Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: 5wSnjyOUvmtM1b1Hz9MqYZbr463zaQYViU/d06IMKPE=
Subject key identifier: A8:03:B4:86:FC:7B:26:D5:EF:A2:E2:55:0C:F5:35:8D:D2:84:2A:51
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019D29298A2C6751EEFE6742FD55E0D93F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0DBB
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: 2cHioHlgVCCi+uAhNr2NiDGxo5PQT++bLbgpfuxtcN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8a:2c:67:51:ee:fe:67:42:fd:55:e0:d9:3f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=a803b486fc7b26d5efa2e2550cf5358dd2842a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:1a:b7:b5:87:6c:8c:6f:f7:85:ad:46:86:
4a:ce:3d:1c:1f:07:51:0b:2f:b0:41:23:f9:7b:44:
3c:40:b3:d1:a0:65:e8:a2:4a:6a:bf:bd:17:ec:22:
b2:61:9e:e6:a8:fa:88:81:aa:aa:f1:48:3d:6c:94:
45:e9:ff:20:02:2c:9a:53:99:e3:72:e7:15:c2:fe:
4b:a9:06:68:37:7f:da:18:54:a6:af:aa:7b:16:f0:
ba:68:9e:9d:a1:11:f7:23:45:cb:82:88:2b:48:45:
4a:93:91:02:cc:d0:2b:1d:88:af:d0:36:d6:ab:2f:
34:4d:14:04:63:45:e9:bb:d5:b1:13:17:cc:ac:03:
9d:65:7c:c3:fa:05:a0:59:75:16:e4:28:74:c0:a2:
f3:73:bb:f4:e4:0c:da:4a:66:08:3c:b4:a8:37:1c:
0b:90:8b:d1:81:5d:16:5e:3a:ec:74:97:ea:ea:89:
a5:b3:a9:d6:54:b2:bb:db:25:89:41:32:b2:cc:5a:
0f:76:ef:36:66:ae:52:bb:49:4b:e8:37:e9:ea:21:
17:09:0b:8e:d6:c2:ef:89:4a:10:61:c8:a2:e0:6f:
8c:ab:7b:81:40:19:ad:a6:85:e9:61:a0:bb:23:6b:
d2:80:ca:b2:86:a9:6c:ea:f1:ab:43:33:3b:6b:f1:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:B4:86:FC:7B:26:D5:EF:A2:E2:55:0C:F5:35:8D:D2:84:2A:51
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:19:87:9c:6d:6e:54:22:73:67:ec:d5:da:f0:37:a7:32:51:
f4:74:c9:a1:c1:fb:de:4c:d8:fd:23:68:d8:d3:fc:8c:fa:9e:
ee:13:10:04:d2:23:7b:3f:cc:16:bd:ef:7c:e6:f3:54:1e:05:
f6:69:3c:fe:f7:f2:1f:ba:72:3e:f4:3d:ea:23:68:a1:9a:a4:
c5:4b:69:44:a8:5f:18:7b:d3:f5:f0:39:f6:79:2b:99:57:05:
53:e3:15:77:4c:5d:d2:11:9a:1a:0f:f3:30:9f:3a:5a:b6:bf:
58:7d:9d:2b:c3:81:78:d0:f4:f5:05:22:b6:dc:92:cf:ae:b0:
9c:97:73:2d:a2:b7:2e:59:7f:f6:e1:ef:21:67:a0:93:3e:48:
ba:12:70:40:78:37:43:c4:10:2e:87:80:0e:98:72:bb:d4:fe:
cc:d7:69:68:87:8e:09:ef:5e:14:0f:67:24:50:0d:2d:18:73:
3e:64:cf:c5:2f:87:02:2c:76:26:bb:66:b5:52:1c:d7:fe:bb:
cb:e2:ea:7a:bb:74:84:cb:98:7c:75:b4:09:03:ac:f2:af:f4:
f7:e7:70:a2:d8:66:c8:db:d2:e2:87:a2:d6:57:94:1e:56:be:
81:60:0f:b8:f1:ba:95:7c:83:a2:00:dd:e6:16:e0:6f:ce:bc:
23:af:c6:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKYosZ1Hu/mdC/VXg2T9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk
MDVjNTQwHhcNMjYwMzI2MDgwMTIxWhcNMjYwMzI3MDgwMTIxWjAzMTEwLwYDVQQD
EyhhODAzYjQ4NmZjN2IyNmQ1ZWZhMmUyNTUwY2Y1MzU4ZGQyODQyYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+oat7WHbIxv94WtRoZKzj0cHwdR
Cy+wQSP5e0Q8QLPRoGXookpqv70X7CKyYZ7mqPqIgaqq8Ug9bJRF6f8gAiyaU5nj
cucVwv5LqQZoN3/aGFSmr6p7FvC6aJ6doRH3I0XLgogrSEVKk5ECzNArHYiv0DbW
qy80TRQEY0Xpu9WxExfMrAOdZXzD+gWgWXUW5Ch0wKLzc7v05AzaSmYIPLSoNxwL
kIvRgV0WXjrsdJfq6omls6nWVLK72yWJQTKyzFoPdu82Zq5Su0lL6Dfp6iEXCQuO
1sLviUoQYcii4G+Mq3uBQBmtpoXpYaC7I2vSgMqyhqls6vGrQzM7a/GO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgDtIb8eybV76LiVQz1NY3ShCpRMB8GA1UdIwQY
MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct
Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0
LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxmHnG1u
VCJzZ+zV2vA3pzJR9HTJocH73kzY/SNo2NP8jPqe7hMQBNIjez/MFr3vfObzVB4F
9mk8/vfyH7pyPvQ96iNooZqkxUtpRKhfGHvT9fA59nkrmVcFU+MVd0xd0hGaGg/z
MJ86Wra/WH2dK8OBeND09QUittySz66wnJdzLaK3Lll/9uHvIWegkz5IuhJwQHg3
Q8QQLoeADphyu9T+zNdpaIeOCe9eFA9nJFANLRhzPmTPxS+HAix2JrtmtVIc1/67
y+Lqert0hMuYfHW0CQOs8q/09+dwothmyNvS4oei1leUHla+gWAPuPG6lXyDogDd
5hbgb868I6/G3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:02 2026 by rpki-client