Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: ReMgDjCbaJZcxMv/0EKyJPJxEJDbX4g5zFLwXtqPeyQ=
Subject key identifier: 40:65:18:FC:73:7C:F3:7C:42:B2:7F:91:31:20:FA:47:72:FF:40:E6
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019DA378A4F99C4A96569FE522A1823F72F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0939
Signing time: Sun 19 Apr 2026 02:01:25 +0000
Manifest this update: Sun 19 Apr 2026 02:01:25 +0000
Manifest next update: Mon 20 Apr 2026 02:01:25 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: zE9KI2yjWbb1J7Q14kCplxsyVf5p1p2yT80VF7kY+tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a4:f9:9c:4a:96:56:9f:e5:22:a1:82:3f:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Apr 19 02:01:25 2026 GMT
Not After : Apr 20 02:01:25 2026 GMT
Subject: CN=406518fc737cf37c42b27f913120fa4772ff40e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:1d:6f:e6:ce:79:2b:68:5e:60:01:3f:06:
1d:ab:58:ae:78:b7:89:c8:86:5f:64:0f:79:b5:ed:
8b:8c:7f:08:f5:87:cf:d2:84:9b:96:a2:ce:67:be:
13:75:fc:c2:3a:c3:36:54:c9:f8:28:c5:c4:88:17:
93:b9:89:d9:54:71:8e:aa:76:b4:9d:0d:43:c8:fc:
59:4b:6a:d3:75:8d:19:ed:91:c4:78:07:4f:f6:36:
08:27:75:0e:a2:f8:b0:78:4e:97:99:7b:a6:ff:d8:
7b:58:d1:11:90:82:45:91:6e:1f:44:a9:a2:26:f1:
b4:7c:38:ab:bd:46:71:b4:fa:89:c5:16:0a:e6:0c:
f9:c1:de:e0:1c:79:3c:a2:00:2b:e1:98:48:cc:3c:
19:a1:5a:b0:b3:2c:37:48:09:ab:70:50:44:10:4f:
10:26:49:b5:9f:02:32:bc:29:0c:b0:d1:0e:3c:90:
8b:4f:b1:58:88:b1:8a:2a:6a:88:0c:8a:3d:55:61:
d0:ce:02:5e:a7:db:a5:a0:da:73:94:50:4b:94:0c:
f9:a1:13:9b:82:ab:45:39:92:c9:5a:36:c8:ef:99:
e6:65:63:89:26:fa:09:b2:49:cf:34:06:01:41:88:
d2:be:9a:e7:e6:13:46:ee:b5:dc:26:20:53:dc:3c:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:18:FC:73:7C:F3:7C:42:B2:7F:91:31:20:FA:47:72:FF:40:E6
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:77:8f:a4:e8:38:83:7a:8a:80:fa:93:9f:dd:dd:54:ab:71:
ba:29:24:24:6f:7f:45:8d:4b:57:16:ba:c8:5c:71:9d:3f:7a:
d1:d7:5b:f4:ad:5e:97:1d:7d:29:37:2f:12:8d:2a:9f:55:24:
8b:90:39:76:bf:1a:0d:29:01:31:02:fd:f6:85:bc:c7:ab:af:
a6:e5:e9:86:c4:79:66:ac:73:db:dc:ec:38:54:9c:9d:a9:b3:
db:05:c8:98:ce:ef:0e:5a:f5:1b:4a:fd:eb:16:4e:85:e4:d3:
fb:6a:70:1d:20:44:8f:48:d9:31:f1:26:96:c0:78:e1:ed:bd:
2b:23:59:cc:50:e9:e2:f8:de:12:6d:bf:c3:01:bd:51:ac:90:
15:5b:e4:2b:42:2d:8a:4b:e2:9e:bc:ce:0a:f7:ea:34:e2:2d:
a5:f3:72:22:87:b4:92:7a:12:ac:ac:2b:dd:cd:96:69:64:c9:
b0:66:d3:3f:4a:2b:c5:bf:fd:b7:52:6c:a1:2e:a8:53:58:9a:
fc:d4:51:59:33:61:79:22:43:4b:ef:aa:a8:1b:43:d1:df:bc:
9b:5e:0e:a3:fa:c9:49:ce:d5:08:f7:50:2f:01:8d:3d:6d:03:
02:9a:8c:17:d4:91:35:e5:d8:38:d0:10:f2:35:95:9c:be:7a:
c1:ec:b2:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeKT5nEqWVp/lIqGCP3L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njc1OGJlYTY4ZjA4MjVjZjE2ZTY2ZmIwMmVlN2JjYTQ1
NGJhZTIwHhcNMjYwNDE5MDIwMTI1WhcNMjYwNDIwMDIwMTI1WjAzMTEwLwYDVQQD
Eyg0MDY1MThmYzczN2NmMzdjNDJiMjdmOTEzMTIwZmE0NzcyZmY0MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uIdb+bOeStoXmABPwYdq1iueLeJ
yIZfZA95te2LjH8I9YfP0oSblqLOZ74TdfzCOsM2VMn4KMXEiBeTuYnZVHGOqna0
nQ1DyPxZS2rTdY0Z7ZHEeAdP9jYIJ3UOoviweE6XmXum/9h7WNERkIJFkW4fRKmi
JvG0fDirvUZxtPqJxRYK5gz5wd7gHHk8ogAr4ZhIzDwZoVqwsyw3SAmrcFBEEE8Q
Jkm1nwIyvCkMsNEOPJCLT7FYiLGKKmqIDIo9VWHQzgJep9uloNpzlFBLlAz5oROb
gqtFOZLJWjbI75nmZWOJJvoJsknPNAYBQYjSvprn5hNG7rXcJiBT3DyL1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBlGPxzfPN8QrJ/kTEg+kdy/0DmMB8GA1UdIwQY
MBaAFHhnWL6mjwglzxbmb7Au57ykVLriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEt
ZWVkNDVjOTM3NzVlLzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEtZWVkNDVjOTM3NzVl
LzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3ePpOg4
g3qKgPqTn93dVKtxuikkJG9/RY1LVxa6yFxxnT960ddb9K1elx19KTcvEo0qn1Uk
i5A5dr8aDSkBMQL99oW8x6uvpuXphsR5Zqxz29zsOFScnamz2wXImM7vDlr1G0r9
6xZOheTT+2pwHSBEj0jZMfEmlsB44e29KyNZzFDp4vjeEm2/wwG9UayQFVvkK0It
ikvinrzOCvfqNOItpfNyIoe0knoSrKwr3c2WaWTJsGbTP0orxb/9t1JsoS6oU1ia
/NRRWTNheSJDS++qqBtD0d+8m14Oo/rJSc7VCPdQLwGNPW0DApqMF9SRNeXYONAQ
8jWVnL56weyycA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:36 2026 by rpki-client