Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: DVewZTQ96+PFt8qea0Z1j4nPNj8tq6anOn5HmXv7/gM=
Subject key identifier: 2F:54:EB:A6:EB:DC:A4:00:04:D2:2C:7E:7D:54:EF:02:49:18:06:5E
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 019D3789351986F56754ECC2E9D2543D6438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 17D5
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: IOJ_IuxrPhU7ERFs81G1nbxR8to.roa (hash: 8D5brBAEHZ/yOCBGlmqvRZETRlUwEQyzFztv6q9hPDM=)
2: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: Yo6vKiurYFNFtOCCtb47XTjk3O8fBpFn9uK01Ee+KuA=)
3: sIMXhU48nRnJhtkFS0ovznJIg5Q.roa (hash: BCAw434iZ2D2AbMltSpB4NTSwE7tv654mLk+khObkaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:35:19:86:f5:67:54:ec:c2:e9:d2:54:3d:64:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=2f54eba6ebdca40004d22c7e7d54ef024918065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:b2:37:49:98:b6:01:f1:60:25:f5:08:c0:
e2:b8:32:b5:41:fa:fb:0f:45:3a:de:2d:d4:55:ff:
4a:85:21:8d:ea:01:11:a6:ee:ae:da:92:98:32:7a:
1d:dd:95:c0:32:ee:98:e7:10:c1:31:7a:7b:f0:c9:
a4:52:e7:12:5a:0e:00:38:c4:90:e5:c2:27:1c:34:
86:b2:6b:49:66:01:5a:0d:7d:c5:39:b8:79:cd:0c:
8e:0b:9e:d2:0d:48:29:78:58:95:db:8f:80:c6:8c:
34:2a:81:06:b0:61:ec:55:cd:c7:f7:1a:1b:91:ab:
b5:2a:3c:86:36:43:40:13:8e:72:48:f8:51:e8:83:
92:4b:ad:56:00:0a:18:40:9e:02:18:65:76:ef:23:
f1:6d:20:b2:c6:35:83:4a:61:d3:84:2a:89:f6:09:
d1:4b:6a:7b:df:ca:a1:bc:74:a9:60:b3:b7:d9:88:
a2:79:e6:c3:1b:c2:29:95:43:af:e6:7d:6e:b4:01:
1f:af:4b:49:3b:29:51:07:c6:41:8c:4f:c5:90:4c:
f4:79:36:4b:a9:c9:38:f1:16:ab:35:c6:ba:f5:cf:
bb:7f:f3:09:b5:53:59:c6:ab:5b:ad:61:78:4a:af:
19:78:a1:e2:23:b4:bf:d7:36:69:d0:3b:f1:68:c0:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:EB:A6:EB:DC:A4:00:04:D2:2C:7E:7D:54:EF:02:49:18:06:5E
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:dc:61:73:87:94:26:59:12:ec:0c:aa:de:af:74:10:15:
f0:6b:4d:dc:97:80:fa:5d:d8:df:74:8f:f8:90:94:57:fb:94:
72:4f:2c:63:b3:e4:a4:0d:c1:78:aa:8c:6b:65:51:ff:76:8b:
be:66:53:70:47:a8:52:1c:4b:a4:9a:55:3b:4f:91:9c:fb:b5:
7f:14:5d:e5:7d:ca:a0:2c:03:ce:f3:a7:c6:4a:44:88:ee:df:
dc:c4:71:4f:04:b5:7d:9a:dc:d3:be:07:59:90:74:5a:87:bc:
48:b5:d9:9b:a0:4a:04:c5:da:ee:7a:04:5f:24:e8:a5:94:6b:
17:6e:1f:a6:5d:d5:5a:3b:00:ea:ad:30:ce:b9:6f:c7:a9:b3:
c2:d2:45:17:c8:5d:79:3e:dc:cb:58:11:bc:bb:5c:fe:12:2e:
d0:41:14:02:3a:1f:9b:b0:13:09:22:a3:e3:e1:b8:81:8b:2a:
8c:cb:6a:e7:c7:f2:ae:3b:03:49:b9:e2:d1:20:bd:25:63:1e:
96:3b:1d:18:78:f7:ee:4b:a0:33:5b:0b:df:c4:09:6d:95:4e:
a0:0a:1d:e8:33:a3:6a:1b:ba:4c:04:a5:39:88:5c:6f:1d:83:
ff:52:21:ce:1c:40:51:51:93:80:de:03:e5:ce:f4:17:8a:a5:
14:c8:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:38 2026 by rpki-client