Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: uhw9YHcHg0t17KulWGeNI8kuCQ+wjc0KKP7NH3WAeks=
Subject key identifier: BA:24:61:C5:AE:F3:D7:D5:A4:9D:5E:3E:B3:AC:2D:4E:38:40:C4:31
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 01A0DCBBC5C759BDEF394F25F2D7AF994CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 038C
Signing time: Sat 26 Sep 2026 08:01:28 +0000
Manifest this update: Sat 26 Sep 2026 08:01:28 +0000
Manifest next update: Sun 27 Sep 2026 08:01:28 +0000
Files and hashes: 1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: PM2n7lKjeW4cuZH+JF4McVITgNN1WWebHnwXpVACpzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:c5:c7:59:bd:ef:39:4f:25:f2:d7:af:99:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Sep 26 08:01:28 2026 GMT
Not After : Sep 27 08:01:28 2026 GMT
Subject: CN=ba2461c5aef3d7d5a49d5e3eb3ac2d4e3840c431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:2d:13:db:1c:dc:5a:b3:b1:9f:05:2c:8f:
ae:d3:87:c5:e6:cf:90:81:c9:7d:79:5a:06:85:ea:
ab:f7:d9:85:78:5e:6a:3a:dd:55:8c:cb:83:28:37:
96:26:e6:28:5b:16:7f:db:82:9d:5d:57:64:04:7a:
ac:ae:cc:03:61:68:e2:ec:27:55:de:18:ad:35:3f:
b8:2f:a5:d7:6a:3f:92:6d:eb:4f:0d:e3:a2:42:76:
10:b2:b8:b6:fd:28:e2:4e:3c:4c:46:96:9a:06:89:
74:d4:96:ae:34:62:b3:de:a3:01:bf:25:b5:25:a3:
95:0c:aa:0a:8b:07:44:18:48:90:45:32:1a:74:fa:
f2:51:29:02:39:66:9c:bd:e5:44:9a:03:57:65:8c:
12:e6:33:4d:0e:4f:42:48:39:42:60:d6:4b:ec:6f:
42:3f:1a:bc:36:8a:94:cf:65:1f:8b:c3:9a:7e:d6:
0f:f9:94:ee:bb:c5:1e:dc:4c:2f:a2:be:e8:63:95:
6d:b8:16:fd:6c:d4:6c:71:2d:6f:e7:ac:88:52:9d:
a7:3a:33:8c:bd:d2:54:29:cb:e4:7d:cf:dd:09:6d:
b9:43:1c:df:8c:70:fe:f4:17:7c:50:6e:4c:bd:dd:
42:68:77:81:17:11:c3:02:48:dc:b6:9b:03:72:e7:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:61:C5:AE:F3:D7:D5:A4:9D:5E:3E:B3:AC:2D:4E:38:40:C4:31
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:8e:d7:cc:fd:64:c4:96:dd:07:96:42:4c:4e:b1:12:99:
f0:25:07:91:4f:5a:bf:a2:f1:a7:de:ba:0c:01:ca:fe:9a:6d:
e3:1c:d5:e0:b3:8b:84:f3:3c:cc:88:ad:9d:d7:f2:45:9a:db:
cb:f3:4b:0d:22:19:04:6b:7f:da:b7:a8:dd:a3:f6:d4:bc:ed:
7d:87:2f:f8:8e:b0:1c:55:1c:a0:63:f3:10:96:ef:54:69:e2:
80:36:e2:5d:7f:4f:e4:a7:29:20:95:44:87:31:9f:fe:9d:8c:
b3:6b:8d:eb:4f:5c:af:c4:70:8b:ce:e2:64:4f:3e:37:55:2f:
7e:d2:10:7d:fe:3c:85:8a:2e:1e:34:bd:5c:1d:f3:f1:09:31:
6c:ef:f1:9d:99:58:c5:99:f2:6d:44:d3:29:fd:5c:df:72:5f:
dc:9f:21:61:76:ab:c9:39:53:ce:e8:0b:5e:f9:20:66:b9:7f:
42:86:ce:73:3f:52:b6:88:6b:6a:f7:5e:3c:2e:8f:b4:5f:1b:
c3:ac:ba:b5:97:4f:22:9c:a5:62:38:d5:f3:ee:28:fa:c8:95:
57:42:60:44:24:78:52:dc:05:a0:8f:38:a9:39:57:50:81:f6:
7b:74:94:5f:00:01:3d:a5:ed:2d:6f:5a:47:bf:3b:73:91:57:
0f:27:9e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu8XHWb3vOU8l8tevmUylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm
N2U4NjEwHhcNMjYwOTI2MDgwMTI4WhcNMjYwOTI3MDgwMTI4WjAzMTEwLwYDVQQD
EyhiYTI0NjFjNWFlZjNkN2Q1YTQ5ZDVlM2ViM2FjMmQ0ZTM4NDBjNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ctE9sc3FqzsZ8FLI+u04fF5s+Q
gcl9eVoGheqr99mFeF5qOt1VjMuDKDeWJuYoWxZ/24KdXVdkBHqsrswDYWji7CdV
3hitNT+4L6XXaj+SbetPDeOiQnYQsri2/SjiTjxMRpaaBol01JauNGKz3qMBvyW1
JaOVDKoKiwdEGEiQRTIadPryUSkCOWacveVEmgNXZYwS5jNNDk9CSDlCYNZL7G9C
Pxq8NoqUz2Ufi8OaftYP+ZTuu8Ue3Ewvor7oY5VtuBb9bNRscS1v56yIUp2nOjOM
vdJUKcvkfc/dCW25QxzfjHD+9Bd8UG5Mvd1CaHeBFxHDAkjctpsDcufF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLokYcWu89fVpJ1ePrOsLU44QMQxMB8GA1UdIwQY
MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt
ZjE2YjA3ZjQzMDZmLzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm
LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUaO18z9
ZMSW3QeWQkxOsRKZ8CUHkU9av6Lxp966DAHK/ppt4xzV4LOLhPM8zIitndfyRZrb
y/NLDSIZBGt/2reo3aP21LztfYcv+I6wHFUcoGPzEJbvVGnigDbiXX9P5KcpIJVE
hzGf/p2Ms2uN609cr8Rwi87iZE8+N1UvftIQff48hYouHjS9XB3z8QkxbO/xnZlY
xZnybUTTKf1c33Jf3J8hYXaryTlTzugLXvkgZrl/QobOcz9StohravdePC6PtF8b
w6y6tZdPIpylYjjV8+4o+siVV0JgRCR4UtwFoI84qTlXUIH2e3SUXwABPaXtLW9a
R787c5FXDyee+A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:58:44 2026 by rpki-client