Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: O93zZmmX6zLrgwu11OLElfsfPSIFI6s6xu8Ct9426eA=
Subject key identifier: 95:A0:22:8A:27:D7:31:80:1F:CD:D2:76:10:02:07:9B:6C:7C:0E:54
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 01A08B30E11C80F317CC0CDB04BD42F81C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 11FE
Signing time: Thu 10 Sep 2026 12:00:31 +0000
Manifest this update: Thu 10 Sep 2026 12:00:31 +0000
Manifest next update: Fri 11 Sep 2026 12:00:31 +0000
Files and hashes: 1: PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa (hash: 4btrLU4Yp51Rk7dJr+hkTDUzW5uwF4yGfkuoF/u5R5U=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: 7cZgVPZmuHoZbRxdFa3gFZ6L0KaTuPoOn5T08iAdERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:e1:1c:80:f3:17:cc:0c:db:04:bd:42:f8:1c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Sep 10 12:00:31 2026 GMT
Not After : Sep 11 12:00:31 2026 GMT
Subject: CN=95a0228a27d731801fcdd2761002079b6c7c0e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:d6:32:fa:4b:a1:b3:a0:b2:53:48:b5:e3:
8d:89:46:f0:f0:fb:f9:5b:e9:a9:62:f0:02:17:84:
af:57:60:ea:19:92:6b:e5:71:94:f0:34:26:88:ca:
28:a2:25:2d:66:e2:d1:df:30:1a:11:58:3b:ff:b3:
42:ee:99:1b:d7:f4:37:88:4b:12:7e:20:04:d5:14:
ea:b3:e4:f4:1d:d8:25:de:ac:c5:ca:02:76:1d:60:
81:f5:b8:9d:90:c7:21:bd:ab:af:4e:25:63:3f:00:
1d:82:fb:11:53:4a:4f:11:f6:39:39:dc:9e:d0:3c:
22:f1:44:b0:21:20:37:63:db:66:56:87:f3:5c:84:
68:1c:ac:25:6e:03:88:82:00:18:7d:16:22:b0:d2:
3b:1f:e6:89:ef:0b:02:30:81:48:5d:9c:35:c4:3d:
42:05:66:53:ab:fc:ad:6b:ea:49:c7:29:57:5f:2d:
1b:2d:77:6e:7d:64:85:da:dd:4f:ae:2d:16:c5:3c:
cf:ec:f8:6f:1f:e9:76:21:bf:bd:76:d7:32:49:8a:
f2:49:5e:f6:4a:9c:b8:f2:24:ca:b1:c5:5a:05:0a:
ae:0e:8f:9e:6c:be:06:fa:03:43:87:53:e4:15:07:
c7:2b:08:16:11:34:da:19:ef:6c:51:bf:8c:a1:31:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:22:8A:27:D7:31:80:1F:CD:D2:76:10:02:07:9B:6C:7C:0E:54
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:2c:3d:87:4d:0a:53:94:f2:17:6c:e4:7f:a0:80:26:d7:
f5:54:c3:e0:54:9c:de:24:ea:98:16:db:e0:5b:d6:f5:02:80:
00:be:65:18:e4:cb:d0:64:30:11:9e:24:40:b7:fe:c9:92:4a:
e4:3d:e9:ee:34:6c:43:fa:8c:9f:27:1e:f2:e6:74:96:a9:79:
fa:c3:d6:4a:6f:ab:18:94:bd:4a:6e:36:b4:c5:4d:f9:0b:36:
53:6b:e2:71:c3:38:3a:e6:98:6f:eb:a6:5f:0e:48:e0:7b:f0:
64:90:05:04:50:8d:4b:4b:d3:2f:13:ed:af:32:72:48:89:53:
e9:f7:f0:9c:a4:88:0e:d2:90:3c:e1:b0:d0:c4:a1:31:fa:e2:
0d:75:d5:84:5f:4b:7a:9c:3a:33:01:e9:be:ba:ad:e4:c0:64:
2b:1f:a1:f0:2f:4d:72:34:73:39:0a:d5:18:65:08:01:2c:d1:
12:63:b9:d6:13:2c:e9:cf:16:d2:e3:af:2d:7d:e5:b4:c9:3a:
f8:65:ea:53:f9:3c:c1:92:24:71:9b:02:a2:85:3a:6c:22:77:
36:f9:7f:1a:4c:7c:88:fd:b6:2d:19:26:a6:c2:df:e8:82:50:
e5:de:1e:45:56:8a:47:9a:81:b0:a1:b7:7e:47:cd:1a:5c:bf:
a0:67:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:40:16 2026 by rpki-client