Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier: WcTsrlkXpArDONF90gAjbktKjed40ijitUSWYlTzYho=
Subject key identifier: 98:72:E5:23:25:4B:14:DC:0A:7B:EF:59:E9:7A:70:17:FD:2D:94:80
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial: 019D9C2CDAE0C63946127E0D24FE8D802822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number: 1628
Signing time: Fri 17 Apr 2026 16:01:18 +0000
Manifest this update: Fri 17 Apr 2026 16:01:18 +0000
Manifest next update: Sat 18 Apr 2026 16:01:18 +0000
Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: rLtSz/5arRyOwK5z6NOUv4xfZajZbvYFQfYoSQHVYKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:da:e0:c6:39:46:12:7e:0d:24:fe:8d:80:28:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Validity
Not Before: Apr 17 16:01:18 2026 GMT
Not After : Apr 18 16:01:18 2026 GMT
Subject: CN=9872e523254b14dc0a7bef59e97a7017fd2d9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:c0:01:6b:51:f4:e6:15:0e:a3:08:12:a1:
38:0a:e4:12:82:c3:51:36:71:de:56:7f:87:7e:25:
95:92:8e:c2:7d:42:9f:64:67:ee:f9:6f:10:d8:3f:
ef:4f:9f:be:b6:ab:29:a9:44:96:b7:9a:c8:25:10:
80:e5:31:b8:cb:92:39:f5:7e:c5:23:11:8a:91:01:
ce:a6:7c:4f:2c:45:c5:c0:7d:bb:cb:a6:ef:94:a0:
73:8f:58:5a:e7:b3:ee:91:35:a7:cd:a3:16:91:4e:
be:e3:fa:97:37:bf:60:eb:90:27:69:23:ec:e3:c5:
a6:90:22:97:94:01:c8:69:01:aa:8a:ef:0f:c0:01:
06:42:dc:31:35:03:84:f3:cc:93:ed:ec:73:fb:d3:
97:f7:03:30:67:25:cb:d8:d7:db:9b:cb:5a:90:ab:
34:83:20:8b:47:16:f1:57:ab:cb:bf:52:d7:2e:17:
11:64:33:d1:3c:e2:9a:a2:19:ef:4a:13:12:01:f0:
08:69:1a:e9:87:98:5e:34:fa:c9:85:04:80:f7:5a:
fa:39:3e:d6:c3:b4:b2:cf:fd:7e:aa:4c:81:30:44:
47:89:22:f3:bf:b6:b2:a3:51:55:03:7e:05:36:1b:
13:99:ef:9c:51:6a:1f:df:d6:b1:72:d3:9b:aa:1d:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:E5:23:25:4B:14:DC:0A:7B:EF:59:E9:7A:70:17:FD:2D:94:80
X509v3 Authority Key Identifier:
keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:10:c6:00:0c:c8:ab:6c:1e:92:2e:8d:27:09:6f:bc:b6:73:
c8:ef:70:a9:b8:9b:5b:a9:31:f0:32:a4:08:56:3b:7b:2a:4c:
7c:37:47:1a:52:3d:47:ce:ab:5a:2d:9a:9b:40:d4:6a:0e:bc:
b1:5d:60:47:ba:8e:2d:d9:52:36:99:bd:7c:d2:67:68:4b:e5:
05:b4:bc:1d:d2:1b:b7:8c:56:f7:e5:96:0f:54:41:3a:f2:63:
6c:26:47:a1:0d:c5:9b:c1:f0:e9:e8:71:fc:ca:e1:3c:b4:5f:
34:fd:65:57:a5:01:a2:c3:8e:dd:f7:a8:19:e8:28:08:a7:8d:
a5:e0:89:1f:7d:db:5b:27:11:96:62:ac:80:5b:d4:18:f3:89:
bd:0c:10:7f:97:53:76:b3:59:2c:94:83:04:34:1b:da:06:16:
b0:00:5e:92:6b:c7:25:0a:fc:37:66:7c:d1:90:3f:5d:31:a7:
3a:40:fe:08:66:8d:7a:73:59:22:c2:8a:21:43:ea:bb:39:9b:
ac:82:a1:2d:e5:e9:0f:4a:33:98:81:4b:ac:64:b2:e7:42:6a:
2b:d7:3a:89:df:26:44:f3:cd:a6:7c:5e:d7:28:a7:30:50:87:
f6:a7:20:1e:83:e3:b5:be:48:d6:fc:98:d3:85:1a:d5:ff:cc:
51:91:77:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLNrgxjlGEn4NJP6NgCgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk
OGRmMzEwHhcNMjYwNDE3MTYwMTE4WhcNMjYwNDE4MTYwMTE4WjAzMTEwLwYDVQQD
Eyg5ODcyZTUyMzI1NGIxNGRjMGE3YmVmNTllOTdhNzAxN2ZkMmQ5NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38rAAWtR9OYVDqMIEqE4CuQSgsNR
NnHeVn+HfiWVko7CfUKfZGfu+W8Q2D/vT5++tqspqUSWt5rIJRCA5TG4y5I59X7F
IxGKkQHOpnxPLEXFwH27y6bvlKBzj1ha57PukTWnzaMWkU6+4/qXN79g65AnaSPs
48WmkCKXlAHIaQGqiu8PwAEGQtwxNQOE88yT7exz+9OX9wMwZyXL2Nfbm8takKs0
gyCLRxbxV6vLv1LXLhcRZDPRPOKaohnvShMSAfAIaRrph5heNPrJhQSA91r6OT7W
w7Syz/1+qkyBMERHiSLzv7ayo1FVA34FNhsTme+cUWof39axctObqh25bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhy5SMlSxTcCnvvWel6cBf9LZSAMB8GA1UdIwQY
MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt
MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw
LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxDGAAzI
q2weki6NJwlvvLZzyO9wqbibW6kx8DKkCFY7eypMfDdHGlI9R86rWi2am0DUag68
sV1gR7qOLdlSNpm9fNJnaEvlBbS8HdIbt4xW9+WWD1RBOvJjbCZHoQ3Fm8Hw6ehx
/MrhPLRfNP1lV6UBosOO3feoGegoCKeNpeCJH33bWycRlmKsgFvUGPOJvQwQf5dT
drNZLJSDBDQb2gYWsABekmvHJQr8N2Z80ZA/XTGnOkD+CGaNenNZIsKKIUPquzmb
rIKhLeXpD0ozmIFLrGSy50JqK9c6id8mRPPNpnxe1yinMFCH9qcgHoPjtb5I1vyY
04Ua1f/MUZF3Pw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:54 2026 by rpki-client