Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: 7gqPeB4OHZvllqUa/rRDrmBz7fZrZrmiDSOmvRyWu0o=
Subject key identifier: 1F:32:1D:90:29:5B:7F:63:4A:D1:81:B6:4F:57:7D:FB:47:73:5C:03
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01A0E2BE1F9A3EDDAD4010E5390FB38FF4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 12:01:45 +0000
Manifest this update: Sun 27 Sep 2026 12:01:45 +0000
Manifest next update: Mon 28 Sep 2026 12:01:45 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: fdWR0oAf9B8i38mmaWVrhUH02KEAtCWsKJwabNyfVhA=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:1f:9a:3e:dd:ad:40:10:e5:39:0f:b3:8f:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Sep 27 12:01:45 2026 GMT
Not After : Sep 28 12:01:45 2026 GMT
Subject: CN=1f321d90295b7f634ad181b64f577dfb47735c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:30:b1:80:0d:60:22:59:a8:f3:18:0b:db:
0a:02:a5:3f:70:00:dd:75:ca:c9:19:f1:7b:0c:1f:
35:54:97:32:78:35:52:dd:d5:42:90:a3:a5:fb:c2:
6a:23:de:44:f2:cb:83:75:35:8d:b9:40:65:1b:b7:
70:58:c3:52:70:20:2a:d1:30:89:94:aa:a7:92:c0:
80:1a:4d:e6:a1:a6:74:59:0d:bb:cd:22:f8:7c:b5:
5c:86:8c:ab:b1:c9:a8:29:d5:90:3d:dc:e1:4e:a5:
2f:54:29:48:2a:a0:a5:1f:73:96:64:e0:a9:66:71:
69:cc:e0:2d:ce:c6:69:0e:cc:e7:db:25:4e:39:ac:
47:e4:a2:22:85:15:f7:ba:f4:c5:f3:4b:aa:14:80:
b5:9e:af:a1:03:b9:30:b4:5f:76:d1:8d:a7:80:98:
81:2e:44:9b:45:1a:9c:e6:fc:56:5b:16:0e:5f:10:
15:ba:4d:10:b8:c2:4b:13:59:bf:83:57:df:13:ba:
8c:b7:06:70:5c:38:e1:52:f0:8a:6a:53:a3:b3:3d:
2f:6c:02:87:95:9d:a8:3a:2a:b2:68:0f:26:49:60:
23:05:1a:bd:38:f3:85:44:85:dd:09:a8:3f:25:85:
85:ad:bc:58:20:f8:bd:9f:15:26:79:6a:93:47:2c:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:32:1D:90:29:5B:7F:63:4A:D1:81:B6:4F:57:7D:FB:47:73:5C:03
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:26:c8:ae:a9:17:33:09:0a:ba:9c:42:ff:d5:81:fb:39:
3e:6b:14:f0:a4:a3:b3:b0:ff:90:94:12:d1:97:57:58:f6:81:
87:81:5c:e0:4f:d7:a6:9d:d8:60:29:75:00:94:82:55:6d:72:
2c:65:0a:1e:12:fd:a6:1e:10:c1:dd:99:d2:f6:f4:99:48:9f:
28:28:91:d1:82:79:6c:cd:48:03:a6:b1:53:e7:7b:17:97:f1:
54:c5:7d:38:58:4f:87:f5:5f:73:02:7a:29:0a:15:e3:f8:0f:
b4:b2:2e:96:09:80:01:78:54:c3:14:b2:18:dd:fc:2e:a0:0d:
7c:86:58:97:d9:87:86:dd:e5:65:9d:21:d5:e5:2a:5d:98:31:
28:7b:73:23:9c:7a:c2:cc:ea:2c:89:ff:89:09:e7:88:c0:19:
46:9b:d9:25:c6:4d:8c:87:ae:c0:9b:90:bf:93:bf:5c:c5:06:
43:e0:a3:95:36:69:80:46:aa:0c:8d:4e:fa:cf:a7:19:c5:9d:
ce:0d:67:b7:8c:d0:e0:20:de:33:9d:d5:fa:a1:21:7e:28:be:
a2:cb:0c:6e:51:f7:42:99:f2:48:ee:bd:b1:7d:e3:c4:89:f9:
c9:93:8f:e3:a1:b6:23:09:3a:bd:17:a2:2b:b5:87:c1:2e:5b:
b8:22:04:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDivh+aPt2tQBDlOQ+zj/TGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4
ZjQ0ODkwHhcNMjYwOTI3MTIwMTQ1WhcNMjYwOTI4MTIwMTQ1WjAzMTEwLwYDVQQD
EygxZjMyMWQ5MDI5NWI3ZjYzNGFkMTgxYjY0ZjU3N2RmYjQ3NzM1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshswsYANYCJZqPMYC9sKAqU/cADd
dcrJGfF7DB81VJcyeDVS3dVCkKOl+8JqI95E8suDdTWNuUBlG7dwWMNScCAq0TCJ
lKqnksCAGk3moaZ0WQ27zSL4fLVchoyrscmoKdWQPdzhTqUvVClIKqClH3OWZOCp
ZnFpzOAtzsZpDszn2yVOOaxH5KIihRX3uvTF80uqFIC1nq+hA7kwtF920Y2ngJiB
LkSbRRqc5vxWWxYOXxAVuk0QuMJLE1m/g1ffE7qMtwZwXDjhUvCKalOjsz0vbAKH
lZ2oOiqyaA8mSWAjBRq9OPOFRIXdCag/JYWFrbxYIPi9nxUmeWqTRywtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8yHZApW39jStGBtk9XfftHc1wDMB8GA1UdIwQY
MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt
YmFlOWQyYjI5NjAxLzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx
LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6MmyK6p
FzMJCrqcQv/Vgfs5PmsU8KSjs7D/kJQS0ZdXWPaBh4Fc4E/Xpp3YYCl1AJSCVW1y
LGUKHhL9ph4Qwd2Z0vb0mUifKCiR0YJ5bM1IA6axU+d7F5fxVMV9OFhPh/VfcwJ6
KQoV4/gPtLIulgmAAXhUwxSyGN38LqANfIZYl9mHht3lZZ0h1eUqXZgxKHtzI5x6
wszqLIn/iQnniMAZRpvZJcZNjIeuwJuQv5O/XMUGQ+CjlTZpgEaqDI1O+s+nGcWd
zg1nt4zQ4CDeM53V+qEhfii+ossMblH3QpnySO69sX3jxIn5yZOP46G2Iwk6vRei
K7WHwS5buCIEIA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:14:53 2026 by rpki-client