Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.mft (raw, json)
Hash identifier: nCj0WdowstwhzQK3I5zFk7ejeWd6TvkD8Fd4Ltwq+Iw=
Subject key identifier: 8C:06:BD:98:3C:8D:DB:20:5C:2B:A5:4C:99:72:11:94:0D:3B:D9:9E
Authority key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Certificate issuer: /CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Certificate serial: 019E2AA7B464552C08F4ACA23B7E99F3D26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
Manifest number: EC
Signing time: Fri 15 May 2026 08:01:34 +0000
Manifest this update: Fri 15 May 2026 08:01:34 +0000
Manifest next update: Sat 16 May 2026 08:01:34 +0000
Files and hashes: 1: EWXPgb9aPQz1nUExFIp2HzS_nKg.crl (hash: ZXaHQtQ4LMC7mk3g3Lpd8Mx2zzIMH4GijKK2I2ElyII=)
2: Niis1CvHmgu0murfxragV9VItkc.roa (hash: E9NbgdUKgVnnBg4sHFYFf1Tcl3McpQql43eZKvfPeVo=)
3: WWhjfuGXzWeUF3SrP6qTW0kig3w.roa (hash: YpBQprObA5U7M9d1rKXR9BWlTRND9KaDzkg+3msX8mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:b4:64:55:2c:08:f4:ac:a2:3b:7e:99:f3:d2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Validity
Not Before: May 15 08:01:34 2026 GMT
Not After : May 16 08:01:34 2026 GMT
Subject: CN=8c06bd983c8ddb205c2ba54c997211940d3bd99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:ea:b4:0e:a0:c5:1a:1f:c0:9e:52:90:58:
62:5b:25:03:a2:53:d0:d6:84:94:f3:5e:86:03:b8:
7c:1c:f7:cc:5c:8b:51:dc:02:86:fc:68:92:3b:18:
b1:48:4d:d4:4e:53:0d:14:ad:41:bd:41:9d:d7:7d:
3b:44:d9:a4:58:6a:d3:68:f3:44:a5:aa:f2:79:d2:
c9:a8:36:b5:11:eb:80:60:3a:9b:8b:da:f9:79:ca:
c1:ce:ba:82:3b:37:bf:49:ee:32:90:63:e7:b6:f5:
c7:81:f4:e0:cd:0d:e2:70:90:52:51:9d:7b:d1:24:
84:d9:ba:94:1f:c0:4a:e9:c4:63:94:dd:66:ca:8e:
68:6e:f8:4d:4c:cb:59:26:5f:3a:44:96:39:b6:20:
e3:e2:fc:ae:5f:04:c5:32:c8:70:8d:8b:7f:b5:3f:
9b:2b:a0:07:1c:dc:ba:00:b7:0e:a2:e6:84:d9:b2:
7a:f2:0b:0c:ad:f3:d0:ab:fc:69:97:fa:e0:2f:f5:
17:19:b0:72:fa:2b:f2:b1:42:7e:60:d9:f9:c2:1c:
7c:bf:8f:2a:6c:56:14:ef:e9:53:d7:0d:3b:d4:77:
85:3d:cf:e0:64:59:dd:fa:2b:0e:72:77:1f:62:c3:
81:ae:97:1f:97:99:2f:74:6f:67:ac:ec:b3:70:9a:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:BD:98:3C:8D:DB:20:5C:2B:A5:4C:99:72:11:94:0D:3B:D9:9E
X509v3 Authority Key Identifier:
keyid:11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:76:0c:31:a7:e1:45:96:a4:54:cb:af:67:7f:ea:75:ac:
17:86:52:40:1b:b5:ea:1a:c0:1e:a6:1e:2c:39:82:bf:33:ed:
14:e1:e8:0f:a7:ca:0f:53:30:49:a3:07:9b:65:23:c6:bd:75:
ed:af:93:8a:d5:06:d9:e9:a9:23:f7:61:5b:21:be:6b:bf:39:
f3:08:b0:f5:4e:42:f0:0d:52:7b:09:04:e2:21:9d:36:1f:df:
ef:e5:6d:72:9a:fa:99:8c:7e:1e:81:94:4e:c7:c1:4e:87:45:
b4:3c:5d:3a:49:79:b3:c9:f2:fb:0e:c0:3d:a3:14:78:f4:6e:
af:8e:f2:31:aa:5e:0c:19:fd:05:d8:67:19:02:d9:45:06:6d:
40:a1:4e:a5:be:6d:e4:e3:74:f3:57:c8:c0:b5:ed:b5:a4:b9:
14:3a:c7:86:18:d2:8d:92:f1:cf:4f:d0:56:52:87:b5:77:87:
85:5e:5f:2c:97:6c:ad:50:28:56:9e:09:a3:d7:59:bf:f3:5a:
dc:8c:02:5c:c6:37:ca:c6:f7:43:b5:a6:55:0a:a8:90:d2:ef:
6f:8e:39:8f:8c:6d:64:c4:23:15:6c:d3:7e:8a:21:71:75:05:
1d:c3:db:0c:a6:33:24:df:59:ca:36:11:fc:78:24:bd:2a:ff:
48:9c:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:01 2026 by rpki-client