e5073d2d7f06534f9c1a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:50:f6:85:48:30:a1:78:be:f1:6d:b6:71:
c0:26:23:71:b6:48:47:44:4b:b5:64:95:82:d7:c9:
1a:f1:d0:06:94:90:e4:b7:8f:e2:a4:3a:ed:c1:82:
26:31:6c:d9:71:a6:a4:3a:8e:0b:57:5c:d6:7b:19:
3b:05:78:d6:45:2c:53:53:cc:b6:e1:9a:59:09:56:
ad:df:0a:3a:32:11:84:e6:0d:7a:8c:68:d6:7c:8a:
75:6e:5a:e0:01:a8:02:85:42:c4:72:25:c5:e1:4b:
02:58:8c:68:42:ef:34:ac:37:2e:1c:be:7f:72:0f:
fb:3e:be:7d:fb:32:2c:f1:9d:7c:86:36:7a:bd:3d:
a6:af:b4:ae:22:cc:61:67:52:40:0c:c8:cc:9f:7b:
e4:31:20:e2:c6:9b:5e:b7:07:5e:fe:f4:8d:21:a4:
5f:41:0e:64:ed:f0:5f:aa:53:9c:ae:9f:52:5b:c2:
a4:ee:e0:b7:a7:55:2d:7a:21:b5:54:77:75:70:bb:
95:7e:e5:f1:e8:65:70:28:a4:12:33:1b:e2:bd:20:
a8:26:f1:bd:10:af:1a:14:60:36:f6:3f:76:68:f8:
ba:66:41:92:73:dc:98:5a:e7:47:63:a7:b4:48:16:
be:8b:72:d8:27:02:55:0b:d2:2e:8d:53:22:66:e4:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:A1:89:14:63:04:B3:E8:E5:07:3D:2D:7F:06:53:4F:9C:1A:50
X509v3 Authority Key Identifier:
keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:ff:46:c5:a5:36:d1:6a:f3:ea:ee:25:a9:12:0c:e2:af:
1a:f5:82:c4:08:ac:6c:44:3b:8e:f4:10:95:b9:19:ea:f8:4b:
ef:04:04:ba:48:de:66:b2:fc:d7:e5:e7:5c:79:24:a0:be:73:
aa:02:94:90:25:7e:bb:94:9e:90:9c:13:c1:85:ac:10:30:f2:
d4:34:0e:07:62:47:bc:30:62:f1:d9:d2:45:46:74:e8:9b:e5:
91:3a:50:e0:b9:ba:24:c5:3c:a2:81:46:68:f0:81:e3:53:70:
11:9d:ab:5d:71:72:2b:1b:02:d0:34:dc:77:2f:09:ae:0a:c9:
5a:5a:91:2d:d3:95:74:23:7c:fc:17:c0:fb:3d:d2:9c:cb:9f:
ba:5c:a5:d4:5b:10:ee:f3:c3:41:ef:0c:be:e4:29:58:bb:04:
d8:f9:79:6f:dd:f9:75:d5:95:72:18:d0:1e:63:4a:4f:ef:ad:
84:80:3c:dc:c2:89:b7:3b:39:57:c5:19:c2:d2:9d:84:15:f7:
e8:66:b6:c8:d4:d6:d5:83:54:af:fb:12:02:13:7a:d2:60:89:
cb:73:e5:2e:18:0a:d3:df:df:93:b2:93:3f:4e:79:24:79:29:
dc:34:98:8d:d9:2e:82:38:2c:a3:6f:89:b0:b9:c1:0a:0d:82:
6e:a2:ba:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lnk6/QbQj49sZZRgYyMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDY4NzBjOTFmNTQwY2RkMzBhYTU5NTk4Yjc3YmYyOTM4
ZDg0ZDQwHhcNMjYwMzI5MDYwMTAyWhcNMjYwMzMwMDYwMTAyWjAzMTEwLwYDVQQD
EygwYzg3YTE4OTE0NjMwNGIzZThlNTA3M2QyZDdmMDY1MzRmOWMxYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPVQ9oVIMKF4vvFttnHAJiNxtkhH
REu1ZJWC18ka8dAGlJDkt4/ipDrtwYImMWzZcaakOo4LV1zWexk7BXjWRSxTU8y2
4ZpZCVat3wo6MhGE5g16jGjWfIp1blrgAagChULEciXF4UsCWIxoQu80rDcuHL5/
cg/7Pr59+zIs8Z18hjZ6vT2mr7SuIsxhZ1JADMjMn3vkMSDixptetwde/vSNIaRf
QQ5k7fBfqlOcrp9SW8Kk7uC3p1UteiG1VHd1cLuVfuXx6GVwKKQSMxvivSCoJvG9
EK8aFGA29j92aPi6ZkGSc9yYWudHY6e0SBa+i3LYJwJVC9IujVMiZuT5nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyHoYkUYwSz6OUHPS1/BlNPnBpQMB8GA1UdIwQY
MBaAFHsGhwyR9UDN0wqllZi3e/KTjYTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMt
Njc3Y2I2MDQ0NTYzLzEvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMtNjc3Y2I2MDQ0NTYz
LzEvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi7/RsWl
NtFq8+ruJakSDOKvGvWCxAisbEQ7jvQQlbkZ6vhL7wQEukjeZrL81+XnXHkkoL5z
qgKUkCV+u5SekJwTwYWsEDDy1DQOB2JHvDBi8dnSRUZ06JvlkTpQ4Lm6JMU8ooFG
aPCB41NwEZ2rXXFyKxsC0DTcdy8JrgrJWlqRLdOVdCN8/BfA+z3SnMufulyl1FsQ
7vPDQe8MvuQpWLsE2Pl5b935ddWVchjQHmNKT++thIA83MKJtzs5V8UZwtKdhBX3
6Ga2yNTW1YNUr/sSAhN60mCJy3PlLhgK09/fk7KTP055JHkp3DSYjdkugjgso2+J
sLnBCg2CbqK6EA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:06 2026 by rpki-client