Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
File: EWU43_13zyOMTq65XKBUh8VnGrU.mft (raw, json)
Hash identifier: liORdY1yvJ9zW0a5LxBoYNxnIfwR8541h0fAgyFit4c=
Subject key identifier: FA:4D:BF:BA:A4:36:1A:59:75:DD:68:02:58:8D:91:4D:0D:30:E3:65
Authority key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
Certificate issuer: /CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Certificate serial: 019D38D3AC3B5B0934AFD3218FE3FB1BD3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
Manifest number: 1695
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: EWU43_13zyOMTq65XKBUh8VnGrU.crl (hash: Rlq6hQNvbcQuUxOcw7O6ZkT5UnG8M7xzvNgs7hV+6jc=)
2: xnZJFebmECiv7IOQlMmEetKuPDg.roa (hash: j/6yzOKcH/hG51mOXXIJKpyaxbJGRYtOzyojnM50vx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ac:3b:5b:09:34:af:d3:21:8f:e3:fb:1b:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=fa4dbfbaa4361a5975dd6802588d914d0d30e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:a0:2b:13:c5:1e:4c:4c:7a:4e:ad:04:85:
77:63:aa:73:f1:9a:f6:4d:1e:ae:7e:6b:0d:21:e3:
c1:9f:e9:e0:e9:68:c2:bd:96:54:e2:40:b3:ec:84:
70:7a:8f:ce:2b:4d:f9:69:15:96:e9:6f:01:db:e1:
b4:72:59:e5:72:d4:3e:8d:59:fe:10:29:64:08:d3:
92:28:4e:ec:ea:4a:25:05:ca:58:3f:9d:f4:2a:86:
ec:6e:10:18:17:c6:54:d5:94:5f:83:ff:af:ba:8b:
97:78:3f:3f:e5:69:fb:b8:47:18:ca:9b:6d:3a:f8:
e2:7c:02:9e:47:78:99:2c:6d:8e:07:42:f7:59:b8:
ad:ee:53:53:3a:27:42:10:0a:17:11:dd:5b:b7:91:
e1:98:22:ff:a6:5e:c3:1d:ec:3c:d8:f4:de:ee:09:
ed:83:20:f6:f8:5a:98:e3:d7:2d:c2:2a:7b:e0:91:
db:8b:b8:1a:2a:0e:76:5b:47:b7:96:3a:ea:4c:10:
4a:8d:35:3d:b7:a2:f1:81:10:12:d8:ff:90:2a:0f:
15:6f:2a:06:be:ad:fc:e9:61:db:ca:99:a2:cc:2b:
a6:33:1c:93:5e:92:89:30:3d:69:0f:10:0c:34:cc:
df:f8:9f:4b:48:06:a6:d8:15:a8:db:b4:64:9a:aa:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:BF:BA:A4:36:1A:59:75:DD:68:02:58:8D:91:4D:0D:30:E3:65
X509v3 Authority Key Identifier:
keyid:11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:bc:f4:c7:43:1c:9c:9a:4c:73:03:a3:76:c7:df:ad:ca:
21:e4:05:46:5f:70:8e:e5:81:3c:16:4a:a3:44:62:b5:40:49:
dc:c0:bd:c5:f6:43:2b:1c:86:38:0c:64:a4:bd:d9:94:40:4c:
28:f8:d5:fb:82:bf:ec:d3:b9:aa:bd:a7:f8:09:67:d5:98:2a:
26:c8:8a:de:61:e7:9f:c0:1a:7c:0c:6a:fc:26:d4:cf:ad:ca:
1d:a1:9c:73:68:2d:66:ce:12:56:f9:69:53:b3:e2:b6:5c:31:
27:a0:02:23:3b:ea:29:9a:5a:d0:9b:18:83:fd:1d:3a:1b:d1:
ce:5f:92:18:b3:1e:85:fe:1f:f5:85:6c:4e:ad:28:38:f5:c2:
9b:02:8e:da:c4:81:49:da:bd:dd:59:90:6e:4c:88:31:c7:31:
7b:09:96:0b:b6:4d:52:de:b8:ea:7a:1d:f6:22:53:a7:04:66:
54:f7:cc:db:75:47:48:27:54:3f:4e:1a:30:a0:f3:61:08:b9:
ed:19:8e:3e:4f:88:6b:09:1e:ec:fa:65:a3:09:6e:fb:15:0b:
2c:ef:86:cd:3c:b2:ed:01:0c:6c:28:e1:11:0d:3e:11:13:4a:
c4:b3:16:b1:80:dc:32:f8:f2:fb:73:29:36:4a:89:a7:58:65:
58:b0:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client