Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: RNsQxxSd6ClPLHjW7WLe8v7O6Q5jmocjNh5nPixG4U4=
Subject key identifier: 9A:A2:02:76:FB:04:29:F4:26:CD:DC:1F:71:45:EB:40:1F:AC:3F:37
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01A0CC6BE29A2BC078BAB476418EC54196FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 04:00:17 +0000
Manifest this update: Wed 23 Sep 2026 04:00:17 +0000
Manifest next update: Thu 24 Sep 2026 04:00:17 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: J1gg/PK5i7EoSGfDc4JIOE+nL1Cyuf3kciwHul9LSwQ=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:e2:9a:2b:c0:78:ba:b4:76:41:8e:c5:41:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Sep 23 04:00:17 2026 GMT
Not After : Sep 24 04:00:17 2026 GMT
Subject: CN=9aa20276fb0429f426cddc1f7145eb401fac3f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:41:78:a4:40:57:90:27:1f:99:ae:1f:bf:
f0:3a:cb:bb:1f:97:2f:e7:26:af:0d:c8:0b:a9:16:
57:ba:ef:0d:d3:66:80:35:f1:83:e3:51:dd:ab:68:
fe:e5:50:d1:60:0b:68:99:e5:25:a9:66:c1:8d:43:
cd:ca:d6:2f:27:0b:80:4d:33:18:a3:d3:1f:5f:b6:
ab:2b:ee:5b:69:7d:b1:81:fc:a1:b7:e5:d4:7a:7f:
86:d5:9c:79:18:2f:a4:70:96:05:9c:5b:ff:51:b0:
e8:96:41:f1:f5:08:14:42:32:40:5b:1b:43:e4:3c:
5a:d2:b4:19:00:9f:ef:51:4f:ae:fc:30:18:ac:bd:
a9:93:a2:92:a2:39:4d:0f:53:48:a1:35:d8:30:ce:
2a:77:20:fe:ff:14:72:59:b2:da:cf:1d:99:70:af:
9b:ae:ae:48:72:54:cb:b8:3e:0e:9a:3b:92:6c:bd:
c1:58:ab:c7:52:cb:02:b1:74:88:b9:10:e2:96:13:
3b:01:ac:d1:44:3d:40:b6:c4:01:00:48:49:e6:96:
cd:68:cd:a5:d2:f9:82:fd:fb:78:32:c7:1f:5b:f8:
50:40:bb:38:c7:e2:54:f6:a0:54:ed:32:b4:b9:a1:
91:36:1f:d5:e4:83:11:f2:2d:8f:00:cb:49:a5:dd:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:02:76:FB:04:29:F4:26:CD:DC:1F:71:45:EB:40:1F:AC:3F:37
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:1f:f1:be:7e:a7:ca:ec:d0:cd:e0:e4:02:9c:05:71:e5:
a1:65:a0:62:1f:8e:40:a9:b7:b1:84:cf:b7:ea:60:d1:3a:fc:
d7:2a:e3:91:63:c0:5d:7f:6b:b2:cd:ac:5e:17:f0:dd:a8:0e:
7f:89:34:36:8f:67:3c:6c:3b:c6:c2:65:53:21:8e:3a:bc:5f:
5e:3d:07:0a:65:2a:0d:e1:5c:35:e4:41:15:84:27:fe:31:70:
7b:75:d5:fb:30:89:6d:a1:7a:2d:88:31:66:d3:b0:f4:5f:58:
0b:f7:a7:e8:02:e5:13:95:93:b4:f2:d4:41:65:d5:4a:71:e4:
61:6b:bf:3d:29:b3:5e:60:2c:8f:3f:72:b8:54:4b:5d:84:0b:
8c:43:43:f8:57:8e:5e:22:19:47:42:b3:88:d7:b7:f9:64:14:
76:6e:d5:4c:61:96:32:6c:12:76:4f:cf:78:fd:9f:6c:5d:c1:
c0:94:66:93:5e:ca:0d:47:6e:6e:69:17:79:57:d1:7f:64:35:
86:c1:97:70:ed:cf:8e:7b:de:9e:34:e0:7c:7d:51:65:af:58:
46:f7:e5:35:c7:8f:63:d2:56:04:a4:9e:f3:74:73:2e:e3:d3:
f0:b5:ea:27:33:a5:30:c9:24:ae:df:e7:58:3b:9e:25:82:32:
24:16:43:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMa+KaK8B4urR2QY7FQZb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl
NzdkOGEwHhcNMjYwOTIzMDQwMDE3WhcNMjYwOTI0MDQwMDE3WjAzMTEwLwYDVQQD
Eyg5YWEyMDI3NmZiMDQyOWY0MjZjZGRjMWY3MTQ1ZWI0MDFmYWMzZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1tBeKRAV5AnH5muH7/wOsu7H5cv
5yavDcgLqRZXuu8N02aANfGD41Hdq2j+5VDRYAtomeUlqWbBjUPNytYvJwuATTMY
o9MfX7arK+5baX2xgfyht+XUen+G1Zx5GC+kcJYFnFv/UbDolkHx9QgUQjJAWxtD
5Dxa0rQZAJ/vUU+u/DAYrL2pk6KSojlND1NIoTXYMM4qdyD+/xRyWbLazx2ZcK+b
rq5IclTLuD4OmjuSbL3BWKvHUssCsXSIuRDilhM7AazRRD1AtsQBAEhJ5pbNaM2l
0vmC/ft4MscfW/hQQLs4x+JU9qBU7TK0uaGRNh/V5IMR8i2PAMtJpd2EKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqiAnb7BCn0Js3cH3FF60AfrD83MB8GA1UdIwQY
MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt
YjhhZTE2YjM1YzMxLzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx
LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf94f8b5+
p8rs0M3g5AKcBXHloWWgYh+OQKm3sYTPt+pg0Tr81yrjkWPAXX9rss2sXhfw3agO
f4k0No9nPGw7xsJlUyGOOrxfXj0HCmUqDeFcNeRBFYQn/jFwe3XV+zCJbaF6LYgx
ZtOw9F9YC/en6ALlE5WTtPLUQWXVSnHkYWu/PSmzXmAsjz9yuFRLXYQLjEND+FeO
XiIZR0KziNe3+WQUdm7VTGGWMmwSdk/PeP2fbF3BwJRmk17KDUdubmkXeVfRf2Q1
hsGXcO3PjnvenjTgfH1RZa9YRvflNcePY9JWBKSe83RzLuPT8LXqJzOlMMkkrt/n
WDueJYIyJBZDWA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:31 2026 by rpki-client