Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: LaxEGt5rUzgOgdMC3MjpNz4N1uGcPqPwDaIg1CqbEIg=
Subject key identifier: 15:76:81:BE:A7:98:52:BD:D9:7A:82:F9:0C:30:12:27:47:C3:75:E5
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019CA8A0D8F3EEF0B4C177E9F649738F8AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: BC
Signing time: Sun 01 Mar 2026 09:00:39 +0000
Manifest this update: Sun 01 Mar 2026 09:00:39 +0000
Manifest next update: Mon 02 Mar 2026 09:00:39 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: bdYAgaGKb6/moGPpIkZP5GnKs5wy5Zhr8pnELwj2CUc=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:d8:f3:ee:f0:b4:c1:77:e9:f6:49:73:8f:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Mar 1 09:00:39 2026 GMT
Not After : Mar 2 09:00:39 2026 GMT
Subject: CN=157681bea79852bdd97a82f90c30122747c375e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:ab:1a:35:30:58:54:0b:75:5a:50:fa:6a:
85:b9:ed:57:bb:2c:95:e0:ab:27:29:1d:0d:ec:66:
12:e4:ed:58:d7:19:c5:24:11:ed:0f:af:0b:75:fe:
ff:2b:d1:2a:25:ca:9f:e4:b4:f7:d4:b6:6a:1d:bf:
14:b1:d4:e4:bc:a0:04:78:47:de:02:6e:be:f4:62:
e4:e5:83:a3:c9:2c:24:2d:1e:4f:0b:b5:26:21:6d:
27:4f:17:fc:b1:3d:8a:e9:e4:28:25:25:05:bb:f3:
30:38:1c:be:da:c1:da:3a:1f:14:5b:4b:9d:b3:79:
cc:15:f1:57:8d:37:00:a4:8c:ef:cc:bb:98:ca:41:
32:8d:8b:83:15:17:6a:c7:4a:77:02:65:30:12:df:
da:9c:af:6c:0a:e0:8c:91:81:41:43:a3:28:53:8d:
0d:27:f7:d9:69:a7:d4:c0:f3:47:77:48:71:17:67:
c0:74:37:52:20:4b:a9:4f:5a:83:3e:af:63:a6:d3:
be:ec:e6:e8:2a:58:3c:73:9e:c1:29:56:f6:46:61:
b8:e1:5d:be:2e:55:26:13:29:e0:df:b1:51:94:3b:
3e:36:e2:24:a4:56:92:3d:5d:33:e4:07:0e:57:d9:
19:86:03:3d:fd:92:a4:ce:14:4b:ee:26:7b:04:7e:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:81:BE:A7:98:52:BD:D9:7A:82:F9:0C:30:12:27:47:C3:75:E5
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:50:01:35:ab:e4:94:77:83:17:4e:4f:df:d8:f1:75:98:18:
95:ad:c8:7f:ab:59:8a:e1:3d:ef:c6:5f:4b:86:24:af:8a:7a:
52:c6:d6:f1:72:7a:d6:bc:8b:e7:b0:49:15:84:53:df:59:54:
49:b2:3a:58:8d:60:22:81:1d:00:39:57:e9:65:99:3d:e9:8a:
23:01:0b:ba:54:8b:d4:8a:9c:8f:de:9a:73:66:01:d1:b3:f5:
c5:15:5b:3e:df:31:29:f5:a7:82:34:54:2a:fe:02:94:d2:3a:
84:c8:9b:03:ac:26:33:b0:a4:6b:c7:ea:02:63:13:1d:b8:15:
64:7c:a7:58:6a:e7:d2:94:1c:e5:a7:5d:80:68:d2:b7:90:ef:
20:39:00:da:f6:46:87:a9:75:28:62:ac:61:eb:16:5e:dc:2d:
a2:c2:59:0a:8b:fd:05:08:45:3d:cf:91:e7:72:bb:2a:ce:df:
0c:51:cb:f2:55:39:6f:f9:fb:4e:56:03:38:4b:0e:95:49:0b:
19:cf:11:9c:cc:63:d2:33:ba:4b:93:7c:26:ec:f1:91:52:58:
fa:9c:d7:9a:2d:24:5f:d4:47:e2:13:e8:23:ab:92:bc:93:8d:
e8:1e:ad:48:41:8f:5f:2f:3b:0a:d2:9a:87:f6:08:85:d2:34:
90:b8:73:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooNjz7vC0wXfp9klzj4rGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5
NmNmZTgwHhcNMjYwMzAxMDkwMDM5WhcNMjYwMzAyMDkwMDM5WjAzMTEwLwYDVQQD
EygxNTc2ODFiZWE3OTg1MmJkZDk3YTgyZjkwYzMwMTIyNzQ3YzM3NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ByrGjUwWFQLdVpQ+mqFue1XuyyV
4KsnKR0N7GYS5O1Y1xnFJBHtD68Ldf7/K9EqJcqf5LT31LZqHb8UsdTkvKAEeEfe
Am6+9GLk5YOjySwkLR5PC7UmIW0nTxf8sT2K6eQoJSUFu/MwOBy+2sHaOh8UW0ud
s3nMFfFXjTcApIzvzLuYykEyjYuDFRdqx0p3AmUwEt/anK9sCuCMkYFBQ6MoU40N
J/fZaafUwPNHd0hxF2fAdDdSIEupT1qDPq9jptO+7OboKlg8c57BKVb2RmG44V2+
LlUmEyng37FRlDs+NuIkpFaSPV0z5AcOV9kZhgM9/ZKkzhRL7iZ7BH4ASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV2gb6nmFK92XqC+QwwEidHw3XlMB8GA1UdIwQY
MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt
N2VhMGRlYjgzMGFiLzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi
LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlABNavk
lHeDF05P39jxdZgYla3If6tZiuE978ZfS4Ykr4p6UsbW8XJ61ryL57BJFYRT31lU
SbI6WI1gIoEdADlX6WWZPemKIwELulSL1Iqcj96ac2YB0bP1xRVbPt8xKfWngjRU
Kv4ClNI6hMibA6wmM7Cka8fqAmMTHbgVZHynWGrn0pQc5addgGjSt5DvIDkA2vZG
h6l1KGKsYesWXtwtosJZCov9BQhFPc+R53K7Ks7fDFHL8lU5b/n7TlYDOEsOlUkL
Gc8RnMxj0jO6S5N8JuzxkVJY+pzXmi0kX9RH4hPoI6uSvJON6B6tSEGPXy87CtKa
h/YIhdI0kLhzYw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:51 2026 by rpki-client