Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: bONO6awkkcKObJbalDrQQpiiCwOHHsEnwtgOFuedgdA=
Subject key identifier: 18:27:66:48:79:37:37:88:82:8D:86:50:0D:F6:87:9C:BA:12:30:B6
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019D2AE15273432612B18EDCA0C3D8403CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 124A
Signing time: Thu 26 Mar 2026 16:01:42 +0000
Manifest this update: Thu 26 Mar 2026 16:01:42 +0000
Manifest next update: Fri 27 Mar 2026 16:01:42 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: 7teCoCZvB7w6j07b+AlM0vpT05I7GTUrEJ67h1bOmd8=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:52:73:43:26:12:b1:8e:dc:a0:c3:d8:40:3c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Mar 26 16:01:42 2026 GMT
Not After : Mar 27 16:01:42 2026 GMT
Subject: CN=1827664879373788828d86500df6879cba1230b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:4d:27:33:1a:74:b4:67:38:6e:39:b5:4b:
54:e0:1d:a1:c5:9f:e6:d6:0a:21:b8:e0:17:2c:21:
65:63:f0:4a:c9:85:39:56:8c:f5:94:10:b6:42:a3:
fa:da:bb:c6:77:39:67:37:73:fd:a5:e8:21:39:9b:
c8:11:c5:18:73:09:31:8a:c1:45:1c:7e:43:67:b3:
b4:99:a0:ef:dd:97:6f:57:0f:ca:8f:ad:bf:8e:a2:
9b:dc:cd:31:8b:85:81:7b:02:75:82:ee:89:ca:97:
69:14:4b:58:4f:c8:be:24:9d:d1:ea:f2:49:34:80:
69:55:5e:d0:cc:ce:13:d8:5b:c2:48:fd:73:ac:44:
c2:4e:7b:ce:9b:1c:09:e1:59:41:e4:97:d3:09:7b:
f5:1a:4a:07:e5:e2:bb:a1:cc:f5:77:0a:aa:be:a3:
79:55:8e:b1:38:4a:29:98:34:49:7f:60:40:ce:d5:
54:3c:ef:ac:8b:d1:35:06:be:cc:cf:2a:4d:a0:14:
8e:30:cb:cf:db:fb:65:5e:52:50:1f:72:64:da:57:
51:18:bd:82:6d:26:b2:53:59:6e:9f:42:57:d3:a8:
0a:bf:cc:e4:27:11:ec:2d:41:fb:0f:dc:0c:2e:df:
4b:6f:97:bc:b4:11:91:51:ed:bd:f3:f7:9f:61:47:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:66:48:79:37:37:88:82:8D:86:50:0D:F6:87:9C:BA:12:30:B6
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:61:bd:1e:77:75:81:d3:a7:1d:b7:aa:f0:b7:46:a6:24:
8b:9d:0d:c2:09:d1:01:ae:41:17:a7:cf:ab:fa:16:44:bd:c6:
06:44:3d:c1:60:dc:20:13:04:65:36:44:af:54:81:ee:8c:49:
23:1d:77:b5:bc:1a:c5:c4:db:78:b8:05:a4:d0:11:c7:88:24:
7c:da:49:81:3d:c3:11:4a:c9:a2:8a:e1:03:a2:98:03:65:0e:
11:56:c2:9e:9a:d4:4a:c0:f1:b5:b5:f4:69:d4:af:2c:f1:1f:
96:b0:51:ea:a3:41:92:4e:4c:e6:fe:c8:65:76:5e:a1:4b:e5:
25:14:14:1f:44:48:bc:1f:ea:1e:39:17:5b:df:91:ca:6e:6c:
a4:ee:43:d6:ae:5f:93:50:7b:06:9e:4c:05:73:cd:80:4f:af:
3c:cb:e3:24:69:e5:2f:e8:4d:83:ac:de:94:76:3f:d5:69:3b:
04:a7:bc:df:da:36:7c:d8:f8:fe:63:7f:27:f4:4d:3f:d2:9c:
ef:00:fe:ba:c4:d9:26:f0:16:39:01:6a:ba:52:9e:1f:21:b9:
57:50:6f:2b:2b:9c:92:ee:2f:bd:e0:75:3f:87:f9:ac:ca:4d:
ef:5b:8f:d6:0d:90:69:2c:a3:99:0e:8d:6f:61:99:64:72:92:
02:5e:2d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4VJzQyYSsY7coMPYQDz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4
NThkOTMwHhcNMjYwMzI2MTYwMTQyWhcNMjYwMzI3MTYwMTQyWjAzMTEwLwYDVQQD
EygxODI3NjY0ODc5MzczNzg4ODI4ZDg2NTAwZGY2ODc5Y2JhMTIzMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT9NJzMadLRnOG45tUtU4B2hxZ/m
1gohuOAXLCFlY/BKyYU5Voz1lBC2QqP62rvGdzlnN3P9peghOZvIEcUYcwkxisFF
HH5DZ7O0maDv3ZdvVw/Kj62/jqKb3M0xi4WBewJ1gu6JypdpFEtYT8i+JJ3R6vJJ
NIBpVV7QzM4T2FvCSP1zrETCTnvOmxwJ4VlB5JfTCXv1GkoH5eK7ocz1dwqqvqN5
VY6xOEopmDRJf2BAztVUPO+si9E1Br7MzypNoBSOMMvP2/tlXlJQH3Jk2ldRGL2C
bSayU1lun0JX06gKv8zkJxHsLUH7D9wMLt9Lb5e8tBGRUe298/efYUeD/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgnZkh5NzeIgo2GUA32h5y6EjC2MB8GA1UdIwQY
MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt
ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx
LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2NhvR53
dYHTpx23qvC3RqYki50NwgnRAa5BF6fPq/oWRL3GBkQ9wWDcIBMEZTZEr1SB7oxJ
Ix13tbwaxcTbeLgFpNARx4gkfNpJgT3DEUrJoorhA6KYA2UOEVbCnprUSsDxtbX0
adSvLPEflrBR6qNBkk5M5v7IZXZeoUvlJRQUH0RIvB/qHjkXW9+Rym5spO5D1q5f
k1B7Bp5MBXPNgE+vPMvjJGnlL+hNg6zelHY/1Wk7BKe839o2fNj4/mN/J/RNP9Kc
7wD+usTZJvAWOQFqulKeHyG5V1BvKyucku4vveB1P4f5rMpN71uP1g2QaSyjmQ6N
b2GZZHKSAl4tqg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:14:46 2026 by rpki-client