Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
File: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft (raw, json)
Hash identifier: o1ewuWyEWb1bXroO3l2cLS0J/ujzKxfR08ns2Uev7MA=
Subject key identifier: 8A:3A:88:7A:95:14:10:D9:0C:63:57:1D:B6:AC:35:21:6F:50:5C:9C
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial: 019FAB9A2893283A2D309F8A7E61E050F384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
Manifest number: 0259
Signing time: Wed 29 Jul 2026 02:00:34 +0000
Manifest this update: Wed 29 Jul 2026 02:00:34 +0000
Manifest next update: Thu 30 Jul 2026 02:00:34 +0000
Files and hashes: 1: VP7p7QWMGVsrXJpO4NYHANZrxFg.roa (hash: G8VyFd0PCuQnnq9N5MqzV/bE1ybVAE0qxw/z0bEFIbE=)
2: c0rxrQoEWqWrd8tyLYNrU8iupbU.roa (hash: OO2iQo06n11TlqHfIIjfSy8I3N4op5PTjoqiameHkZA=)
3: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl (hash: 781is/vS1G99GoMMsosiY8oLRIPf5e2hxJoiXFuG5jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:28:93:28:3a:2d:30:9f:8a:7e:61:e0:50:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
Validity
Not Before: Jul 29 02:00:34 2026 GMT
Not After : Jul 30 02:00:34 2026 GMT
Subject: CN=8a3a887a951410d90c63571db6ac35216f505c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:4a:c4:b9:96:e5:52:03:a4:01:97:0a:54:
49:8f:32:8e:34:b5:45:7c:28:0f:a5:60:2a:e3:7c:
85:55:71:b9:24:27:d6:4c:2c:b0:3c:4c:58:2e:c4:
b4:e3:b1:05:aa:1e:26:f8:54:b3:6f:8d:b4:98:75:
bd:f2:e8:36:72:a7:a3:e2:d2:f8:ea:42:19:fd:72:
44:c4:c7:ee:42:0c:02:e5:ed:17:a0:6b:4b:c2:d6:
c4:c4:f8:a9:f5:73:ce:20:ac:65:f5:1c:18:df:43:
ff:17:24:db:82:37:29:84:4a:3d:2e:75:cc:e6:08:
71:5f:58:c0:77:aa:0f:d5:22:7d:c0:95:7a:5d:1a:
6c:a7:22:54:eb:dc:4f:2b:df:e2:65:12:e4:99:ec:
55:df:c3:67:3f:c6:fc:84:42:b5:09:d3:2c:ac:52:
b8:f9:b8:72:29:1e:38:b8:67:1e:f7:53:07:09:53:
c8:c3:41:38:53:3e:c1:1a:2b:11:89:37:76:65:18:
71:00:d4:cd:04:98:67:02:d7:57:1d:be:06:24:97:
15:a2:15:ee:38:89:c3:e0:81:40:b7:44:58:ad:06:
79:1f:8f:4e:72:46:9c:e9:a0:37:a7:7b:6f:af:a1:
a7:eb:96:ce:6b:19:0d:da:15:53:10:21:3f:d9:6e:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:88:7A:95:14:10:D9:0C:63:57:1D:B6:AC:35:21:6F:50:5C:9C
X509v3 Authority Key Identifier:
keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c2:8f:85:0e:be:a1:fd:61:5d:44:38:fd:dd:16:d6:fa:16:
78:c5:48:9c:56:c5:66:ea:a3:90:b0:3f:92:aa:a1:6a:0c:93:
b9:8d:7d:cb:cc:27:ab:d5:39:14:da:db:d9:37:eb:98:e8:48:
7f:a3:21:e0:b6:c2:3c:46:83:24:f5:e1:08:5b:49:3b:81:a9:
40:ea:8d:4f:1a:db:f9:65:89:34:df:d3:18:c8:39:4e:06:1c:
cc:5c:de:41:c5:08:80:f2:82:1a:e4:57:16:ef:69:5d:08:7e:
f4:e1:b6:f5:56:b0:9f:06:a8:7e:db:b1:8f:2e:0f:0f:49:8c:
41:2b:e6:f7:0f:7b:0c:1f:aa:fd:87:3a:2d:42:8f:a5:3e:c1:
89:29:3f:d6:29:72:d7:3d:c5:6e:9d:51:4c:a2:bc:99:4c:60:
f9:42:ca:a4:d6:58:42:29:e5:6a:72:43:36:40:be:0f:67:c4:
6a:02:b3:11:3b:74:c4:54:c1:f3:ff:f8:de:4c:85:56:ef:76:
df:ee:8a:1c:05:e0:13:6a:46:8e:6b:3f:f7:6d:3c:5d:7f:89:
e4:b1:4d:7e:c8:58:26:79:bf:6e:41:6e:87:cd:58:46:6d:9c:
60:c2:cb:3f:d5:26:3f:e3:50:d4:4b:97:93:01:4d:10:74:86:
67:b2:6e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmiiTKDotMJ+KfmHgUPOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDY2NDdkOWQ1NzU5YTAxZjhkMTg2NjhhMzc3YzA2M2Zm
NTkxMzYwHhcNMjYwNzI5MDIwMDM0WhcNMjYwNzMwMDIwMDM0WjAzMTEwLwYDVQQD
Eyg4YTNhODg3YTk1MTQxMGQ5MGM2MzU3MWRiNmFjMzUyMTZmNTA1YzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSpKxLmW5VIDpAGXClRJjzKONLVF
fCgPpWAq43yFVXG5JCfWTCywPExYLsS047EFqh4m+FSzb420mHW98ug2cqej4tL4
6kIZ/XJExMfuQgwC5e0XoGtLwtbExPip9XPOIKxl9RwY30P/FyTbgjcphEo9LnXM
5ghxX1jAd6oP1SJ9wJV6XRpspyJU69xPK9/iZRLkmexV38NnP8b8hEK1CdMsrFK4
+bhyKR44uGce91MHCVPIw0E4Uz7BGisRiTd2ZRhxANTNBJhnAtdXHb4GJJcVohXu
OInD4IFAt0RYrQZ5H49Ockac6aA3p3tvr6Gn65bOaxkN2hVTECE/2W7zDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo6iHqVFBDZDGNXHbasNSFvUFycMB8GA1UdIwQY
MBaAFHlGZH2dV1mgH40YZoo3fAY/9ZE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYt
ZTRiYWQzNGJiZWZmLzEvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYtZTRiYWQzNGJiZWZm
LzEvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcKPhQ6+
of1hXUQ4/d0W1voWeMVInFbFZuqjkLA/kqqhagyTuY19y8wnq9U5FNrb2TfrmOhI
f6Mh4LbCPEaDJPXhCFtJO4GpQOqNTxrb+WWJNN/TGMg5TgYczFzeQcUIgPKCGuRX
Fu9pXQh+9OG29Vawnwaoftuxjy4PD0mMQSvm9w97DB+q/Yc6LUKPpT7BiSk/1ily
1z3Fbp1RTKK8mUxg+ULKpNZYQinlanJDNkC+D2fEagKzETt0xFTB8//43kyFVu92
3+6KHAXgE2pGjms/9208XX+J5LFNfshYJnm/bkFuh81YRm2cYMLLP9UmP+NQ1EuX
kwFNEHSGZ7JujQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:45 2026 by rpki-client