Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: TibaOnqt6lpVGh5cUuAWuP9p/MIqQiM0vNQMG/p+bco=
Subject key identifier: B7:37:77:57:7D:DD:3C:B3:91:11:E4:10:ED:F9:E1:48:54:5F:5A:56
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 019D382E3390C21575A739B90FB064D2035E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: s/uxUiTd+T0CETwyOVz+6/PDIhYPQdYu6OFw0+WtCs0=)
2: is3-NR5lwBcaMOTztIV5YQ-YMlE.roa (hash: TZU8EHnDmiDtVopIJw2+65y9xSJVdUzDrPjn66ea8dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:33:90:c2:15:75:a7:39:b9:0f:b0:64:d2:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=b73777577ddd3cb39111e410edf9e148545f5a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:7d:84:74:0b:bc:ec:5a:aa:e1:78:2e:51:
76:a3:ba:63:17:9c:12:1f:87:6b:7b:b5:13:c9:dc:
d1:71:95:7f:df:7e:a4:61:08:13:1b:70:f9:3c:6f:
cf:19:a6:6f:79:eb:c5:39:a7:64:c0:8c:c4:70:01:
e4:46:b4:ec:7d:df:d6:eb:b7:f7:ac:0b:3a:57:26:
46:c7:b9:c5:b4:8f:10:ee:ee:ca:36:87:a8:33:f8:
ab:20:45:38:bf:0f:f1:10:16:24:e0:c3:16:a6:4c:
1c:d6:ff:b6:f1:a2:25:22:6a:94:9e:e6:ce:fc:f9:
02:33:9f:5b:af:42:ae:00:42:54:4f:73:9b:fc:0a:
63:d5:59:51:05:9f:94:0f:3f:f8:13:77:5b:94:fd:
22:5e:3f:e0:9e:0d:d4:dd:31:24:ba:50:23:8a:ff:
ea:78:ed:df:fd:51:13:a3:54:41:65:5c:83:49:6d:
6d:ce:bd:b1:3e:28:07:d5:81:0c:aa:2a:e9:b5:55:
4f:82:fc:1e:a6:26:82:0d:d1:26:20:48:c1:57:57:
2f:3a:64:4c:3e:a3:41:fa:87:26:9f:5e:b7:6f:db:
6c:7f:70:8c:b5:33:47:44:20:71:f1:79:58:bf:5b:
cf:79:f2:d8:7b:36:e9:85:cc:35:7d:b9:cb:38:99:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:77:57:7D:DD:3C:B3:91:11:E4:10:ED:F9:E1:48:54:5F:5A:56
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:66:65:ea:3c:22:70:92:c1:42:73:17:30:26:5f:0d:a7:
55:83:50:cd:72:1f:3e:63:6d:97:84:7b:33:16:f7:9c:75:9f:
a5:36:0b:f3:69:bf:6a:94:a3:7a:d2:6d:1b:f5:01:95:bf:28:
e0:27:38:8e:cf:c9:10:3b:9c:6f:4a:9c:39:54:ab:56:bf:9d:
0c:4d:13:e8:be:45:32:a5:2d:91:cb:c9:24:bb:70:44:fd:58:
c7:20:da:e6:6a:ea:07:f0:ff:aa:8b:12:35:96:71:8e:d2:96:
0e:47:69:48:17:44:be:07:c1:00:85:c7:ad:c4:4b:8a:12:28:
09:fe:ea:4f:d2:97:44:29:c2:7c:d0:d1:4e:d8:a2:df:c9:9e:
6e:b6:ed:6a:f2:05:23:bf:42:73:3f:e1:30:82:94:4a:e8:fa:
05:a8:45:3c:fa:8f:86:83:e1:c0:f3:b5:20:61:d5:0f:83:4f:
5a:36:3f:3b:6f:8e:43:44:d7:60:34:72:a5:6c:bc:ba:fb:4b:
f1:84:a8:10:be:dd:62:51:cd:87:24:64:b7:c0:0a:cf:e9:c9:
29:24:7f:fb:55:27:59:3c:e7:52:3d:86:12:35:9a:3e:91:7e:
77:16:7b:b3:4f:bf:59:1a:d9:c1:68:9e:5c:fb:d6:57:e3:9f:
06:26:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:36 2026 by rpki-client