Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier: VVbCI6LQG1Nkc2bNgVlFnaX5lFPcl1bGTEsPWz7esmc=
Subject key identifier: 5B:F8:A8:C1:D4:D0:DB:7C:92:5B:11:CC:4F:76:D2:84:5C:D7:24:21
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01A0D0B706A727DAFB77302417B76555E30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 00:00:50 +0000
Manifest this update: Thu 24 Sep 2026 00:00:50 +0000
Manifest next update: Fri 25 Sep 2026 00:00:50 +0000
Files and hashes: 1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
2: 5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa (hash: 3HB3Pm/gwM+qHx/iqgvsnkZiNMNHUAb9tRWCmqy13kA=)
3: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: p5/BIYykMXLShlk38SKwpF2wC/3e6RHeJFqc7oyRDRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:06:a7:27:da:fb:77:30:24:17:b7:65:55:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Sep 24 00:00:50 2026 GMT
Not After : Sep 25 00:00:50 2026 GMT
Subject: CN=5bf8a8c1d4d0db7c925b11cc4f76d2845cd72421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:a5:02:85:f1:94:dc:49:7c:d0:64:e7:eb:
2d:f2:09:ef:2a:d8:31:ce:28:e7:28:2a:9e:b2:e2:
fb:4d:19:dc:39:f6:e3:48:aa:8d:f4:97:52:8b:a6:
f2:f5:8f:65:7d:af:fa:b7:0a:1d:02:09:62:86:a5:
3a:ba:99:4e:2a:71:9e:30:25:9f:01:a3:68:40:8a:
6d:8b:f4:12:34:0b:34:24:35:07:20:a6:7a:ba:52:
d8:65:79:c1:2b:09:a5:52:58:75:a4:cf:6a:59:5a:
6d:d7:90:4c:b0:0b:77:7d:78:ca:82:06:f2:71:12:
e9:8a:36:ea:d0:2f:a7:a8:ea:a6:49:dc:3b:a9:ed:
66:f0:29:c8:82:2b:b7:f3:4d:3e:ff:d4:75:92:88:
af:41:39:29:a8:7d:f5:7e:bd:76:24:74:c7:4e:74:
35:5f:96:51:72:d7:73:95:ac:2d:04:a8:c5:5a:a2:
56:4d:2e:85:d6:a0:43:2b:1e:dd:9a:d2:cf:73:43:
ab:36:37:3a:6a:44:46:ea:74:7c:8c:c5:0f:86:85:
39:55:21:c1:7c:a7:13:08:94:75:10:fc:3b:d1:e2:
20:a5:8d:4e:24:5a:5a:27:5a:be:93:23:12:31:5b:
77:58:28:4e:98:09:7c:58:c2:dd:2f:fa:08:8b:ae:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:A8:C1:D4:D0:DB:7C:92:5B:11:CC:4F:76:D2:84:5C:D7:24:21
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:65:e2:6f:26:f6:df:11:b4:c7:c1:76:d6:3c:1e:47:a1:06:
fc:56:a1:36:d6:c6:aa:ff:a0:83:d7:33:50:0f:53:93:1a:cc:
d5:78:2d:a3:79:77:9c:a8:18:43:1b:b1:48:14:7d:96:65:c7:
f2:79:e6:66:a2:7c:59:ad:57:04:b5:ec:e4:f6:ad:58:e1:e0:
c6:69:e4:1f:bd:3a:52:80:b7:37:b0:dc:1f:4a:fa:64:07:8c:
66:87:44:b8:87:02:dc:69:07:6b:c6:53:4e:7b:1c:6e:0a:26:
41:50:e5:c2:40:04:72:ca:29:9b:a2:e3:5d:0b:8d:5e:d0:8b:
24:49:fb:ab:2c:38:99:a1:c6:90:53:29:74:65:3a:32:42:11:
e3:bb:d1:7d:05:30:70:89:08:f9:1c:7e:09:c1:4b:4e:ff:0a:
88:43:36:6b:0e:59:04:f6:f7:b8:b6:f0:48:71:5d:dd:57:d6:
6a:4d:b4:ed:43:7b:2e:e4:ae:b7:d3:c7:a0:1a:53:0a:d7:ea:
92:62:24:9c:1b:46:12:3f:87:b2:8f:09:b9:e3:c3:53:33:b9:
0b:39:b1:6c:d9:ed:1f:c2:ad:ba:6e:88:7a:18:ba:c9:93:66:
08:3b:8c:e4:e4:11:3f:91:0f:a1:51:45:1e:e2:b2:29:0c:6d:
0d:29:48:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtwanJ9r7dzAkF7dlVeMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjYwOTI0MDAwMDUwWhcNMjYwOTI1MDAwMDUwWjAzMTEwLwYDVQQD
Eyg1YmY4YThjMWQ0ZDBkYjdjOTI1YjExY2M0Zjc2ZDI4NDVjZDcyNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJqlAoXxlNxJfNBk5+st8gnvKtgx
zijnKCqesuL7TRncOfbjSKqN9JdSi6by9Y9lfa/6twodAglihqU6uplOKnGeMCWf
AaNoQIpti/QSNAs0JDUHIKZ6ulLYZXnBKwmlUlh1pM9qWVpt15BMsAt3fXjKggby
cRLpijbq0C+nqOqmSdw7qe1m8CnIgiu3800+/9R1koivQTkpqH31fr12JHTHTnQ1
X5ZRctdzlawtBKjFWqJWTS6F1qBDKx7dmtLPc0OrNjc6akRG6nR8jMUPhoU5VSHB
fKcTCJR1EPw70eIgpY1OJFpaJ1q+kyMSMVt3WChOmAl8WMLdL/oIi64XgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv4qMHU0Nt8klsRzE920oRc1yQhMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2Xibyb2
3xG0x8F21jweR6EG/FahNtbGqv+gg9czUA9TkxrM1Xgto3l3nKgYQxuxSBR9lmXH
8nnmZqJ8Wa1XBLXs5PatWOHgxmnkH706UoC3N7DcH0r6ZAeMZodEuIcC3GkHa8ZT
TnscbgomQVDlwkAEcsopm6LjXQuNXtCLJEn7qyw4maHGkFMpdGU6MkIR47vRfQUw
cIkI+Rx+CcFLTv8KiEM2aw5ZBPb3uLbwSHFd3VfWak207UN7LuSut9PHoBpTCtfq
kmIknBtGEj+Hso8JuePDUzO5CzmxbNntH8Ktum6Iehi6yZNmCDuM5OQRP5EPoVFF
HuKyKQxtDSlIZw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:38:59 2026 by rpki-client