Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: GigAqhz4WSudAYE70ZxkCYLT15xtwbD92K+zMp4LZJw=
Subject key identifier: 13:E7:0B:46:C4:8A:2C:11:56:52:A0:91:87:FC:D7:E4:01:0B:DA:9F
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019D299732CE9031857D89454970F553E00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 0864
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: Jd0O3+8enH5v1q0SViga2uuGhFjAupk3wf+fCHIQyLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:32:ce:90:31:85:7d:89:45:49:70:f5:53:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=13e70b46c48a2c115652a09187fcd7e4010bda9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:c3:bd:61:86:56:6a:c2:7c:c8:44:d1:69:
66:b9:03:74:32:b4:6f:72:b4:3e:89:42:95:22:00:
07:32:b9:95:1a:73:0c:89:2f:5f:04:51:49:a3:32:
bd:4c:c6:56:07:0d:69:f7:be:65:33:2d:22:3d:4d:
11:56:e2:db:a4:5d:00:c7:c3:80:d6:b6:43:f5:f6:
99:07:3a:8c:08:88:0e:79:ac:04:94:ef:6e:c7:11:
8e:21:b3:62:b4:4b:03:f4:56:7b:47:30:f5:ea:31:
91:a5:0b:0b:05:79:6d:9c:7f:3f:3f:d5:cb:0b:47:
7a:90:ff:8a:6f:89:c0:59:85:0d:fa:fb:26:61:01:
f1:b5:8e:89:6b:32:2b:87:eb:f5:1b:ad:7e:61:ac:
bf:be:18:90:33:88:af:30:81:35:e9:0c:f1:13:3c:
8d:04:9c:9d:43:80:87:99:d8:7f:55:ba:03:ed:56:
eb:cf:fa:07:30:a0:f8:a9:b9:b7:7a:7d:9b:bd:93:
0b:5e:be:5e:b2:12:90:61:d4:ff:3e:94:cc:6a:11:
fc:19:d6:d7:b3:cc:de:15:9d:b1:bd:09:9f:fb:70:
d5:68:86:3c:32:95:03:4e:b1:65:45:b9:5a:24:ef:
30:8a:ec:d2:0d:1c:fc:ee:45:ae:88:c2:41:a2:a1:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:0B:46:C4:8A:2C:11:56:52:A0:91:87:FC:D7:E4:01:0B:DA:9F
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ca:42:ac:f5:b3:22:50:59:42:a1:46:4f:a3:94:57:fe:11:
ef:a6:e6:73:50:30:31:67:df:47:0a:12:a2:cf:86:4d:76:d9:
9d:a0:44:93:f3:31:35:a3:cb:06:cd:fd:1f:dc:ab:1c:67:b4:
c5:07:8c:be:c8:7a:16:26:02:08:03:5b:3f:83:c5:a9:cd:f6:
6b:d2:5a:46:12:bf:f6:88:ea:ba:f9:df:3a:cd:d3:28:18:82:
93:2f:a3:11:45:ce:66:cc:93:d2:14:c7:6f:96:ff:34:a2:35:
44:fa:fc:3f:3e:03:d2:4c:93:2e:ff:d2:6c:22:2f:5d:4f:64:
f0:72:c2:c6:b5:fb:c2:b2:c5:d4:42:63:4c:c1:31:2e:dc:bb:
4d:a2:27:c7:a1:54:51:c2:6a:97:6b:a8:75:25:ea:a5:22:83:
da:3c:4c:bc:bd:32:c6:74:cd:e1:da:69:c6:6d:85:09:dc:80:
3e:40:2a:f7:a2:09:bb:74:a7:8f:28:84:f3:88:c1:4a:d7:df:
01:09:55:d9:15:89:d2:04:70:89:10:bc:28:49:06:b4:0f:fe:
44:3a:9d:4a:8d:33:eb:f9:7b:fe:5a:d7:15:f0:d8:32:ad:77:
2e:1b:a1:52:0b:fc:44:72:46:8e:00:88:35:b4:7e:1d:de:5b:
6b:6c:26:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plzLOkDGFfYlFSXD1U+ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjYwMzI2MTAwMTA3WhcNMjYwMzI3MTAwMTA3WjAzMTEwLwYDVQQD
EygxM2U3MGI0NmM0OGEyYzExNTY1MmEwOTE4N2ZjZDdlNDAxMGJkYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kPDvWGGVmrCfMhE0WlmuQN0MrRv
crQ+iUKVIgAHMrmVGnMMiS9fBFFJozK9TMZWBw1p975lMy0iPU0RVuLbpF0Ax8OA
1rZD9faZBzqMCIgOeawElO9uxxGOIbNitEsD9FZ7RzD16jGRpQsLBXltnH8/P9XL
C0d6kP+Kb4nAWYUN+vsmYQHxtY6JazIrh+v1G61+Yay/vhiQM4ivMIE16QzxEzyN
BJydQ4CHmdh/VboD7Vbrz/oHMKD4qbm3en2bvZMLXr5eshKQYdT/PpTMahH8GdbX
s8zeFZ2xvQmf+3DVaIY8MpUDTrFlRblaJO8wiuzSDRz87kWuiMJBoqFNZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPnC0bEiiwRVlKgkYf81+QBC9qfMB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAespCrPWz
IlBZQqFGT6OUV/4R76bmc1AwMWffRwoSos+GTXbZnaBEk/MxNaPLBs39H9yrHGe0
xQeMvsh6FiYCCANbP4PFqc32a9JaRhK/9ojquvnfOs3TKBiCky+jEUXOZsyT0hTH
b5b/NKI1RPr8Pz4D0kyTLv/SbCIvXU9k8HLCxrX7wrLF1EJjTMExLty7TaInx6FU
UcJql2uodSXqpSKD2jxMvL0yxnTN4dppxm2FCdyAPkAq96IJu3SnjyiE84jBStff
AQlV2RWJ0gRwiRC8KEkGtA/+RDqdSo0z6/l7/lrXFfDYMq13LhuhUgv8RHJGjgCI
NbR+Hd5ba2wmeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:15 2026 by rpki-client