Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: YRDw54ZAtsuTOOr7nuw3sJs9xSjFxcpn8KVr7CkR+mo=
Subject key identifier: 89:03:7D:E4:65:39:59:03:33:5F:5D:63:C2:0D:9D:84:20:65:88:00
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 01A10EF0AE977C4DFD515374B5BC7F30A222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1A7A
Signing time: Tue 06 Oct 2026 02:00:16 +0000
Manifest this update: Tue 06 Oct 2026 02:00:16 +0000
Manifest next update: Wed 07 Oct 2026 02:00:16 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: A9LwXa+tmW8w/8R10MWcSw9DeeAbUZ9iYcrAgj4Uczg=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:f0:ae:97:7c:4d:fd:51:53:74:b5:bc:7f:30:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Oct 6 02:00:16 2026 GMT
Not After : Oct 7 02:00:16 2026 GMT
Subject: CN=89037de465395903335f5d63c20d9d8420658800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:47:60:f6:0b:a5:3f:43:c7:84:c9:8d:2c:
84:58:c3:17:86:b9:31:5e:20:1a:e6:d4:45:f4:e6:
3d:74:b4:fe:2c:79:d2:92:49:e8:fb:fe:7d:60:d7:
43:45:51:21:45:4b:f9:9c:78:31:58:2f:2f:24:e8:
4c:a9:6c:1c:7e:ff:9a:5a:9c:ba:b4:14:5f:08:72:
5c:4d:53:38:af:65:dc:de:e9:d5:3d:98:02:21:8c:
df:71:e2:9c:c9:39:05:b3:a9:07:69:12:6b:ab:32:
a7:05:22:7e:dd:71:2d:f4:db:4a:d8:90:a8:86:d3:
5d:5f:24:a5:24:6a:18:7f:7f:5c:c8:43:47:01:08:
9b:37:e6:ce:a9:b5:99:15:07:d7:4e:58:a6:e9:9f:
e2:2e:4b:16:3e:1c:2e:7d:6b:45:7f:9a:aa:3d:9a:
35:09:b7:32:33:94:20:75:9f:46:88:39:37:d0:fb:
65:6d:db:c2:0d:ac:30:43:6c:3b:59:c0:41:13:2f:
ff:3e:1b:c0:d9:af:e4:4e:24:7a:64:6a:14:d9:44:
5d:d7:47:2f:59:df:d0:38:74:fb:d1:af:3b:69:49:
a4:1d:ea:a6:b7:b3:08:4a:74:9f:18:3c:35:f6:a9:
b3:89:2e:17:b1:8c:c7:fa:9d:a5:76:c3:8d:89:a7:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:7D:E4:65:39:59:03:33:5F:5D:63:C2:0D:9D:84:20:65:88:00
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:23:30:a8:3c:12:31:8f:f3:73:c3:ed:a8:a6:f4:ca:02:
16:2c:ab:b2:b1:4b:f6:f0:b7:46:01:eb:39:e0:60:60:34:0b:
c4:7c:bc:9e:1e:87:53:27:e5:10:e7:9e:08:26:e1:40:da:4d:
47:10:b7:17:86:35:50:b1:eb:ad:b9:99:2e:45:83:3c:25:b3:
90:ae:9a:fc:fe:6e:2e:20:51:11:15:4d:a4:af:e1:6a:d5:38:
b0:c8:c8:67:72:80:32:2b:46:4f:c8:98:a1:6f:ba:6d:fa:1f:
32:63:8a:62:df:b7:2f:10:cb:a9:a4:fb:20:18:24:06:8c:1a:
e5:2f:c4:ed:98:ca:88:51:7e:61:77:b4:ff:88:24:24:b8:64:
5a:7b:2d:97:76:e2:39:8a:b3:4b:0a:48:fc:7b:58:6b:69:3f:
f0:3d:df:ca:1e:13:11:dc:8e:64:b0:8b:47:72:f8:b5:77:f4:
8a:7d:ec:50:34:0d:7c:dd:7a:a8:48:ce:7e:a7:3b:b3:56:6f:
f9:e1:84:a8:03:4b:21:db:06:dd:b5:79:8f:33:5d:ee:5a:05:
fb:68:b1:0f:b6:7e:06:e1:24:dc:1c:db:49:f7:bc:13:1d:98:
7d:9a:09:31:1c:af:73:3b:0b:20:20:f1:e8:7a:2d:85:8b:a8:
e8:a6:68:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEO8K6XfE39UVN0tbx/MKIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YWQwNzRhZmFjZTkxYWMzZmRkMGEzZWJkNjBmYWRiYzE2
ZGU0ZmMwHhcNMjYxMDA2MDIwMDE2WhcNMjYxMDA3MDIwMDE2WjAzMTEwLwYDVQQD
Eyg4OTAzN2RlNDY1Mzk1OTAzMzM1ZjVkNjNjMjBkOWQ4NDIwNjU4ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNRHYPYLpT9Dx4TJjSyEWMMXhrkx
XiAa5tRF9OY9dLT+LHnSkkno+/59YNdDRVEhRUv5nHgxWC8vJOhMqWwcfv+aWpy6
tBRfCHJcTVM4r2Xc3unVPZgCIYzfceKcyTkFs6kHaRJrqzKnBSJ+3XEt9NtK2JCo
htNdXySlJGoYf39cyENHAQibN+bOqbWZFQfXTlim6Z/iLksWPhwufWtFf5qqPZo1
CbcyM5QgdZ9GiDk30PtlbdvCDawwQ2w7WcBBEy//PhvA2a/kTiR6ZGoU2URd10cv
Wd/QOHT70a87aUmkHeqmt7MISnSfGDw19qmziS4XsYzH+p2ldsONiaeoAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkDfeRlOVkDM19dY8INnYQgZYgAMB8GA1UdIwQY
MBaAFHmtB0r6zpGsP90KPr1g+tvBbeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEt
MGEyZTkzMzZkNmQwLzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEtMGEyZTkzMzZkNmQw
LzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe60jMKg8
EjGP83PD7aim9MoCFiyrsrFL9vC3RgHrOeBgYDQLxHy8nh6HUyflEOeeCCbhQNpN
RxC3F4Y1ULHrrbmZLkWDPCWzkK6a/P5uLiBRERVNpK/hatU4sMjIZ3KAMitGT8iY
oW+6bfofMmOKYt+3LxDLqaT7IBgkBowa5S/E7ZjKiFF+YXe0/4gkJLhkWnstl3bi
OYqzSwpI/HtYa2k/8D3fyh4TEdyOZLCLR3L4tXf0in3sUDQNfN16qEjOfqc7s1Zv
+eGEqANLIdsG3bV5jzNd7loF+2ixD7Z+BuEk3BzbSfe8Ex2YfZoJMRyvczsLICDx
6HothYuo6KZoHg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:21:08 2026 by rpki-client