Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: /XmMWy9dwn/z2uGwerkPjjTgaGE3JimXQ7j133WZLZQ=
Subject key identifier: 91:BE:F7:0F:63:E8:01:89:52:CB:C4:20:E5:F1:05:6E:89:5E:D2:1A
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 019D382DD966B8ACCE0B5CDE02CE99DE96A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 32xNrqfn_40-iDBmk-rm9VjKVfI.roa (hash: JPXRakEsfFUtjCtyDn2J8TNXfU3lMwghua3Q9mcoWwI=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: aZCUA+vUanb8R6t4Yt9/S1gvRsNVXomgXiuLwFSWrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d9:66:b8:ac:ce:0b:5c:de:02:ce:99:de:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=91bef70f63e8018952cbc420e5f1056e895ed21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:fe:7f:76:b7:16:37:f1:23:8e:94:55:9f:
42:0d:3c:a4:ba:b1:5e:e7:75:ec:fd:06:a8:8a:cb:
1c:41:7d:06:58:de:a8:01:3d:7d:29:ad:b6:77:05:
46:c9:cd:a7:68:8c:b9:c1:bc:3f:66:b5:31:cf:76:
da:b6:ec:40:d4:2e:ff:5d:31:e2:80:48:d5:29:44:
60:db:f8:d1:95:5d:cc:0a:d6:47:2b:08:8d:fb:db:
75:70:98:d0:1a:e3:9f:43:d5:59:27:2f:6d:08:8d:
51:4a:99:be:46:c6:1b:6f:6a:7b:52:13:6f:ca:92:
9a:33:03:c1:58:c0:36:e1:9c:29:91:4c:ad:0c:76:
85:6c:30:c3:2d:09:fa:b1:4a:94:d4:93:3d:46:b5:
af:dd:13:18:29:11:11:ca:94:16:20:49:bf:2d:02:
bd:13:4a:05:af:a4:11:23:29:56:3e:f6:21:63:cd:
29:ab:24:60:49:93:8e:e9:d0:a3:dc:1c:c4:22:1d:
c3:e4:c7:8f:e6:01:5c:56:e9:6e:a6:11:fa:b4:92:
7c:1e:af:27:c5:f0:5d:94:9f:26:7a:32:1e:b2:eb:
ff:45:1f:19:b7:0a:71:54:31:1c:9b:e4:84:fc:03:
17:ff:78:d9:a5:04:8e:29:b1:49:7c:d1:7b:75:ff:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:F7:0F:63:E8:01:89:52:CB:C4:20:E5:F1:05:6E:89:5E:D2:1A
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:e4:b6:5d:29:7a:82:aa:e7:a1:26:68:0b:9e:86:8a:7d:
38:15:5c:f1:25:09:36:63:73:be:08:3b:32:14:14:f8:c9:98:
2c:0c:f8:d4:5c:f3:cc:d0:79:cf:61:58:c4:28:3d:2a:73:f2:
66:78:a1:52:79:81:33:5e:12:8c:66:fc:ed:0d:be:9c:4c:02:
2f:82:b0:d1:70:1b:43:ae:a4:cd:f2:39:82:85:83:40:b3:a0:
15:b3:f8:31:a7:8a:da:6e:93:91:b3:74:8d:99:95:84:a5:97:
4f:7c:ce:42:47:f1:f1:c9:04:e9:01:93:fc:ba:5e:f7:da:5f:
b7:38:0a:ac:8d:31:0e:1b:8d:a3:2a:8b:15:b8:2c:03:a3:66:
06:08:3a:89:78:0c:85:7e:e7:a8:93:f4:ae:f8:f3:63:e1:8c:
76:ae:97:e8:a1:5e:ef:9c:8e:14:aa:5c:01:ec:78:bb:3d:91:
a6:a8:a0:c5:ed:51:5a:47:d7:76:a8:c3:de:50:ba:f2:51:03:
24:ec:35:e3:f3:94:0e:79:6f:3f:1a:9f:d7:40:7b:65:22:92:
80:f9:aa:4a:4f:c9:e6:71:bf:c3:7d:43:27:67:44:d1:df:2a:
58:50:29:10:3f:c6:68:93:46:e8:c5:95:14:01:5c:fc:7a:ba:
83:32:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:52 2026 by rpki-client