Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: dJ2aT4PjwQGpzrsM7stvQBib3sp7TSvPCTXjU4kEx9k=
Subject key identifier: 17:11:E1:87:36:D5:5E:EC:65:D7:D4:A4:A2:B1:EE:C1:11:B5:0C:52
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019F94DB3A2A56D1F1454ECEE3208A08B713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 138A
Signing time: Fri 24 Jul 2026 16:00:22 +0000
Manifest this update: Fri 24 Jul 2026 16:00:22 +0000
Manifest next update: Sat 25 Jul 2026 16:00:22 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: xhxsc+8fNfxDNUEF5mR8Eh4Z+9ww7GzJGdZ3w25sROM=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:3a:2a:56:d1:f1:45:4e:ce:e3:20:8a:08:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jul 24 16:00:22 2026 GMT
Not After : Jul 25 16:00:22 2026 GMT
Subject: CN=1711e18736d55eec65d7d4a4a2b1eec111b50c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:b6:f1:b9:4e:27:95:26:f1:6c:99:03:8f:
e9:b6:7c:0b:66:af:22:ba:af:64:be:20:a0:55:0d:
c9:88:84:19:8c:52:fd:4c:07:f7:fb:9b:d4:9e:9f:
f2:5d:04:c8:43:db:ce:ed:97:e0:07:e4:70:6b:c9:
c3:75:70:e5:41:dc:d4:a6:42:c6:09:d6:86:c1:93:
e2:ad:69:8a:43:5d:10:be:15:13:60:0f:a3:d8:2e:
cb:ce:2f:d3:64:c7:70:e7:5f:a8:e5:42:af:2a:7a:
cd:59:88:8d:c0:f9:64:b3:58:e1:b5:66:83:53:e4:
c8:21:18:6d:93:f2:b6:f3:12:79:70:c2:ba:a7:f8:
1d:23:1b:f5:09:76:6f:62:de:ab:9c:5a:75:a9:59:
65:be:02:0d:c9:2a:ff:84:5f:95:22:7e:5b:a8:54:
d3:1a:f6:2a:89:ef:ae:70:71:87:56:00:32:2b:28:
35:72:89:a9:16:59:3f:52:f0:a8:01:bd:87:76:f6:
c0:84:51:1b:6b:85:2d:40:1c:4c:a9:cc:a5:c6:74:
34:d4:bf:76:ed:47:cb:51:96:45:e7:9e:04:d8:a4:
26:d2:87:f7:ee:ad:0f:f2:6e:46:a4:d9:34:0b:2a:
04:8b:0c:e1:05:ea:c9:e1:9c:42:af:6c:13:c1:62:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:E1:87:36:D5:5E:EC:65:D7:D4:A4:A2:B1:EE:C1:11:B5:0C:52
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:fe:a1:2f:75:60:2a:17:a4:24:b9:2d:13:c9:35:f8:3f:
76:ad:d8:8a:65:98:33:59:89:a1:4d:70:dd:8e:6f:dd:60:c1:
1d:90:f4:64:4a:f4:2d:85:a6:30:60:66:81:62:77:0b:9b:f8:
59:56:a0:15:c0:e7:1d:28:d6:3a:f3:4b:2f:4b:82:b3:ca:cf:
23:5e:42:88:99:65:2d:32:38:e0:c1:d6:a0:ec:eb:bf:1e:60:
ce:4b:ce:5c:80:d0:75:ff:2c:1e:07:10:34:06:d2:e9:ff:ac:
3d:61:be:f3:1c:70:11:81:14:74:0a:40:0b:a9:c3:16:7d:66:
e8:1f:80:8f:63:5c:9a:4d:cc:0f:1e:f4:2b:2c:f6:61:e5:a6:
d0:5b:29:ab:a2:d5:91:2f:6b:6b:c6:45:e0:42:e0:98:19:1e:
96:75:a0:19:cd:bb:90:6a:be:fb:67:4d:85:7b:de:6d:73:56:
8e:74:1f:70:2a:91:2f:ce:48:b7:ed:a9:3b:eb:ef:05:e0:cd:
5d:1e:5d:50:d0:a2:7d:f3:ff:d6:13:0c:ec:40:99:39:29:53:
ce:af:1a:6b:70:b5:a1:b4:a5:bd:db:ae:d1:be:9e:a7:67:3d:
95:67:df:61:ac:ad:df:15:94:df:ec:b2:96:ad:75:82:e2:1a:
c5:d7:24:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U2zoqVtHxRU7O4yCKCLcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4
NThkOTMwHhcNMjYwNzI0MTYwMDIyWhcNMjYwNzI1MTYwMDIyWjAzMTEwLwYDVQQD
EygxNzExZTE4NzM2ZDU1ZWVjNjVkN2Q0YTRhMmIxZWVjMTExYjUwYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CO28blOJ5Um8WyZA4/ptnwLZq8i
uq9kviCgVQ3JiIQZjFL9TAf3+5vUnp/yXQTIQ9vO7ZfgB+Rwa8nDdXDlQdzUpkLG
CdaGwZPirWmKQ10QvhUTYA+j2C7Lzi/TZMdw51+o5UKvKnrNWYiNwPlks1jhtWaD
U+TIIRhtk/K28xJ5cMK6p/gdIxv1CXZvYt6rnFp1qVllvgINySr/hF+VIn5bqFTT
GvYqie+ucHGHVgAyKyg1compFlk/UvCoAb2HdvbAhFEba4UtQBxMqcylxnQ01L92
7UfLUZZF554E2KQm0of37q0P8m5GpNk0CyoEiwzhBerJ4ZxCr2wTwWJ0dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcR4Yc21V7sZdfUpKKx7sERtQxSMB8GA1UdIwQY
MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt
ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx
LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJn+oS91
YCoXpCS5LRPJNfg/dq3YimWYM1mJoU1w3Y5v3WDBHZD0ZEr0LYWmMGBmgWJ3C5v4
WVagFcDnHSjWOvNLL0uCs8rPI15CiJllLTI44MHWoOzrvx5gzkvOXIDQdf8sHgcQ
NAbS6f+sPWG+8xxwEYEUdApAC6nDFn1m6B+Aj2Ncmk3MDx70Kyz2YeWm0Fspq6LV
kS9ra8ZF4ELgmBkelnWgGc27kGq++2dNhXvebXNWjnQfcCqRL85It+2pO+vvBeDN
XR5dUNCiffP/1hMM7ECZOSlTzq8aa3C1obSlvduu0b6ep2c9lWffYayt3xWU3+yy
lq11guIaxdckTw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:06 2026 by rpki-client