Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: Da98A/WTuN21DYHEU1KxJMSjYAFok3fY6kfqcY8UlrE=
Subject key identifier: B6:71:EA:4D:6E:8C:44:24:7A:4A:5C:83:5F:11:80:92:83:E4:F8:82
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 019D38D293D3E3DE8F86A4A833286A69629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: 5jamX7hWVKjxEb19a+Gqbk7N0HcGigK996UlkuHRzWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:93:d3:e3:de:8f:86:a4:a8:33:28:6a:69:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=b671ea4d6e8c44247a4a5c835f11809283e4f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:9c:fc:ae:b1:b0:39:eb:05:67:3f:ea:90:
14:36:9a:12:7c:37:ae:2e:a8:59:27:77:97:fb:91:
92:05:89:ba:c7:58:f6:2d:c8:da:dc:45:2b:17:e8:
fe:fc:67:9d:fb:aa:6e:0c:2c:c8:6b:9b:c7:79:c7:
aa:9f:92:ae:db:4e:cd:cc:25:6a:53:5a:d8:0d:f6:
e5:ab:84:78:d8:44:c5:f2:39:5b:c4:11:ed:e6:47:
70:fd:0f:83:4e:a3:87:b2:2a:f7:22:e9:a1:91:a2:
21:92:f5:79:64:29:2e:1e:c3:cd:3e:a2:c7:ae:1d:
f6:44:f6:dc:34:fe:51:97:63:80:ee:30:2f:1e:9f:
a2:0c:09:6b:aa:50:46:e2:31:7d:6a:8b:88:6b:c8:
8f:9a:de:f0:06:ae:58:0d:7e:68:9d:6b:51:fa:af:
7b:be:28:85:3a:a2:58:ef:e4:39:c1:50:b5:e3:68:
de:0c:21:fb:9b:52:09:98:b2:97:93:c1:09:38:ac:
5d:8e:bd:a4:10:5c:3d:94:d6:6d:2f:56:46:c3:8a:
4f:13:f6:3b:17:6d:2d:09:27:75:e2:1d:3d:75:b0:
e4:1c:ba:94:4f:45:0c:a7:58:22:7a:3f:4a:26:13:
8c:9a:07:42:3d:24:50:14:8e:76:e6:2b:9b:50:ea:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:EA:4D:6E:8C:44:24:7A:4A:5C:83:5F:11:80:92:83:E4:F8:82
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:8a:8a:ca:b9:0e:84:52:5d:8e:2a:f6:34:0a:92:31:9a:
82:4d:ec:5e:4d:28:8c:1f:4b:69:2d:22:38:bf:d2:ec:c8:ba:
60:3a:23:4b:65:a3:c7:8a:34:76:7c:02:f0:85:90:1b:e8:90:
4f:3a:14:08:3c:fb:26:47:99:58:e0:a8:4e:2c:b2:34:50:4d:
b0:33:7e:81:35:bd:cd:27:08:e1:ac:cf:5e:00:96:ad:65:87:
79:59:6f:83:c6:60:90:d7:c4:74:0d:6a:36:28:8a:0b:97:f9:
db:82:a6:0a:0e:68:e6:82:41:49:7a:01:f3:57:a6:e2:e5:c3:
32:79:c1:e4:03:59:7e:2a:85:66:d5:77:5c:ce:75:8e:3c:2d:
db:63:01:f8:26:27:93:35:c2:1e:d2:0f:f8:0b:c0:88:98:a8:
91:45:8d:1b:55:a0:a1:e0:52:57:47:48:b5:25:9c:1f:2c:ff:
cc:f6:0b:92:e2:2c:96:9b:47:01:95:b4:a9:f5:34:a9:b5:40:
05:c5:cb:9c:7b:22:14:76:2b:89:b9:4d:5c:a5:06:c6:cb:0d:
5b:d2:de:d9:0d:91:ad:cd:92:00:9d:1e:79:86:f7:45:b6:18:
89:ff:14:3a:23:24:61:74:44:a0:19:57:a1:fb:d5:67:23:e8:
96:9d:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:45 2026 by rpki-client