Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: lJWQqo0omvA8nL6b7Dnh5qvvuRv5pPWgxqNIgZFptAI=
Subject key identifier: FD:82:E5:85:EB:61:3E:37:F7:D6:9A:44:94:7B:7D:B6:83:FD:2A:53
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019D99CFD43334E60BE17AA591857F7564D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0FA0
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: O8beXHi7vLZnkIyVf/3wbpUYGeD57aemtDVmVcjPHu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d4:33:34:e6:0b:e1:7a:a5:91:85:7f:75:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=fd82e585eb613e37f7d69a44947b7db683fd2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:81:6e:e0:32:a2:86:86:c9:8d:f2:49:02:
a7:b2:e4:92:9c:7b:b8:80:8f:f2:3a:fd:b0:2f:dd:
0f:56:bc:c8:7f:43:01:2a:6b:a2:9c:ad:98:49:db:
df:e8:19:76:92:44:05:33:a1:69:b2:38:e9:ab:f8:
5d:59:99:5c:4f:03:41:1c:5a:ec:0c:8d:dd:22:d3:
89:2b:ad:e8:1e:dc:25:0e:37:36:5c:d6:1f:f4:1e:
a6:ab:9d:3d:a8:4e:de:91:06:cc:e7:19:ee:65:a3:
44:9a:ca:a1:f1:44:33:e9:a6:b1:48:d3:ba:32:92:
0a:3c:a1:3d:be:b9:6e:40:09:3f:20:6e:bb:52:42:
cd:8e:ff:dc:c0:04:b3:bd:66:72:18:21:a0:3c:d2:
18:f9:9c:f8:b0:25:c0:d6:a9:30:f5:1e:4e:82:02:
47:a8:da:3c:8b:39:26:f0:df:f8:92:b2:6e:05:3d:
5c:8e:ae:6c:3d:fc:8f:70:0d:55:1d:3d:35:b1:fe:
55:9a:9d:dd:64:7b:8f:07:7c:a4:eb:c2:6d:e1:32:
b6:df:d8:9a:6c:6f:5b:66:9c:27:86:c2:b9:dd:bd:
16:56:44:a4:05:69:68:82:08:a9:16:e9:0b:4a:21:
83:ff:cc:38:01:c1:74:69:fe:64:35:4f:f5:cd:8d:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:E5:85:EB:61:3E:37:F7:D6:9A:44:94:7B:7D:B6:83:FD:2A:53
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b5:13:0b:e2:b2:43:6a:fd:11:20:6f:04:18:b3:1b:e2:27:
a3:76:fa:c6:77:26:f9:01:51:28:0b:8f:f6:cf:72:cc:ec:58:
ab:c4:51:e0:fd:67:d7:12:d3:07:8b:8b:8b:3e:03:83:7c:e5:
eb:1d:04:c0:1a:aa:d2:39:9d:ff:e6:cb:b3:36:44:a6:1f:bc:
99:4e:0b:69:4a:57:cd:c4:36:3b:71:62:d3:c8:59:7a:40:86:
4c:c3:c6:b6:f5:04:d6:6e:11:ff:ba:38:e5:bc:c1:a6:34:65:
a4:3f:07:21:6e:e4:1f:40:d7:0b:f4:55:b3:ab:48:30:d9:23:
e5:1e:05:6e:d3:36:95:16:0b:27:bf:32:fe:06:34:bb:20:f8:
12:31:c9:ea:6d:51:27:ec:1a:86:a6:10:16:cb:fc:a0:c9:6b:
db:7b:52:9b:2a:7e:08:2c:c5:bc:5f:99:8b:6a:a7:da:2e:b7:
4c:38:39:f0:a9:42:66:4e:cf:4e:e2:2c:46:ab:f7:9b:4b:c7:
31:a2:d4:a6:6c:8e:8b:2f:85:18:f5:83:bb:d3:88:03:af:51:
20:a3:fb:08:93:6f:a2:72:97:db:bf:47:e7:e4:c3:5e:f5:3f:
1c:2e:84:39:f1:c4:40:31:4e:97:ab:75:ce:dd:46:41:6e:3a:
f3:ea:30:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9QzNOYL4XqlkYV/dWTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0
NWFkMDAwHhcNMjYwNDE3MDUwMDI3WhcNMjYwNDE4MDUwMDI3WjAzMTEwLwYDVQQD
EyhmZDgyZTU4NWViNjEzZTM3ZjdkNjlhNDQ5NDdiN2RiNjgzZmQyYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue2BbuAyooaGyY3ySQKnsuSSnHu4
gI/yOv2wL90PVrzIf0MBKmuinK2YSdvf6Bl2kkQFM6Fpsjjpq/hdWZlcTwNBHFrs
DI3dItOJK63oHtwlDjc2XNYf9B6mq509qE7ekQbM5xnuZaNEmsqh8UQz6aaxSNO6
MpIKPKE9vrluQAk/IG67UkLNjv/cwASzvWZyGCGgPNIY+Zz4sCXA1qkw9R5OggJH
qNo8izkm8N/4krJuBT1cjq5sPfyPcA1VHT01sf5Vmp3dZHuPB3yk68Jt4TK239ia
bG9bZpwnhsK53b0WVkSkBWloggipFukLSiGD/8w4AcF0af5kNU/1zY2KzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2C5YXrYT4399aaRJR7fbaD/SpTMB8GA1UdIwQY
MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt
YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1
LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrUTC+Ky
Q2r9ESBvBBizG+Ino3b6xncm+QFRKAuP9s9yzOxYq8RR4P1n1xLTB4uLiz4Dg3zl
6x0EwBqq0jmd/+bLszZEph+8mU4LaUpXzcQ2O3Fi08hZekCGTMPGtvUE1m4R/7o4
5bzBpjRlpD8HIW7kH0DXC/RVs6tIMNkj5R4FbtM2lRYLJ78y/gY0uyD4EjHJ6m1R
J+wahqYQFsv8oMlr23tSmyp+CCzFvF+Zi2qn2i63TDg58KlCZk7PTuIsRqv3m0vH
MaLUpmyOiy+FGPWDu9OIA69RIKP7CJNvonKX279H5+TDXvU/HC6EOfHEQDFOl6t1
zt1GQW468+owww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:54 2026 by rpki-client