Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: qHlc/EIUCXB/iCr0MYG360Va4Ny96hlWBVaiK0gYSIs=
Subject key identifier: F7:CE:A1:55:32:5E:F9:BE:8F:E8:2C:26:5E:6F:10:DA:7D:18:68:CE
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019EBFFF83EB7C45E2BC14FFDED53E635692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 08:00:54 +0000
Manifest this update: Sat 13 Jun 2026 08:00:54 +0000
Manifest next update: Sun 14 Jun 2026 08:00:54 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: C3CtMwaOW/kKm7u4cx2oArBPceG39/Oo71jdyrKwy/Y=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:83:eb:7c:45:e2:bc:14:ff:de:d5:3e:63:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 13 08:00:54 2026 GMT
Not After : Jun 14 08:00:54 2026 GMT
Subject: CN=f7cea155325ef9be8fe82c265e6f10da7d1868ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:a9:da:23:2f:5b:69:d4:64:ea:55:2d:43:
96:f9:6e:89:7b:67:f7:5a:a7:1c:ed:8b:ff:5b:be:
de:ad:26:62:24:8f:21:e7:61:28:13:b8:0a:57:28:
74:9c:eb:9d:cf:09:d6:b0:eb:54:67:19:3a:d3:22:
90:f7:f5:67:bf:31:f2:58:c4:ee:49:13:1f:b6:2c:
bc:6f:bb:32:54:56:ab:d5:cc:be:f6:a9:d7:7b:fd:
6d:e8:73:72:6a:82:dd:48:a2:9f:b6:62:94:fa:28:
59:f4:77:f3:61:47:fd:31:f0:e8:b1:e5:f5:d1:b0:
46:44:dc:58:fe:e3:f5:73:29:38:ac:d9:bd:c0:ca:
89:5e:d8:ed:63:e3:15:e7:5a:88:d5:96:8d:76:75:
c9:51:b3:0b:fd:04:b4:4e:c8:43:5b:75:d8:d7:58:
b4:69:c0:12:17:41:70:f8:e1:b4:f7:9a:eb:57:aa:
27:3b:7a:5a:7a:77:92:0d:49:30:2a:0d:b0:23:55:
ad:39:1e:fc:fe:ba:07:09:d9:ce:a4:c4:37:0a:3f:
5b:f7:7a:33:27:82:26:18:46:97:aa:d1:82:bd:06:
4b:f6:9a:09:89:d0:1c:af:78:a7:1b:4a:5c:a5:c8:
2b:9f:d4:3c:98:42:a9:ee:a5:40:4d:74:de:af:c1:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:A1:55:32:5E:F9:BE:8F:E8:2C:26:5E:6F:10:DA:7D:18:68:CE
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:99:3c:01:0a:2f:b7:27:98:42:f3:23:ea:9a:d3:16:3e:06:
c2:52:e9:5d:a8:99:3f:8c:70:2b:e1:51:9a:82:88:f3:d3:0b:
09:87:02:36:f7:32:1f:58:3b:7d:75:fb:53:7d:10:51:35:89:
9c:15:f1:0f:e2:cf:1c:43:89:60:79:ea:18:b2:d8:23:73:5e:
fb:28:15:02:f6:05:dd:3d:ec:f8:a0:5a:34:4f:28:d1:41:64:
91:c2:b8:12:dd:fa:a1:f8:01:e1:f6:4e:cf:db:fb:75:15:b5:
d6:52:96:06:94:32:28:b8:f4:53:c4:d0:fb:2a:fb:8b:aa:23:
f1:55:ab:34:1f:74:cf:f9:d4:01:3d:d4:8f:9c:65:87:21:21:
ce:48:0a:7c:e3:59:8c:4d:eb:b6:08:16:5f:b5:a9:a6:0f:00:
95:28:17:7a:cb:46:10:a6:aa:bd:81:16:e7:1e:24:cf:19:71:
d8:10:c4:fc:68:d6:31:1a:1b:e4:50:6e:01:ad:8d:dc:9e:b1:
f4:eb:33:30:4a:52:ba:31:fd:3f:b4:6c:9b:87:35:2e:90:fd:
22:ec:ca:7b:80:65:48:e9:d7:45:49:90:a1:ea:11:17:8c:61:
5b:fa:0c:f3:b7:b4:17:d0:3f:c9:24:76:01:2e:e3:f8:86:ea:
72:d7:2d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//4PrfEXivBT/3tU+Y1aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjYwNjEzMDgwMDU0WhcNMjYwNjE0MDgwMDU0WjAzMTEwLwYDVQQD
EyhmN2NlYTE1NTMyNWVmOWJlOGZlODJjMjY1ZTZmMTBkYTdkMTg2OGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCp2iMvW2nUZOpVLUOW+W6Je2f3
Wqcc7Yv/W77erSZiJI8h52EoE7gKVyh0nOudzwnWsOtUZxk60yKQ9/VnvzHyWMTu
SRMftiy8b7syVFar1cy+9qnXe/1t6HNyaoLdSKKftmKU+ihZ9HfzYUf9MfDoseX1
0bBGRNxY/uP1cyk4rNm9wMqJXtjtY+MV51qI1ZaNdnXJUbML/QS0TshDW3XY11i0
acASF0Fw+OG095rrV6onO3paeneSDUkwKg2wI1WtOR78/roHCdnOpMQ3Cj9b93oz
J4ImGEaXqtGCvQZL9poJidAcr3inG0pcpcgrn9Q8mEKp7qVATXTer8GE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfOoVUyXvm+j+gsJl5vENp9GGjOMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpk8AQov
tyeYQvMj6prTFj4GwlLpXaiZP4xwK+FRmoKI89MLCYcCNvcyH1g7fXX7U30QUTWJ
nBXxD+LPHEOJYHnqGLLYI3Ne+ygVAvYF3T3s+KBaNE8o0UFkkcK4Et36ofgB4fZO
z9v7dRW11lKWBpQyKLj0U8TQ+yr7i6oj8VWrNB90z/nUAT3Uj5xlhyEhzkgKfONZ
jE3rtggWX7Wppg8AlSgXestGEKaqvYEW5x4kzxlx2BDE/GjWMRob5FBuAa2N3J6x
9OszMEpSujH9P7Rsm4c1LpD9IuzKe4BlSOnXRUmQoeoRF4xhW/oM87e0F9A/ySR2
AS7j+IbqctctNA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:05 2026 by rpki-client