Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: qPuXaJm+vxmJ8xltm2xuv9MlHHsnXMWkdjc8zIdDCr8=
Subject key identifier: 10:31:52:D9:2A:B1:8E:8B:4B:F8:AF:69:FA:08:BD:BA:B4:95:3F:DD
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019CAF10E7659D331B01527678F68816A88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 1210
Signing time: Mon 02 Mar 2026 15:00:46 +0000
Manifest this update: Mon 02 Mar 2026 15:00:46 +0000
Manifest next update: Tue 03 Mar 2026 15:00:46 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: ZzlYDEUgpKGw6QPE2nv6iFREx/VICPnoqyncnByGSds=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:e7:65:9d:33:1b:01:52:76:78:f6:88:16:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Mar 2 15:00:46 2026 GMT
Not After : Mar 3 15:00:46 2026 GMT
Subject: CN=103152d92ab18e8b4bf8af69fa08bdbab4953fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:11:63:f1:4e:79:8b:65:cf:3e:d9:4e:6d:
59:26:e4:2b:34:2d:ca:31:f3:1e:20:bf:ea:fa:4d:
ef:28:8c:be:7d:63:08:93:7a:a5:62:68:4c:70:cd:
3a:bc:95:e5:6a:5b:92:44:39:5e:cc:2e:9d:09:52:
10:45:d6:7f:cc:f7:7c:94:9e:57:91:05:0a:40:a3:
8a:69:0d:e7:02:a3:1e:7d:be:4f:fd:01:a6:b9:80:
9d:50:31:0e:52:a9:d8:eb:d4:5e:0f:3a:b9:30:32:
c9:a3:b6:a0:bf:2f:e2:24:0b:a5:6f:fc:72:42:14:
2e:fc:17:05:c5:4a:03:be:34:29:c8:32:95:cf:4b:
51:41:3b:cb:1b:4e:fc:80:dd:29:92:7c:c0:bd:0f:
72:0f:bb:c3:f6:ef:43:d3:8d:60:77:59:38:94:1f:
8e:3d:c4:41:49:43:00:aa:ec:47:be:24:a6:a8:c7:
d0:84:92:9a:a6:51:45:6c:7c:9a:dd:5d:61:33:d3:
2e:83:8f:3f:f9:2e:ce:7b:69:04:c1:bf:94:1a:0b:
5c:0e:50:40:d9:5e:02:85:93:71:11:5e:72:6e:3b:
a0:0e:b3:a6:53:54:3b:48:51:0e:35:f1:e7:23:f3:
fb:77:52:2d:fc:36:46:32:ba:7f:34:72:75:7c:5f:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:52:D9:2A:B1:8E:8B:4B:F8:AF:69:FA:08:BD:BA:B4:95:3F:DD
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:d3:a1:6c:60:4c:f8:ae:29:b2:36:08:04:32:a1:14:32:
e9:00:35:98:e6:8e:24:b6:33:1b:c5:13:42:ac:69:79:e9:6c:
17:2e:20:f1:c7:31:0f:e3:a2:59:5e:e2:6c:54:d1:3d:69:b4:
8d:18:7e:4e:99:cc:a6:a0:2a:53:a2:7c:03:f1:1a:ab:1d:97:
a0:55:0c:d5:50:89:28:61:49:f3:ba:86:6d:6b:e3:3c:4c:32:
98:36:e5:7a:64:66:6a:c3:32:c3:c9:40:6a:07:45:f4:db:80:
15:8b:89:a7:c8:a2:93:fa:39:cf:8b:f0:15:11:91:59:54:df:
35:5d:05:fe:9a:6a:c8:69:ac:92:5e:ef:e3:39:fb:02:4c:4f:
b6:ed:33:74:d4:f2:60:a2:1a:8d:5e:81:e1:af:9d:cd:5c:b7:
52:dd:0f:47:82:ca:65:88:ac:75:43:b2:0b:dd:3d:7f:61:e7:
68:f4:2c:31:81:60:03:ac:87:44:48:9b:ff:17:20:e6:7e:1b:
6b:5a:7c:d6:87:93:bb:4a:1d:c0:ce:09:0a:0c:7f:9d:48:7f:
2f:d1:bf:f5:de:ac:ee:4e:c1:e4:75:b9:63:71:20:30:cb:00:
dc:11:5c:bd:fa:32:f7:cd:8a:f7:15:f1:43:72:15:69:ac:60:
ae:39:da:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEOdlnTMbAVJ2ePaIFqiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh
MThiY2EwHhcNMjYwMzAyMTUwMDQ2WhcNMjYwMzAzMTUwMDQ2WjAzMTEwLwYDVQQD
EygxMDMxNTJkOTJhYjE4ZThiNGJmOGFmNjlmYTA4YmRiYWI0OTUzZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4kRY/FOeYtlzz7ZTm1ZJuQrNC3K
MfMeIL/q+k3vKIy+fWMIk3qlYmhMcM06vJXlaluSRDlezC6dCVIQRdZ/zPd8lJ5X
kQUKQKOKaQ3nAqMefb5P/QGmuYCdUDEOUqnY69ReDzq5MDLJo7agvy/iJAulb/xy
QhQu/BcFxUoDvjQpyDKVz0tRQTvLG078gN0pknzAvQ9yD7vD9u9D041gd1k4lB+O
PcRBSUMAquxHviSmqMfQhJKaplFFbHya3V1hM9Mug48/+S7Oe2kEwb+UGgtcDlBA
2V4ChZNxEV5ybjugDrOmU1Q7SFEONfHnI/P7d1It/DZGMrp/NHJ1fF88BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAxUtkqsY6LS/ivafoIvbq0lT/dMB8GA1UdIwQY
MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt
NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5
LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb/ToWxg
TPiuKbI2CAQyoRQy6QA1mOaOJLYzG8UTQqxpeelsFy4g8ccxD+OiWV7ibFTRPWm0
jRh+TpnMpqAqU6J8A/Eaqx2XoFUM1VCJKGFJ87qGbWvjPEwymDblemRmasMyw8lA
agdF9NuAFYuJp8iik/o5z4vwFRGRWVTfNV0F/ppqyGmskl7v4zn7AkxPtu0zdNTy
YKIajV6B4a+dzVy3Ut0PR4LKZYisdUOyC909f2HnaPQsMYFgA6yHREib/xcg5n4b
a1p81oeTu0odwM4JCgx/nUh/L9G/9d6s7k7B5HW5Y3EgMMsA3BFcvfoy982K9xXx
Q3IVaaxgrjna9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:31 2026 by rpki-client