Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: IxEPXU5Ya8gs16tEVHV+ifHY+A6ySYBINCT40asRG6k=
Subject key identifier: D5:E5:41:05:43:79:95:71:E4:34:EC:BB:37:66:37:70:CC:D8:71:CC
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019D25F188338DCAB319A8360A4298166A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 08F8
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: 9fWFd4NClK8QWYVxsNbj+GIWEUqd1WSXx/bURQdP5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:88:33:8d:ca:b3:19:a8:36:0a:42:98:16:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=d5e5410543799571e434ecbb37663770ccd871cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:4c:c0:fa:68:2b:bf:2b:12:88:1e:0d:9b:
23:10:10:ee:80:3f:34:e8:02:75:54:7f:d8:ed:68:
5e:65:9d:b8:21:cd:b9:06:1e:a4:32:ef:9f:49:33:
e6:a0:83:f6:d3:b6:c0:22:03:8d:fb:ba:99:61:12:
a0:2f:ef:2d:82:49:91:3c:75:b3:8a:fb:5d:68:c1:
3a:68:dd:56:6c:3b:c2:d6:9e:03:ec:d6:ae:91:88:
5a:e3:3c:65:8c:9d:96:d5:c3:e4:7a:47:50:32:b6:
bc:4b:3b:65:f2:8b:45:fb:0b:8c:a0:31:07:a3:a2:
b2:f6:57:a6:cc:53:26:59:50:d1:bb:75:27:be:da:
ee:2f:78:f8:6c:2d:a9:95:9e:6c:45:a2:16:c6:e3:
07:99:fd:5c:b7:98:10:40:9c:8a:51:2c:4f:98:95:
46:06:5d:65:b4:b8:8e:d9:2f:be:fa:cb:fe:f2:81:
35:94:fb:ed:b3:dd:67:cb:5b:db:83:62:85:c8:16:
f7:cf:45:ee:48:26:59:59:0c:8b:c7:d0:dd:e8:df:
04:a1:73:a0:4b:6f:dc:fc:85:89:50:9c:77:09:55:
c9:86:b6:55:7a:27:2e:be:27:c1:d7:93:c9:d8:35:
36:e5:51:33:0a:b4:7c:91:01:e0:4d:ef:60:b5:2e:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:41:05:43:79:95:71:E4:34:EC:BB:37:66:37:70:CC:D8:71:CC
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:53:57:04:1d:93:c9:12:a7:a5:a1:94:30:85:b0:c9:3a:6d:
e7:1b:5f:fe:fe:ac:2c:22:5d:65:97:e3:37:0f:12:1b:62:c6:
45:e5:63:7b:63:70:3c:b8:39:45:46:e2:49:19:c2:b1:f7:d6:
fc:f3:60:1c:ed:b8:d8:ae:e6:be:b8:3b:69:dd:ae:e3:2b:d3:
be:47:4b:75:31:f7:41:55:b1:fc:aa:5e:1f:be:d5:83:4f:24:
a4:12:aa:ed:1f:35:7a:29:f6:fb:86:58:a0:7d:d5:0b:58:d9:
14:67:52:18:a7:ae:11:3f:04:72:5b:d9:a3:99:36:bd:58:fa:
6f:92:ee:91:03:26:d1:55:49:22:fe:9b:98:33:4b:01:53:3a:
09:9d:fb:14:0a:56:e3:5c:40:9b:53:35:42:6d:b8:7f:6d:a8:
a8:0f:10:5b:9a:d2:dd:a8:a2:81:47:63:67:4d:ef:ce:c8:73:
2d:54:fa:5e:ed:16:1d:cf:29:ea:b7:fe:ee:b5:3f:f9:f3:d7:
78:3f:6f:dd:79:dd:3b:7f:fa:dc:de:43:66:a4:68:41:a7:f6:
41:30:92:24:fd:a8:bb:39:4d:a8:b9:b0:1a:42:ef:74:8d:e3:
b4:de:fe:0d:ab:27:9b:9f:7c:54:59:c2:b8:bd:62:c3:3b:6f:
7c:8a:94:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8YgzjcqzGag2CkKYFmpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njc1OGJlYTY4ZjA4MjVjZjE2ZTY2ZmIwMmVlN2JjYTQ1
NGJhZTIwHhcNMjYwMzI1MTcwMTE5WhcNMjYwMzI2MTcwMTE5WjAzMTEwLwYDVQQD
EyhkNWU1NDEwNTQzNzk5NTcxZTQzNGVjYmIzNzY2Mzc3MGNjZDg3MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPpMwPpoK78rEogeDZsjEBDugD80
6AJ1VH/Y7WheZZ24Ic25Bh6kMu+fSTPmoIP207bAIgON+7qZYRKgL+8tgkmRPHWz
ivtdaME6aN1WbDvC1p4D7NaukYha4zxljJ2W1cPkekdQMra8Sztl8otF+wuMoDEH
o6Ky9lemzFMmWVDRu3UnvtruL3j4bC2plZ5sRaIWxuMHmf1ct5gQQJyKUSxPmJVG
Bl1ltLiO2S+++sv+8oE1lPvts91ny1vbg2KFyBb3z0XuSCZZWQyLx9Dd6N8EoXOg
S2/c/IWJUJx3CVXJhrZVeicuvifB15PJ2DU25VEzCrR8kQHgTe9gtS7C6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXlQQVDeZVx5DTsuzdmN3DM2HHMMB8GA1UdIwQY
MBaAFHhnWL6mjwglzxbmb7Au57ykVLriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEt
ZWVkNDVjOTM3NzVlLzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEtZWVkNDVjOTM3NzVl
LzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFNXBB2T
yRKnpaGUMIWwyTpt5xtf/v6sLCJdZZfjNw8SG2LGReVje2NwPLg5RUbiSRnCsffW
/PNgHO242K7mvrg7ad2u4yvTvkdLdTH3QVWx/KpeH77Vg08kpBKq7R81ein2+4ZY
oH3VC1jZFGdSGKeuET8EclvZo5k2vVj6b5LukQMm0VVJIv6bmDNLAVM6CZ37FApW
41xAm1M1Qm24f22oqA8QW5rS3aiigUdjZ03vzshzLVT6Xu0WHc8p6rf+7rU/+fPX
eD9v3XndO3/63N5DZqRoQaf2QTCSJP2ouzlNqLmwGkLvdI3jtN7+Dasnm598VFnC
uL1iwztvfIqUmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:52 2026 by rpki-client