Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: cf3Fo7CGfF+K8PslkaVeEPbo7zazticMY9tr24owjm4=
Subject key identifier: 45:6A:6C:9C:5F:99:25:BD:38:A5:C0:37:E1:CA:74:C7:BC:AD:2F:3A
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 019D3A544B50DF210EE4C9B0CF348B1843AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 1640
Signing time: Sun 29 Mar 2026 16:01:35 +0000
Manifest this update: Sun 29 Mar 2026 16:01:35 +0000
Manifest next update: Mon 30 Mar 2026 16:01:35 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: 3tNEhQw18wnHdTO/yqq2j7+1dLwQVpoeqFK2GmzsyP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4b:50:df:21:0e:e4:c9:b0:cf:34:8b:18:43:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Mar 29 16:01:35 2026 GMT
Not After : Mar 30 16:01:35 2026 GMT
Subject: CN=456a6c9c5f9925bd38a5c037e1ca74c7bcad2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:93:d2:b9:85:ea:f6:7f:1e:35:19:7f:60:
7b:49:8c:a2:49:29:8a:08:5b:d6:4e:30:1b:19:34:
ad:19:f7:23:62:4f:1a:38:8b:5b:96:89:16:fc:86:
00:44:00:af:4d:91:a5:e1:fc:5b:1d:32:d7:e7:ba:
5f:53:90:65:cc:5e:24:45:90:38:cd:c3:60:22:c7:
78:85:c1:ba:9a:56:73:e6:59:f7:39:4e:76:2f:0f:
bc:19:6e:4f:7c:1b:5f:9c:ca:07:fc:9f:c2:62:6b:
aa:39:f5:3a:31:c2:e4:4d:aa:93:7f:e8:3e:c5:76:
18:d0:e2:8f:05:50:ff:36:f0:ff:ce:9e:e0:60:ca:
12:c5:a2:15:68:81:ec:29:df:b0:5b:a6:63:f3:81:
97:29:ba:90:33:a6:32:04:92:08:84:f3:22:8b:a7:
8a:b6:8c:29:4b:7a:a6:4d:39:a0:ce:31:2f:29:0b:
d4:59:78:57:87:59:2f:a2:14:95:62:40:a8:09:3b:
0b:9e:51:a5:19:7a:3f:6a:cb:ed:f0:4c:c4:d0:af:
6e:e5:b7:a0:83:4d:b1:43:f1:d8:55:0a:02:96:59:
aa:a5:76:45:e1:2d:c5:f2:4d:7c:54:a4:1a:6a:1a:
e5:e6:92:d8:47:c0:9f:ef:4d:33:2e:97:78:94:6a:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:6C:9C:5F:99:25:BD:38:A5:C0:37:E1:CA:74:C7:BC:AD:2F:3A
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:01:a4:f7:8d:f5:a5:6f:b3:00:f6:c1:03:87:ee:2a:f0:cc:
da:05:56:02:e5:ad:0e:eb:a8:cd:bb:5c:27:62:66:76:b7:66:
2b:44:0b:d9:46:28:b6:ea:81:fb:e1:96:e1:3a:40:de:5a:f1:
27:f5:d8:80:e0:f5:38:92:9f:d0:d9:49:b1:75:1f:60:06:9e:
18:ca:21:15:1d:0e:60:f4:d4:8d:aa:58:46:d2:1f:73:63:3d:
79:fb:b5:04:04:7d:4f:3c:cd:62:50:c2:90:c2:8b:34:c1:cb:
a6:b0:2e:ad:b1:74:49:3a:95:d6:56:f2:91:db:c6:67:0f:14:
ef:69:8e:05:2e:96:68:02:8b:25:73:52:32:53:82:43:73:97:
89:e0:e6:47:2c:79:ef:3d:ae:5d:5b:fa:ce:1b:eb:55:10:2c:
2f:b1:9d:6f:86:d3:79:c4:82:7d:61:b7:b3:a2:e6:06:a1:c5:
73:ca:cd:12:e6:70:08:30:c1:e3:41:19:85:7d:d4:57:86:2a:
a0:66:19:db:b5:3d:47:c3:6c:d4:e9:93:f7:a7:f3:b1:58:6a:
5f:1e:3a:6e:d6:7d:fa:52:be:9c:72:ed:04:9c:76:23:18:88:
50:5f:3a:cd:e6:06:d4:70:98:5f:ab:56:ce:78:f2:aa:85:08:
02:21:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:49 2026 by rpki-client