Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: nFk1SzT/2GaTzLHbEVqYKJaEDlalLRia+kQyFK0u0RE=
Subject key identifier: 3F:9B:CB:87:F0:5C:B2:E1:21:C7:B1:D9:E2:27:61:A7:27:21:23:E3
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 01A1DFBA1D886DA1258B9083EF4814542665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 15:01:18 +0000
Manifest this update: Sun 15 Nov 2026 15:01:18 +0000
Manifest next update: Mon 16 Nov 2026 15:01:18 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: 6kgWxJhBi3kTaX/xyJ4Ybjsg9tZNh/WMA6/D8EkxkYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:1d:88:6d:a1:25:8b:90:83:ef:48:14:54:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Nov 15 15:01:18 2026 GMT
Not After : Nov 16 15:01:18 2026 GMT
Subject: CN=3f9bcb87f05cb2e121c7b1d9e22761a7272123e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:d0:6d:ed:8d:4b:c8:5d:0c:b2:4a:30:67:
64:a3:7e:c9:47:c8:ec:da:b0:82:f6:cb:5f:e0:73:
8a:8c:fd:36:43:86:65:fb:b8:a2:6f:5a:31:50:59:
c8:2a:ba:c2:21:e6:0a:7c:2a:51:d5:ed:97:31:62:
3d:08:f2:c1:45:a6:5e:0c:2a:c6:7c:61:ed:a0:3c:
19:7f:eb:85:57:3c:53:e9:73:4c:74:19:48:0e:47:
af:d2:76:52:34:fb:34:ed:92:9a:ee:6e:bd:c9:97:
b6:ee:d2:f4:d2:e4:61:5f:4b:44:a2:2e:d7:ac:6b:
c5:44:2c:4e:01:00:f1:b9:99:33:8a:76:64:65:3a:
2d:5a:b6:1f:c3:60:19:ea:93:b4:c8:76:13:57:41:
d9:6a:64:16:db:57:23:56:61:87:da:8a:28:d7:2b:
2d:4e:6d:d7:b4:b0:33:8f:b9:ba:39:8e:c7:17:ed:
70:aa:95:bc:f4:88:b8:31:59:73:cf:a5:df:5e:16:
29:be:fb:29:fa:af:73:19:ec:4f:a4:64:2a:ac:a6:
57:38:e4:12:ae:21:31:a8:61:58:f5:bb:a1:41:5a:
a5:7e:45:fb:cc:3b:bd:31:f9:e0:f7:73:5f:52:79:
af:b0:97:be:71:4c:b2:eb:2a:c6:40:6c:d1:43:f7:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:CB:87:F0:5C:B2:E1:21:C7:B1:D9:E2:27:61:A7:27:21:23:E3
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:b3:9c:93:4d:08:ba:fd:a1:68:b1:31:1b:3c:7f:64:9d:
e4:ce:59:db:44:94:5e:a9:67:58:81:22:8e:bf:1b:06:90:fe:
a5:6e:d4:4b:a4:25:bb:e9:c6:01:45:9c:63:34:3d:10:85:eb:
23:89:21:7e:5b:48:9a:f2:6f:90:83:83:43:1c:1f:fe:88:9d:
fe:ac:29:07:20:99:59:b5:4e:0c:93:8f:e1:2f:95:ea:14:86:
5f:05:e2:7d:61:d6:fa:c7:37:df:d8:cc:71:5f:0e:3e:7e:98:
64:91:0c:06:b4:d4:bf:c4:46:89:ad:a1:50:5c:94:d3:bc:02:
b2:b6:e7:58:45:72:3c:3e:3d:ca:a8:14:6e:37:47:97:7c:b2:
f7:a4:cc:cb:05:f5:ed:e8:cf:49:5e:f1:58:f1:1d:76:f9:86:
24:69:ac:68:ad:70:25:f3:0c:f0:20:e8:e4:0b:ac:1c:1c:79:
57:8e:a0:3e:92:68:cc:53:58:5a:0a:e0:fd:b2:2c:83:f1:c4:
11:82:52:dc:e2:b8:7d:e8:16:be:2d:a8:86:46:cd:a5:51:78:
85:98:2f:d6:c2:07:aa:12:a8:7f:45:20:ee:dc:6e:1a:19:6f:
6d:d6:97:07:b5:e2:33:6a:5d:25:af:d0:92:dc:2a:57:9f:de:
e5:d7:44:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfuh2IbaEli5CD70gUVCZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0
ZDRhZDkwHhcNMjYxMTE1MTUwMTE4WhcNMjYxMTE2MTUwMTE4WjAzMTEwLwYDVQQD
EygzZjliY2I4N2YwNWNiMmUxMjFjN2IxZDllMjI3NjFhNzI3MjEyM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n/Qbe2NS8hdDLJKMGdko37JR8js
2rCC9stf4HOKjP02Q4Zl+7iib1oxUFnIKrrCIeYKfCpR1e2XMWI9CPLBRaZeDCrG
fGHtoDwZf+uFVzxT6XNMdBlIDkev0nZSNPs07ZKa7m69yZe27tL00uRhX0tEoi7X
rGvFRCxOAQDxuZkzinZkZTotWrYfw2AZ6pO0yHYTV0HZamQW21cjVmGH2ooo1yst
Tm3XtLAzj7m6OY7HF+1wqpW89Ii4MVlzz6XfXhYpvvsp+q9zGexPpGQqrKZXOOQS
riExqGFY9buhQVqlfkX7zDu9Mfng93NfUnmvsJe+cUyy6yrGQGzRQ/eDJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+by4fwXLLhIcex2eInYacnISPjMB8GA1UdIwQY
MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt
NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5
LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavOznJNN
CLr9oWixMRs8f2Sd5M5Z20SUXqlnWIEijr8bBpD+pW7US6Qlu+nGAUWcYzQ9EIXr
I4khfltImvJvkIODQxwf/oid/qwpByCZWbVODJOP4S+V6hSGXwXifWHW+sc339jM
cV8OPn6YZJEMBrTUv8RGia2hUFyU07wCsrbnWEVyPD49yqgUbjdHl3yy96TMywX1
7ejPSV7xWPEddvmGJGmsaK1wJfMM8CDo5AusHBx5V46gPpJozFNYWgrg/bIsg/HE
EYJS3OK4fegWvi2ohkbNpVF4hZgv1sIHqhKof0Ug7txuGhlvbdaXB7XiM2pdJa/Q
ktwqV5/e5ddEpg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:34 2026 by rpki-client