Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
File: EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft (raw, json)
Hash identifier: mF+5Eg/LHPwYTPjnGtxhl37HPZe2ZhEIa8N3sWvAbBY=
Subject key identifier: BA:FF:92:C0:FD:53:2C:8C:E5:6E:B7:AF:81:EB:B4:1E:C9:6F:C6:4E
Authority key identifier: 10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77
Certificate issuer: /CN=104a455eb31f63e390e21aa77fcc2af2ac343577
Certificate serial: 019D2695CECF9E39B66FB824535465DA78AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
Manifest number: 0106
Signing time: Wed 25 Mar 2026 20:00:45 +0000
Manifest this update: Wed 25 Mar 2026 20:00:45 +0000
Manifest next update: Thu 26 Mar 2026 20:00:45 +0000
Files and hashes: 1: EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl (hash: 7pYFAPV8t2iT3tTyRYLin+OooCgR3Y+KSKjJZ/tuq4M=)
2: w31idblgiUNKUk_LIT-LzFwAO0k.roa (hash: Vze4y124S1wqVoT3H487SgKmVoNpkquz3RZVumGNXCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ce:cf:9e:39:b6:6f:b8:24:53:54:65:da:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104a455eb31f63e390e21aa77fcc2af2ac343577
Validity
Not Before: Mar 25 20:00:45 2026 GMT
Not After : Mar 26 20:00:45 2026 GMT
Subject: CN=baff92c0fd532c8ce56eb7af81ebb41ec96fc64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:3d:af:f9:e2:83:b9:b6:5c:2e:fe:7c:e3:
97:89:36:0b:f2:58:dc:32:79:2d:0d:ac:60:10:f5:
46:17:9a:94:87:e9:d1:d5:41:0d:8e:6c:6c:17:f7:
35:88:09:bb:db:69:a2:f0:95:b8:58:99:b8:69:53:
92:fe:1c:a4:57:6b:19:b6:39:66:7e:2c:15:a4:37:
16:09:2f:bc:dc:86:c7:1e:66:6f:af:1d:97:cd:28:
32:2a:de:e3:5d:ce:84:e4:60:ff:e0:32:22:31:0f:
b3:75:f6:90:4f:e7:1d:c2:30:09:ae:b9:cc:39:48:
0f:76:c5:49:89:85:e2:a9:bd:24:9d:85:bd:ff:28:
d3:bb:d8:ec:7f:3a:33:df:07:bb:b8:c6:49:1d:07:
c3:d3:a2:6e:12:d6:57:a0:d7:61:38:3e:52:7a:27:
a2:54:ce:9e:79:5c:07:2e:50:80:9f:1f:93:81:1e:
18:75:f7:6d:da:a6:90:8a:2f:7d:3b:f7:cb:3a:04:
41:d4:64:6d:74:bd:f9:52:b2:a6:d5:6b:3b:04:35:
18:93:30:35:86:03:19:aa:83:3d:7a:5b:d3:4c:29:
5f:bb:d9:55:2e:14:d2:bf:5f:2d:e7:22:3e:d8:43:
9e:f5:84:65:33:73:af:62:f0:94:62:30:f3:b4:94:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:92:C0:FD:53:2C:8C:E5:6E:B7:AF:81:EB:B4:1E:C9:6F:C6:4E
X509v3 Authority Key Identifier:
keyid:10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2d:f2:fb:ab:75:65:84:b5:e9:a9:74:9e:74:55:23:fe:d3:
