Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: 3E3xTYV0Dq3epPi9UJlaTTJHk1uDXmTeqSIb8i3zkBU=
Subject key identifier: 24:07:FC:60:FB:85:6F:A8:40:E2:D7:03:EB:35:D6:F4:EF:9B:89:36
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019D9A3E09F29DCBBB51067A545812FE924A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0E80
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: zoJkOU19sBLRbMR0yzet8Ygnd/ATwAaiWenEL9dGmFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:09:f2:9d:cb:bb:51:06:7a:54:58:12:fe:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=2407fc60fb856fa840e2d703eb35d6f4ef9b8936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:e6:3a:8b:f3:ff:20:39:47:db:97:f5:bb:
b1:fb:c2:86:ae:65:0a:d2:ab:ba:8c:a1:82:74:ce:
ad:31:d3:44:6d:c7:34:da:37:c7:b9:3f:90:d2:cf:
a8:57:b6:dd:8c:0a:ef:a7:2f:40:aa:f9:3d:f4:b8:
17:52:71:6d:ce:56:33:69:d9:7a:33:a1:ed:66:f4:
d0:8d:e0:73:6f:fb:ec:54:57:3b:2f:31:73:ac:e5:
35:1b:0c:73:d3:aa:c4:90:fa:e1:d2:07:11:44:a9:
64:9b:6d:c2:f4:1b:e9:40:2c:64:d1:8f:09:7d:2d:
b3:51:8c:7e:9e:f6:76:32:2a:6d:6c:f1:7c:15:0b:
dd:ad:da:55:70:72:98:2c:45:05:a2:3b:59:fa:8c:
3f:d8:34:e3:7f:c8:11:85:6e:64:aa:3e:0e:9b:3f:
3d:b7:37:70:b8:ed:48:62:1b:a1:32:47:37:cb:16:
1b:a5:ad:d6:05:29:ef:93:f3:8f:6a:31:15:e3:bb:
05:89:70:62:f9:a3:e3:e7:42:72:d5:ba:4a:8d:d8:
81:c2:c8:32:4f:c8:98:3d:e7:aa:65:9f:38:a8:42:
11:00:e7:ae:eb:53:c9:a3:e4:a4:c9:4c:23:2d:02:
04:2b:a3:28:f0:d4:25:41:1e:87:87:f9:6c:d2:47:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:FC:60:FB:85:6F:A8:40:E2:D7:03:EB:35:D6:F4:EF:9B:89:36
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:0d:21:92:83:e2:36:07:e2:4c:f1:a3:86:9c:c9:a1:73:
c6:38:33:f4:24:35:fe:06:a7:b1:1c:9c:7a:18:9f:1d:01:88:
b0:58:69:20:21:5d:40:d4:00:56:4b:95:33:dc:1f:0c:70:7b:
eb:5f:2b:28:9d:4d:ad:fd:25:f3:e3:18:be:d5:fb:f3:8b:65:
d1:6f:60:8b:cd:a6:b5:7c:7b:8f:41:f5:6b:5f:f7:ba:00:6d:
cd:4c:25:88:d7:9a:10:58:aa:68:b7:ed:8f:73:ca:5b:73:ac:
e3:c3:f7:5b:7c:c3:40:8a:80:0c:77:a4:2e:59:11:81:ae:43:
4d:db:d7:e0:ba:6d:85:e0:c0:18:70:9a:13:b0:aa:ae:78:b4:
0c:9e:dd:32:cf:ba:61:df:32:ef:6d:7d:d3:d4:a0:b2:27:7b:
62:cb:ea:a6:b5:12:1c:8b:0f:7c:2c:f6:7b:fe:7c:19:42:b6:
4f:83:2d:ea:d8:99:af:28:0b:25:72:32:2b:38:95:92:d7:37:
1e:e6:99:1c:1f:68:ed:e9:98:32:e9:90:4f:1f:94:8a:5a:76:
8e:ba:01:c3:73:26:64:e8:52:99:90:fb:cb:f8:e0:a7:e1:ad:
9e:b5:c4:4d:d4:fb:7e:07:87:19:d8:10:12:8d:47:1c:42:1d:
3b:01:67:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgnyncu7UQZ6VFgS/pJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGM0ZjVmNDRhNjYwNmE3NjE3YTk2Y2VjMTg0OTAwYWNh
NmY4MGUwHhcNMjYwNDE3MDcwMDUwWhcNMjYwNDE4MDcwMDUwWjAzMTEwLwYDVQQD
EygyNDA3ZmM2MGZiODU2ZmE4NDBlMmQ3MDNlYjM1ZDZmNGVmOWI4OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT7mOovz/yA5R9uX9bux+8KGrmUK
0qu6jKGCdM6tMdNEbcc02jfHuT+Q0s+oV7bdjArvpy9Aqvk99LgXUnFtzlYzadl6
M6HtZvTQjeBzb/vsVFc7LzFzrOU1Gwxz06rEkPrh0gcRRKlkm23C9BvpQCxk0Y8J
fS2zUYx+nvZ2MiptbPF8FQvdrdpVcHKYLEUFojtZ+ow/2DTjf8gRhW5kqj4Omz89
tzdwuO1IYhuhMkc3yxYbpa3WBSnvk/OPajEV47sFiXBi+aPj50Jy1bpKjdiBwsgy
T8iYPeeqZZ84qEIRAOeu61PJo+SkyUwjLQIEK6Mo8NQlQR6Hh/ls0keajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQH/GD7hW+oQOLXA+s11vTvm4k2MB8GA1UdIwQY
MBaAFHiMT19EpmBqdhepbOwYSQCspvgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUt
YzY2ZTA4NzhkZDI3LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUtYzY2ZTA4NzhkZDI3
LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK8NIZKD
4jYH4kzxo4acyaFzxjgz9CQ1/gansRycehifHQGIsFhpICFdQNQAVkuVM9wfDHB7
618rKJ1Nrf0l8+MYvtX784tl0W9gi82mtXx7j0H1a1/3ugBtzUwliNeaEFiqaLft
j3PKW3Os48P3W3zDQIqADHekLlkRga5DTdvX4LptheDAGHCaE7Cqrni0DJ7dMs+6
Yd8y721909Sgsid7YsvqprUSHIsPfCz2e/58GUK2T4Mt6tiZrygLJXIyKziVktc3
HuaZHB9o7emYMumQTx+Uilp2jroBw3MmZOhSmZD7y/jgp+GtnrXETdT7fgeHGdgQ
Eo1HHEIdOwFnEQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:26 2026 by rpki-client