Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier: y+qBV+nPIqXKFem/gaUFZZKN9sWiUprKA0wGQ/wWbhc=
Subject key identifier: 64:E1:A6:83:7C:FD:DC:B8:07:C2:DB:DB:74:1C:F1:7D:55:5C:50:93
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial: 019D38657C672A0A8E663752906DF849B7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number: 04A0
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: fs8xXryDi8M+lQTwcoGR7lpsK8LqVARKtEbI9KN2t5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7c:67:2a:0a:8e:66:37:52:90:6d:f8:49:b7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=64e1a6837cfddcb807c2dbdb741cf17d555c5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:67:6d:20:db:4d:57:24:5a:00:fb:d4:b8:
5f:53:4e:9d:9f:48:6d:38:32:ee:29:10:c4:ef:95:
06:f1:22:14:67:fa:3e:50:71:32:2f:40:f1:1d:c8:
05:e8:69:4d:15:36:91:d2:fb:71:85:b9:54:cc:07:
46:48:d0:c8:22:a4:67:9f:69:5d:b3:52:4f:11:d5:
68:4b:7a:5e:de:97:19:de:36:0b:9b:b5:8f:cf:c4:
89:0a:ed:93:1d:80:b2:22:9a:14:da:63:52:7c:22:
19:6b:b5:5b:b9:a9:6b:ca:d4:94:0e:8b:3a:85:fb:
aa:4a:11:ff:2e:e8:c1:36:27:4f:36:24:d5:4b:ab:
e3:c1:47:6b:86:3f:24:bb:82:c5:6a:0a:4d:e1:fc:
b0:cc:c8:ec:b1:ed:8b:3a:51:50:d1:78:f0:7c:1b:
c7:0f:69:3e:2d:39:1c:f3:d9:49:ad:60:ef:a8:36:
1a:54:bd:7c:77:0e:c9:84:ca:a7:52:58:36:9a:a8:
76:37:61:4e:00:ad:a9:72:d3:72:47:ea:2d:4c:25:
fb:32:8a:0e:a6:cf:5d:43:9f:ee:0f:00:94:99:b1:
b7:c4:22:e4:c3:f7:e7:ef:cd:40:a0:8b:a1:6e:52:
f9:ba:b9:22:8d:78:38:56:5c:50:84:1c:73:a2:04:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:A6:83:7C:FD:DC:B8:07:C2:DB:DB:74:1C:F1:7D:55:5C:50:93
X509v3 Authority Key Identifier:
keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3d:b5:c7:1e:59:7f:04:51:11:62:e1:e2:5b:b4:7f:58:cc:
5e:d4:36:cb:27:14:fb:86:12:b8:a0:57:0d:94:a2:55:cb:dd:
d0:34:4e:f3:72:b7:41:0d:ac:ee:08:70:3d:d6:6a:0a:d7:d4:
de:72:fc:11:b7:df:db:d7:d9:ad:66:01:68:a8:ec:9f:85:5a:
00:36:4d:35:d5:7d:d1:c1:cd:0c:6d:f6:86:4d:ed:4e:dd:12:
19:dd:8f:ba:96:5d:60:8d:95:49:1e:4b:5d:1b:70:ce:7f:7a:
21:86:82:ec:55:67:86:3a:d2:36:ca:32:d7:18:3d:81:78:a7:
8f:b7:36:53:3f:73:a6:d5:79:07:58:3b:f3:32:ad:68:de:d8:
68:d0:45:30:f7:00:2f:2b:78:6a:2c:38:82:ee:c9:6e:2d:35:
99:8a:cc:38:e1:d8:31:5d:4c:4c:65:2c:e9:da:49:1d:ab:c7:
e0:3e:40:bf:73:91:a2:26:1a:02:87:97:04:b5:23:e8:f6:f4:
3a:a4:ba:92:f4:c7:83:1e:95:ce:8d:71:03:de:2d:33:f1:ff:
ba:4e:68:d2:e4:99:e5:a5:df:52:7f:1c:c0:9f:be:27:ba:1f:
8f:06:e3:8f:a9:e3:a5:ec:76:be:d1:56:4f:df:87:4b:20:93:
4f:eb:06:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXxnKgqOZjdSkG34SbeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjhjNGQzZmZjYThlNzM3ODY4YTQ1Njk2YTE5OGZkZTA5
ZmQ0NTcwHhcNMjYwMzI5MDcwMTA4WhcNMjYwMzMwMDcwMTA4WjAzMTEwLwYDVQQD
Eyg2NGUxYTY4MzdjZmRkY2I4MDdjMmRiZGI3NDFjZjE3ZDU1NWM1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCxnbSDbTVckWgD71LhfU06dn0ht
ODLuKRDE75UG8SIUZ/o+UHEyL0DxHcgF6GlNFTaR0vtxhblUzAdGSNDIIqRnn2ld
s1JPEdVoS3pe3pcZ3jYLm7WPz8SJCu2THYCyIpoU2mNSfCIZa7VbualrytSUDos6
hfuqShH/LujBNidPNiTVS6vjwUdrhj8ku4LFagpN4fywzMjsse2LOlFQ0XjwfBvH
D2k+LTkc89lJrWDvqDYaVL18dw7JhMqnUlg2mqh2N2FOAK2pctNyR+otTCX7MooO
ps9dQ5/uDwCUmbG3xCLkw/fn781AoIuhblL5urkijXg4VlxQhBxzogQbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGThpoN8/dy4B8Lb23Qc8X1VXFCTMB8GA1UdIwQY
MBaAFHloxNP/yo5zeGikVpahmP3gn9RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTkt
MDc3M2VkNmY0ZmZkLzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTktMDc3M2VkNmY0ZmZk
LzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALj21xx5Z
fwRREWLh4lu0f1jMXtQ2yycU+4YSuKBXDZSiVcvd0DRO83K3QQ2s7ghwPdZqCtfU
3nL8Ebff29fZrWYBaKjsn4VaADZNNdV90cHNDG32hk3tTt0SGd2PupZdYI2VSR5L
XRtwzn96IYaC7FVnhjrSNsoy1xg9gXinj7c2Uz9zptV5B1g78zKtaN7YaNBFMPcA
Lyt4aiw4gu7Jbi01mYrMOOHYMV1MTGUs6dpJHavH4D5Av3ORoiYaAoeXBLUj6Pb0
OqS6kvTHgx6Vzo1xA94tM/H/uk5o0uSZ5aXfUn8cwJ++J7ofjwbjj6njpex2vtFW
T9+HSyCTT+sGcg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client