Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: DeazZVrQlv/9S8s2HVjSCP+vGbV7VHr3VH3nPdBRjhw=
Subject key identifier: 9F:4F:D0:A9:2A:61:35:0C:86:E4:76:54:0F:FA:8A:8C:36:9E:F4:34
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 01A1DC14380AE96B589C4CF83087DC46A0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 22:01:14 +0000
Manifest this update: Sat 14 Nov 2026 22:01:14 +0000
Manifest next update: Sun 15 Nov 2026 22:01:14 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: F2HYDxErioAUHYud6iy6E4eE9FI1mIL2rsb6wJ6K7Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:38:0a:e9:6b:58:9c:4c:f8:30:87:dc:46:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Nov 14 22:01:14 2026 GMT
Not After : Nov 15 22:01:14 2026 GMT
Subject: CN=9f4fd0a92a61350c86e476540ffa8a8c369ef434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:b7:ec:e8:ac:48:fd:58:71:28:44:33:be:
17:29:ed:26:74:ee:58:04:ed:84:19:89:a2:5a:7f:
58:c4:f1:2e:00:8a:8f:62:21:63:ea:ba:24:8d:2f:
7e:9d:44:62:d5:83:e0:09:f3:19:55:cd:9d:54:07:
aa:28:0a:68:cd:44:aa:ec:9f:33:ad:ad:1c:f8:62:
17:f0:06:7f:e2:1f:6c:f8:12:28:65:45:90:b5:18:
3d:e5:e8:17:b7:69:e0:cc:e7:97:d7:ad:21:e6:52:
7d:72:af:38:73:cb:ae:80:72:57:39:6e:84:0d:44:
60:89:3b:7a:7e:3e:a5:51:4e:a9:88:aa:e1:cc:97:
8e:40:96:22:1c:41:47:80:97:36:b3:10:b4:08:b7:
46:df:96:d3:ac:73:e7:f7:72:f4:d6:33:40:4b:d5:
a8:86:0f:0a:b7:3e:8b:c7:6d:27:bc:5a:88:ef:a5:
e0:98:88:6d:2d:ef:9b:1c:40:0f:7d:e8:20:03:29:
14:f1:2d:a0:53:07:30:b0:d9:15:c6:93:bf:b7:8f:
79:cd:bb:e3:0c:ac:bd:ee:73:7f:7f:aa:8e:3a:75:
c9:3a:7d:d3:f3:b7:51:83:f2:47:e3:fa:5e:fc:9b:
3b:85:c7:c2:1c:80:98:0d:e4:32:48:22:3f:22:de:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:D0:A9:2A:61:35:0C:86:E4:76:54:0F:FA:8A:8C:36:9E:F4:34
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:45:ce:95:cc:4b:03:ba:d2:1d:e4:83:89:e7:ad:b2:c0:
67:3a:8b:73:fc:82:fa:22:21:a0:a9:8a:f9:d3:0e:74:05:55:
a8:cd:f6:b0:67:0f:1e:33:09:3c:50:e8:8f:f7:0d:71:ac:23:
6b:92:87:cb:0c:9d:3d:c8:83:2b:26:69:b8:0c:19:93:8a:89:
db:d1:d8:c2:33:b7:65:79:a2:32:f8:80:1b:69:6a:31:a7:89:
d0:bf:63:8a:79:11:14:a2:41:56:06:93:c8:7b:78:ec:c3:24:
a8:37:a7:04:00:ab:9d:52:35:c4:e8:6d:70:ff:ec:2c:e5:8a:
ac:88:20:5f:0d:8c:40:5e:24:d8:a6:66:b0:42:0e:c6:60:36:
1d:ec:58:b1:e9:00:70:87:5d:3b:7d:dd:3d:1c:22:6a:1c:7e:
33:3e:22:1d:01:c7:8a:2f:51:d0:d0:4b:22:fb:e6:d5:5e:7c:
27:8b:d2:d4:1d:e8:2a:d6:f2:6a:3d:0f:a4:59:9f:7f:68:00:
91:df:ef:72:ff:be:52:40:82:9d:2a:c5:23:5e:3b:01:ce:a8:
34:15:24:f9:7f:3f:7f:62:02:4f:a2:b7:83:af:aa:cc:fa:e5:
f2:b3:db:48:06:da:d0:e2:7b:76:77:ab:9e:47:df:ef:9d:7a:
67:d7:19:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcFDgK6WtYnEz4MIfcRqDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0
YjQ5ZjQwHhcNMjYxMTE0MjIwMTE0WhcNMjYxMTE1MjIwMTE0WjAzMTEwLwYDVQQD
Eyg5ZjRmZDBhOTJhNjEzNTBjODZlNDc2NTQwZmZhOGE4YzM2OWVmNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfW37OisSP1YcShEM74XKe0mdO5Y
BO2EGYmiWn9YxPEuAIqPYiFj6rokjS9+nURi1YPgCfMZVc2dVAeqKApozUSq7J8z
ra0c+GIX8AZ/4h9s+BIoZUWQtRg95egXt2ngzOeX160h5lJ9cq84c8uugHJXOW6E
DURgiTt6fj6lUU6piKrhzJeOQJYiHEFHgJc2sxC0CLdG35bTrHPn93L01jNAS9Wo
hg8Ktz6Lx20nvFqI76XgmIhtLe+bHEAPfeggAykU8S2gUwcwsNkVxpO/t495zbvj
DKy97nN/f6qOOnXJOn3T87dRg/JH4/pe/Js7hcfCHICYDeQySCI/It5RhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9P0KkqYTUMhuR2VA/6iow2nvQ0MB8GA1UdIwQY
MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut
N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi
LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrhFzpXM
SwO60h3kg4nnrbLAZzqLc/yC+iIhoKmK+dMOdAVVqM32sGcPHjMJPFDoj/cNcawj
a5KHywydPciDKyZpuAwZk4qJ29HYwjO3ZXmiMviAG2lqMaeJ0L9jinkRFKJBVgaT
yHt47MMkqDenBACrnVI1xOhtcP/sLOWKrIggXw2MQF4k2KZmsEIOxmA2HexYsekA
cIddO33dPRwiahx+Mz4iHQHHii9R0NBLIvvm1V58J4vS1B3oKtbyaj0PpFmff2gA
kd/vcv++UkCCnSrFI147Ac6oNBUk+X8/f2ICT6K3g6+qzPrl8rPbSAba0OJ7dner
nkff7516Z9cZ1w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:36:42 2026 by rpki-client