Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: 0QCN9V9V9Ai1CfxsxCWJD0MBCU/8mTEG/BumRk9dEMk=
Subject key identifier: 8B:F2:0B:16:1C:97:52:79:CB:F6:6A:DC:E6:F7:B0:A4:03:31:3B:50
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019CABD943C130962E682C5EF0DBC1E52DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1708
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: GSBtAI2igm4GCz+mScE8jh6U5W8moDPhdn28yYxBTuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:43:c1:30:96:2e:68:2c:5e:f0:db:c1:e5:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=8bf20b161c975279cbf66adce6f7b0a403313b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2e:ea:3b:11:93:2c:21:fb:0b:a4:79:2b:
78:60:eb:b8:a4:b2:1f:c7:a8:e0:f3:ec:2a:81:64:
51:68:d2:81:21:11:e0:e6:e0:c6:0a:aa:a1:34:05:
f7:cc:08:ea:c0:80:05:a5:7c:25:38:8f:50:df:df:
52:54:bb:97:e8:60:2c:cc:a6:10:42:d7:38:75:a7:
b1:da:cc:76:2b:3c:fb:39:8b:2f:ad:a8:88:1f:b4:
c6:31:29:fe:b6:90:7a:7f:e9:0a:71:3e:c5:c4:6b:
a5:9b:84:07:da:a1:db:dd:db:11:bc:1b:f4:62:83:
a9:e0:be:7a:ae:08:c7:f9:e0:b8:d8:7a:1b:3e:2e:
48:0b:a5:fb:c2:1a:40:2c:46:cb:cd:5a:3c:fd:76:
55:65:ad:7c:e4:54:54:80:ad:5c:34:46:ca:3b:d6:
42:08:35:06:da:91:e1:45:b7:b4:b5:af:28:12:02:
c5:15:e5:96:78:f6:12:1e:75:08:36:15:0b:65:2c:
cd:5a:02:08:ac:25:68:b0:61:02:8a:bb:69:6f:be:
06:0a:92:a8:5e:02:d9:a1:4b:75:ea:b6:73:c7:eb:
b9:62:71:7f:e7:e5:38:b4:d3:0e:8b:cf:c7:6c:c5:
ea:de:7e:d0:f0:79:53:3d:6e:66:f7:a7:eb:9f:59:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:0B:16:1C:97:52:79:CB:F6:6A:DC:E6:F7:B0:A4:03:31:3B:50
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:c1:dc:aa:8d:e0:ee:58:fa:47:c3:e1:f8:a0:f3:31:a3:
bc:4d:4e:36:78:81:b2:09:54:f1:f2:29:71:d3:ee:e0:7b:26:
84:1c:58:8e:e2:9e:75:d7:96:f5:7c:3e:fd:e3:9c:c0:d0:10:
8b:62:c5:ca:b7:d9:cd:8a:fd:17:e3:e0:16:0f:3f:9b:21:ff:
88:34:eb:61:32:35:cd:ff:a1:26:a8:4b:43:e4:3f:ad:00:b7:
a1:46:37:85:59:fa:0a:4e:fb:5c:c6:31:8b:fe:b2:86:61:13:
e4:ec:80:eb:6f:2a:89:c6:b3:06:1a:b9:5e:a4:2c:a5:2b:af:
a4:68:c8:d7:a6:ac:ad:a2:fe:be:24:30:90:5c:32:54:29:8d:
af:cf:a0:9f:f6:a5:fc:ad:b7:b2:e6:4f:ca:50:51:8d:c6:fa:
bf:b6:ec:18:b1:0a:a2:3c:96:21:8e:98:0b:88:b7:b1:35:6a:
48:02:54:95:ac:bf:4a:90:02:09:ee:6f:a1:9a:93:24:31:25:
17:9f:75:21:28:de:d8:43:e5:17:e0:9f:89:1f:7f:76:16:8b:
3a:b1:04:10:4a:21:e0:8d:81:46:88:4a:20:cc:6e:e1:da:da:
fb:96:c9:44:19:55:c1:a2:89:e9:15:e8:de:64:10:02:f7:24:
9a:de:47:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2UPBMJYuaCxe8NvB5S2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjYwMzAyMDAwMTA4WhcNMjYwMzAzMDAwMTA4WjAzMTEwLwYDVQQD
Eyg4YmYyMGIxNjFjOTc1Mjc5Y2JmNjZhZGNlNmY3YjBhNDAzMzEzYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj0u6jsRkywh+wukeSt4YOu4pLIf
x6jg8+wqgWRRaNKBIRHg5uDGCqqhNAX3zAjqwIAFpXwlOI9Q399SVLuX6GAszKYQ
Qtc4daex2sx2Kzz7OYsvraiIH7TGMSn+tpB6f+kKcT7FxGulm4QH2qHb3dsRvBv0
YoOp4L56rgjH+eC42HobPi5IC6X7whpALEbLzVo8/XZVZa185FRUgK1cNEbKO9ZC
CDUG2pHhRbe0ta8oEgLFFeWWePYSHnUINhULZSzNWgIIrCVosGECirtpb74GCpKo
XgLZoUt16rZzx+u5YnF/5+U4tNMOi8/HbMXq3n7Q8HlTPW5m96frn1nKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvyCxYcl1J5y/Zq3Ob3sKQDMTtQMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad/B3KqN
4O5Y+kfD4fig8zGjvE1ONniBsglU8fIpcdPu4HsmhBxYjuKeddeW9Xw+/eOcwNAQ
i2LFyrfZzYr9F+PgFg8/myH/iDTrYTI1zf+hJqhLQ+Q/rQC3oUY3hVn6Ck77XMYx
i/6yhmET5OyA628qicazBhq5XqQspSuvpGjI16asraL+viQwkFwyVCmNr8+gn/al
/K23suZPylBRjcb6v7bsGLEKojyWIY6YC4i3sTVqSAJUlay/SpACCe5voZqTJDEl
F591ISje2EPlF+CfiR9/dhaLOrEEEEoh4I2BRohKIMxu4dra+5bJRBlVwaKJ6RXo
3mQQAvckmt5HBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:02 2026 by rpki-client