Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: /bSvWqz/pj24XbFS6HZKkF5jrSWnja8+mtGjgbpUIYI=
Subject key identifier: B9:28:D9:4D:AA:8E:E2:0B:1A:2B:52:E2:74:CE:9C:DB:04:E1:BD:0F
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 019D2B85053A5164DC01895C7DB498F1D9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0F4A
Signing time: Thu 26 Mar 2026 19:00:31 +0000
Manifest this update: Thu 26 Mar 2026 19:00:31 +0000
Manifest next update: Fri 27 Mar 2026 19:00:31 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: 7ZIMyaCUSxv3Jvr5O2Cew7tm1G+Vh0g3KSjIs/j+3Ik=)
2: MipuBL2VGxmcxz7-wPC6PIvzlC0.roa (hash: pbdG1q6RrelOu8y48wOuYlZBSQEt24vc2iBxdFAT4TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:05:3a:51:64:dc:01:89:5c:7d:b4:98:f1:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Mar 26 19:00:31 2026 GMT
Not After : Mar 27 19:00:31 2026 GMT
Subject: CN=b928d94daa8ee20b1a2b52e274ce9cdb04e1bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:8d:38:79:52:2f:70:72:c6:dc:07:30:41:
1c:2b:5c:6a:bf:38:36:a9:8a:37:14:f6:53:5d:42:
a2:e0:14:0c:be:23:08:d9:af:15:e3:70:54:27:e2:
b3:62:28:14:28:e2:55:c8:35:7d:31:6c:36:85:32:
4a:39:c1:69:5e:23:af:52:78:7f:a3:62:3c:cb:9e:
23:4e:8d:cd:31:53:08:98:f6:01:6e:b3:e4:0d:b2:
cd:e5:01:b8:a5:ae:bd:b3:c1:0d:b8:38:72:3b:84:
79:81:67:8a:b0:bc:c3:43:96:c4:a7:ed:f9:c6:8e:
af:01:ab:42:03:b8:18:00:a6:00:e0:11:ad:de:61:
7c:7a:08:f7:98:c7:04:78:80:d0:98:86:47:15:5c:
38:45:1c:bd:9a:b1:ea:68:7c:a7:a0:0f:43:fa:ec:
90:7c:6d:89:80:d1:1b:10:1a:dd:e3:07:4b:eb:2e:
fd:86:a8:57:54:5d:f1:18:f0:77:45:e1:e2:f8:62:
fb:73:cc:99:e0:9c:9f:b4:76:33:3c:28:e8:9b:d3:
1c:55:3a:26:6a:4a:84:d0:d7:c7:73:db:cc:7a:f8:
cd:87:fb:a8:5e:17:9f:a6:8c:ea:c0:67:b5:e2:c2:
fd:f9:b5:e7:36:d7:dd:f1:8f:a6:23:95:ad:d8:55:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:D9:4D:AA:8E:E2:0B:1A:2B:52:E2:74:CE:9C:DB:04:E1:BD:0F
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:19:9c:a9:80:b3:e3:9d:bb:0f:fb:7d:c4:77:f5:70:07:1c:
8a:c3:f0:72:35:f0:f8:c7:10:e3:c5:74:3b:96:62:91:d0:26:
3f:dd:eb:26:60:b5:a7:99:d8:0f:c2:67:25:a6:25:72:48:ea:
36:2f:07:14:f4:fe:74:15:61:5d:42:a2:b4:c6:d0:46:2b:ee:
04:86:0b:7b:d6:25:6f:d4:be:c8:41:5a:39:ab:30:38:6a:19:
90:41:51:2e:dd:dd:8b:af:25:de:40:e6:00:40:18:07:3d:24:
f3:2d:92:8a:ca:8a:3d:d1:41:d9:bd:01:ff:d6:53:69:d8:27:
da:0c:89:42:3c:f8:a7:c3:3c:69:e7:58:27:17:dd:cb:78:d1:
1f:04:46:99:5c:75:4f:f4:e3:3f:db:f7:e3:aa:94:97:86:9b:
23:7e:6e:92:bd:21:fe:82:7e:0c:8a:70:5d:74:42:27:d8:22:
38:8c:ff:14:8b:9c:6b:48:fc:b6:fe:21:eb:d9:b8:fb:b8:41:
02:44:ee:25:8b:55:19:f4:18:30:f9:d9:77:5f:07:a4:b1:2a:
38:d1:f9:8a:0c:6c:cf:17:c6:40:fb:ec:79:e2:62:69:70:4c:
da:22:10:71:7b:12:18:79:79:10:63:b6:3f:ad:f4:64:9a:ea:
0e:09:02:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhQU6UWTcAYlcfbSY8dnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5
ZjBjNjgwHhcNMjYwMzI2MTkwMDMxWhcNMjYwMzI3MTkwMDMxWjAzMTEwLwYDVQQD
EyhiOTI4ZDk0ZGFhOGVlMjBiMWEyYjUyZTI3NGNlOWNkYjA0ZTFiZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjaNOHlSL3ByxtwHMEEcK1xqvzg2
qYo3FPZTXUKi4BQMviMI2a8V43BUJ+KzYigUKOJVyDV9MWw2hTJKOcFpXiOvUnh/
o2I8y54jTo3NMVMImPYBbrPkDbLN5QG4pa69s8ENuDhyO4R5gWeKsLzDQ5bEp+35
xo6vAatCA7gYAKYA4BGt3mF8egj3mMcEeIDQmIZHFVw4RRy9mrHqaHynoA9D+uyQ
fG2JgNEbEBrd4wdL6y79hqhXVF3xGPB3ReHi+GL7c8yZ4JyftHYzPCjom9McVTom
akqE0NfHc9vMevjNh/uoXhefpozqwGe14sL9+bXnNtfd8Y+mI5Wt2FWicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLko2U2qjuILGitS4nTOnNsE4b0PMB8GA1UdIwQY
MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct
Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy
LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBmcqYCz
4527D/t9xHf1cAccisPwcjXw+McQ48V0O5ZikdAmP93rJmC1p5nYD8JnJaYlckjq
Ni8HFPT+dBVhXUKitMbQRivuBIYLe9Ylb9S+yEFaOaswOGoZkEFRLt3di68l3kDm
AEAYBz0k8y2SisqKPdFB2b0B/9ZTadgn2gyJQjz4p8M8aedYJxfdy3jRHwRGmVx1
T/TjP9v346qUl4abI35ukr0h/oJ+DIpwXXRCJ9giOIz/FIuca0j8tv4h69m4+7hB
AkTuJYtVGfQYMPnZd18HpLEqONH5igxszxfGQPvseeJiaXBM2iIQcXsSGHl5EGO2
P630ZJrqDgkCqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:10 2026 by rpki-client