Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: SqVIo2dsHIwHqO6A6yfalRYFQf8NnardAYnpzZ2Gz5o=
Subject key identifier: F7:7F:4D:0E:04:46:DF:52:29:9F:2F:D3:0D:DB:06:75:4D:25:64:A2
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 019F93C88188A3ECA184983DE5CBF1047A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:18 +0000
Manifest this update: Fri 24 Jul 2026 11:00:18 +0000
Manifest next update: Sat 25 Jul 2026 11:00:18 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: GGo/znQ19p277MVfnZEtAWIfmxPzM7mxWuROgpHDJD0=)
2: wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa (hash: zwkwV/qCyW+dPqYTHQuCJTe82tiBbsC4rDyFqVjw0RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:81:88:a3:ec:a1:84:98:3d:e5:cb:f1:04:7a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Jul 24 11:00:18 2026 GMT
Not After : Jul 25 11:00:18 2026 GMT
Subject: CN=f77f4d0e0446df52299f2fd30ddb06754d2564a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:b9:c0:e6:5d:4c:0b:d8:d9:5e:72:4e:64:
50:92:03:07:2c:cf:98:41:fc:38:a1:ef:b4:66:6e:
75:49:ea:07:26:8e:79:21:3a:eb:1b:73:de:28:7f:
2b:f8:71:dc:be:e5:83:b4:18:b0:1d:72:99:97:0c:
d1:5b:04:31:2e:60:28:b4:19:c9:fa:54:02:e1:27:
2b:6b:12:11:2e:f7:66:7b:ae:be:a5:df:57:51:6a:
1a:aa:7e:74:fe:4c:4d:2f:4c:c2:8f:33:e1:22:65:
a2:68:40:11:d4:cd:fd:98:79:8d:2f:4b:66:a8:f7:
13:90:48:71:74:29:4c:76:13:81:e2:26:58:f9:60:
06:53:3e:6b:f7:bf:ae:41:b5:82:25:a3:c1:90:2c:
84:ac:d2:c2:4e:20:69:db:83:69:30:e7:ed:4b:9f:
9d:62:5d:12:f3:d0:fa:1e:3b:2d:67:1c:04:ce:71:
f9:e2:25:cd:ef:ad:ca:86:f0:cc:12:37:90:7c:f9:
10:ae:93:c2:74:bf:2e:3d:77:9c:e4:40:60:52:ad:
ea:ed:24:68:e7:d9:ac:01:8c:78:f3:a6:29:42:c7:
ff:0c:b4:ba:dd:36:9f:76:06:62:05:2e:31:b4:1e:
fe:c3:b7:27:69:34:7b:06:20:5c:15:87:7d:56:56:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:4D:0E:04:46:DF:52:29:9F:2F:D3:0D:DB:06:75:4D:25:64:A2
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:33:5d:8a:e4:70:79:26:06:5c:a0:98:cc:8c:35:71:1d:e0:
97:a8:91:44:7f:14:f2:79:46:f0:2c:73:b6:f9:e3:12:4a:b6:
1e:11:36:2f:60:76:9e:c6:0e:4a:f9:f2:a8:ff:7b:3f:14:e1:
be:9a:3a:b8:6f:53:a7:43:8b:29:e9:3e:e4:94:a5:a1:92:4d:
b2:5f:e7:ed:71:c0:a4:77:dc:7e:90:fc:51:04:0b:d8:aa:70:
a4:f9:9b:87:cf:7a:68:45:09:fc:e1:d8:4a:ef:9f:f8:14:29:
ea:b0:c9:47:f7:63:8f:e7:9e:cc:2f:05:3b:3e:d6:d2:6a:aa:
83:e6:b2:09:f2:4d:24:93:a9:f1:6f:dc:e4:e4:42:28:57:fc:
12:5f:f3:8f:2e:a6:eb:be:5d:d5:f8:cd:3c:40:2d:36:21:cd:
35:94:02:13:f7:1b:09:9a:1c:a6:57:7f:09:0b:d9:98:2f:98:
f0:4f:64:d6:5d:df:be:e6:f2:fd:61:67:a7:8f:73:68:93:6d:
77:12:8c:76:26:38:df:90:30:d4:df:de:ea:3a:b6:22:55:45:
64:51:c9:74:71:c1:0a:dd:d8:db:1a:78:4f:bf:83:46:5e:b3:
75:28:33:0d:a3:2a:a1:c8:6b:0f:df:94:cb:d8:b8:f3:88:dd:
8f:ae:f7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyIGIo+yhhJg95cvxBHouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOWIwNWEzNWQ0MTA5YTFlNGE4MzRjY2FkYWNkZDJjNmY1
NmIwNWEwHhcNMjYwNzI0MTEwMDE4WhcNMjYwNzI1MTEwMDE4WjAzMTEwLwYDVQQD
EyhmNzdmNGQwZTA0NDZkZjUyMjk5ZjJmZDMwZGRiMDY3NTRkMjU2NGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqS5wOZdTAvY2V5yTmRQkgMHLM+Y
Qfw4oe+0Zm51SeoHJo55ITrrG3PeKH8r+HHcvuWDtBiwHXKZlwzRWwQxLmAotBnJ
+lQC4ScraxIRLvdme66+pd9XUWoaqn50/kxNL0zCjzPhImWiaEAR1M39mHmNL0tm
qPcTkEhxdClMdhOB4iZY+WAGUz5r97+uQbWCJaPBkCyErNLCTiBp24NpMOftS5+d
Yl0S89D6HjstZxwEznH54iXN763KhvDMEjeQfPkQrpPCdL8uPXec5EBgUq3q7SRo
59msAYx486YpQsf/DLS63TafdgZiBS4xtB7+w7cnaTR7BiBcFYd9VlYWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd/TQ4ERt9SKZ8v0w3bBnVNJWSiMB8GA1UdIwQY
MBaAFBCbBaNdQQmh5Kg0zK2s3SxvVrBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAt
NDQ5MTUyZjFkM2I3LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAtNDQ5MTUyZjFkM2I3
LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjNdiuRw
eSYGXKCYzIw1cR3gl6iRRH8U8nlG8CxztvnjEkq2HhE2L2B2nsYOSvnyqP97PxTh
vpo6uG9Tp0OLKek+5JSloZJNsl/n7XHApHfcfpD8UQQL2KpwpPmbh896aEUJ/OHY
Su+f+BQp6rDJR/djj+eezC8FOz7W0mqqg+ayCfJNJJOp8W/c5ORCKFf8El/zjy6m
675d1fjNPEAtNiHNNZQCE/cbCZocpld/CQvZmC+Y8E9k1l3fvuby/WFnp49zaJNt
dxKMdiY435Aw1N/e6jq2IlVFZFHJdHHBCt3Y2xp4T7+DRl6zdSgzDaMqochrD9+U
y9i484jdj673nQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:58 2026 by rpki-client