b3:0e:a8:5f:1a:c0:cc:6b:f7:21:1f:7e:92:cf:21:dd:58:9e:
34:93:ec:90:3d:08:97:c5:83:cb:7a:02:07:bb:50:f7:58:9f:
7b:04:72:d3:6a:4a:6a:e2:c6:9b:6a:26:65:d1:d7:8c:1e:57:
bb:ee:e4:4c:5f:a4:db:68:41:00:06:04:f1:71:d8:04:2a:69:
03:5b:63:3e:3f:84:6a:69:38:97:85:8f:d5:af:8c:89:f4:ed:
eb:8c:f2:45:38:81:62:1a:35:dd:b9:56:7d:00:80:83:5a:eb:
fb:52:7a:aa:c0:e8:bb:9e:fc:9f:29:69:56:b4:7a:9a:79:79:
04:76:f9:66:11:d9:bc:e3:58:77:c8:52:11:a1:d1:57:8d:8e:
32:96:e0:73:03:49:43:c0:84:7d:e4:ed:30:07:d7:b8:df:a7:
d2:8b:7c:b5:5b:69:6e:7c:25:1c:52:e7:49:fc:d7:b7:17:94:
35:07:2e:af:06:9b:ab:b0:30:0c:e9:53:ea:a3:9d:33:ad:68:
b9:f5:51:67:e1:3e:1a:33:5f:f4:ef:66:1b:4d:a6:f4:ba:3b:
6a:f8:d3:64:c3:96:cb:33:67:cd:79:64:54:8a:4d:93:59:7d:
79:85:6d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlc7Pnjm2b7gkU1Rl2nivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNGE0NTVlYjMxZjYzZTM5MGUyMWFhNzdmY2MyYWYyYWMz
NDM1NzcwHhcNMjYwMzI1MjAwMDQ1WhcNMjYwMzI2MjAwMDQ1WjAzMTEwLwYDVQQD
EyhiYWZmOTJjMGZkNTMyYzhjZTU2ZWI3YWY4MWViYjQxZWM5NmZjNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfk9r/nig7m2XC7+fOOXiTYL8ljc
MnktDaxgEPVGF5qUh+nR1UENjmxsF/c1iAm722mi8JW4WJm4aVOS/hykV2sZtjlm
fiwVpDcWCS+83IbHHmZvrx2XzSgyKt7jXc6E5GD/4DIiMQ+zdfaQT+cdwjAJrrnM
OUgPdsVJiYXiqb0knYW9/yjTu9jsfzoz3we7uMZJHQfD06JuEtZXoNdhOD5Seiei
VM6eeVwHLlCAnx+TgR4Ydfdt2qaQii99O/fLOgRB1GRtdL35UrKm1Ws7BDUYkzA1
hgMZqoM9elvTTClfu9lVLhTSv18t5yI+2EOe9YRlM3OvYvCUYjDztJQKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr/ksD9UyyM5W63r4HrtB7Jb8ZOMB8GA1UdIwQY
MBaAFBBKRV6zH2PjkOIap3/MKvKsNDV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVwRlhyTWZZLU9RNGhxbmY4d3E4cXcwTlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGUwYzItYmFiNC00NzEzLThlYjEt
ZTY1MTM5N2NlODU1LzEvRUVwRlhyTWZZLU9RNGhxbmY4d3E4cXcwTlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84MGUwYzItYmFiNC00NzEzLThlYjEtZTY1MTM5N2NlODU1
LzEvRUVwRlhyTWZZLU9RNGhxbmY4d3E4cXcwTlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy3y+6t1
ZYS16al0nnRVI/7Tsw6oXxrAzGv3IR9+ks8h3VieNJPskD0Il8WDy3oCB7tQ91if
ewRy02pKauLGm2omZdHXjB5Xu+7kTF+k22hBAAYE8XHYBCppA1tjPj+Eamk4l4WP
1a+MifTt64zyRTiBYho13blWfQCAg1rr+1J6qsDou578nylpVrR6mnl5BHb5ZhHZ
vONYd8hSEaHRV42OMpbgcwNJQ8CEfeTtMAfXuN+n0ot8tVtpbnwlHFLnSfzXtxeU
NQcurwabq7AwDOlT6qOdM61oufVRZ+E+GjNf9O9mG02m9Lo7avjTZMOWyzNnzXlk
VIpNk1l9eYVtrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:53 2026 by rpki-client