Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: Gdb5UNnbnmyG8J5XjvhdxLQaCAsLr1HM9hJXUKH1J0Q=
Subject key identifier: 34:81:5E:78:30:A2:A9:99:AE:61:A6:AC:43:C7:75:7B:2A:4D:4C:25
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019D99620E8A121A0A533956DFE743D821DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1783
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: DtBmjoxO3b4ePfR1KtRQfFrY9r+vgsu0wMxc9ulX5QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0e:8a:12:1a:0a:53:39:56:df:e7:43:d8:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=34815e7830a2a999ae61a6ac43c7757b2a4d4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:03:36:30:a9:52:b9:fa:d4:f4:f6:fb:96:
3f:7a:10:7a:b2:76:e9:77:48:4b:aa:be:79:d3:49:
00:e7:43:79:6e:0a:ad:f9:41:b0:43:aa:e3:39:35:
74:ec:7b:1c:38:9d:b2:b2:52:06:01:60:ce:ac:3d:
72:d2:d3:66:44:f5:09:48:e6:c7:b8:ff:4b:3d:0e:
8d:18:98:46:da:5c:5a:30:37:02:7f:1b:5a:54:8c:
2e:b4:27:cf:04:84:3d:47:6b:01:b9:12:c6:97:db:
82:94:09:b9:17:2a:0c:87:fc:82:f3:bf:df:59:5f:
f9:74:c1:39:bb:a1:08:cf:54:ec:60:dc:ce:01:b1:
58:ab:f0:18:2f:e4:7d:d8:85:03:c3:20:bc:d0:ad:
90:80:c5:e7:35:a4:ac:fb:ab:6b:8c:f4:fe:7c:13:
ff:8f:e9:2d:86:37:ba:f7:fe:eb:9f:0b:1b:78:4c:
f3:fe:92:38:93:d8:7c:f8:57:ad:ec:c4:8f:f2:c9:
2d:c3:58:d6:8b:f4:83:85:4e:fe:1d:dd:64:6e:16:
02:ee:00:53:18:bc:38:ed:df:8a:97:ec:09:5d:1d:
b0:4a:87:10:79:65:1b:6b:fd:96:93:83:d7:7c:bf:
cd:cc:60:f1:87:10:11:63:0a:2e:ea:d8:6c:64:e6:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:5E:78:30:A2:A9:99:AE:61:A6:AC:43:C7:75:7B:2A:4D:4C:25
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:94:d0:3d:6a:28:a2:c9:b1:84:5d:cd:bc:79:11:9e:22:
6d:df:8e:29:bf:ab:84:80:67:ff:76:b0:3c:a3:be:eb:93:96:
9e:3a:82:20:ae:a5:cc:61:9c:40:44:c2:04:ba:8d:53:18:2a:
95:3e:05:4a:17:41:53:1f:6c:a3:9d:96:2e:77:96:5c:21:c9:
7f:c0:f0:92:99:c4:11:05:8c:44:a9:cc:61:f9:0d:0f:ce:d6:
6b:27:48:0b:3f:fb:26:a7:2d:03:17:44:ba:a3:c6:b9:99:95:
e7:b8:a0:d9:98:31:75:51:9c:c2:ab:55:e4:21:68:f0:b1:ad:
f0:52:fb:d5:b5:d7:47:2d:04:93:89:d6:5c:7a:e8:aa:5a:95:
ed:19:25:7b:bb:00:5d:62:8d:dc:56:89:ad:19:b2:5b:b0:9d:
33:1e:27:9f:5e:6b:9a:ab:05:1d:05:b2:9d:a9:ad:13:03:ca:
51:8f:a0:75:18:44:f9:f6:52:3e:e5:ea:e0:70:a9:17:07:4a:
b9:c6:cd:5d:d0:e3:78:9a:a2:0d:58:5b:35:14:9f:2c:6c:39:
ac:63:4e:b1:2a:e3:13:cf:86:29:bc:2e:c2:e4:32:35:a0:07:
16:80:43:68:6e:67:32:20:11:cf:e9:54:59:ba:5e:dd:f5:51:
4e:35:6f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYg6KEhoKUzlW3+dD2CHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjYwNDE3MDMwMDMzWhcNMjYwNDE4MDMwMDMzWjAzMTEwLwYDVQQD
EygzNDgxNWU3ODMwYTJhOTk5YWU2MWE2YWM0M2M3NzU3YjJhNGQ0YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu98DNjCpUrn61PT2+5Y/ehB6snbp
d0hLqr5500kA50N5bgqt+UGwQ6rjOTV07HscOJ2yslIGAWDOrD1y0tNmRPUJSObH
uP9LPQ6NGJhG2lxaMDcCfxtaVIwutCfPBIQ9R2sBuRLGl9uClAm5FyoMh/yC87/f
WV/5dME5u6EIz1TsYNzOAbFYq/AYL+R92IUDwyC80K2QgMXnNaSs+6trjPT+fBP/
j+kthje69/7rnwsbeEzz/pI4k9h8+Fet7MSP8sktw1jWi/SDhU7+Hd1kbhYC7gBT
GLw47d+Kl+wJXR2wSocQeWUba/2Wk4PXfL/NzGDxhxARYwou6thsZOb0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSBXngwoqmZrmGmrEPHdXsqTUwlMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUCU0D1q
KKLJsYRdzbx5EZ4ibd+OKb+rhIBn/3awPKO+65OWnjqCIK6lzGGcQETCBLqNUxgq
lT4FShdBUx9so52WLneWXCHJf8DwkpnEEQWMRKnMYfkND87WaydICz/7JqctAxdE
uqPGuZmV57ig2ZgxdVGcwqtV5CFo8LGt8FL71bXXRy0Ek4nWXHroqlqV7Rkle7sA
XWKN3FaJrRmyW7CdMx4nn15rmqsFHQWynamtEwPKUY+gdRhE+fZSPuXq4HCpFwdK
ucbNXdDjeJqiDVhbNRSfLGw5rGNOsSrjE8+GKbwuwuQyNaAHFoBDaG5nMiARz+lU
Wbpe3fVRTjVv2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:13 2026 by rpki-client