Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: OYOv+4JZYucE2aBJnsRZHPmtFGN1yMR2UBqV4UPOrWA=
Subject key identifier: DA:06:EB:49:A1:0C:78:B7:D6:3B:49:C0:13:CC:5B:D2:DF:33:8A:97
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019CAEDA5DE72B4A235DEC1F7A95404D10B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 1559
Signing time: Mon 02 Mar 2026 14:01:12 +0000
Manifest this update: Mon 02 Mar 2026 14:01:12 +0000
Manifest next update: Tue 03 Mar 2026 14:01:12 +0000
Files and hashes: 1: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: /a4aFkH93Slxum9FvMZOTaAl0hxjSxc/8pWa/y139yY=)
2: g4RYmNig4J0sVJiMkj_qIgt2ecc.roa (hash: AMXXhy9XoCJvEM2f7TVsKWyuskZydY3c3G++2kcR1RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:5d:e7:2b:4a:23:5d:ec:1f:7a:95:40:4d:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Mar 2 14:01:12 2026 GMT
Not After : Mar 3 14:01:12 2026 GMT
Subject: CN=da06eb49a10c78b7d63b49c013cc5bd2df338a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:34:73:10:6f:b0:c5:e5:99:6b:46:5f:53:
fe:cb:73:e5:13:8a:fd:70:51:10:62:21:83:39:87:
61:46:3c:53:02:ed:76:7e:83:30:1c:ad:6e:6c:7a:
b2:48:0d:48:65:23:77:48:7f:50:ee:68:16:d1:35:
83:fc:8d:a2:fd:26:23:1c:96:36:80:cd:99:ee:27:
bd:c5:23:fa:25:2d:27:c8:bd:38:e9:fd:4c:33:79:
e1:17:61:41:ee:48:75:86:39:a3:03:32:25:6f:39:
64:4e:89:ec:73:70:ca:e6:11:26:77:9c:1a:df:9c:
67:e7:57:8b:e7:a6:ec:6e:ce:82:c9:fc:ca:e9:88:
b6:27:1f:1c:b3:9f:70:94:b9:6f:b5:ca:49:d8:56:
70:a6:b4:9b:f8:94:af:ed:77:31:53:c9:44:2e:aa:
fd:9d:7d:ce:f8:16:a6:ef:71:8e:72:2a:b7:95:95:
fb:64:f3:a2:9b:b0:f7:dc:3a:65:15:c9:18:b4:b2:
a0:9b:b0:b3:32:7b:ca:d8:6f:22:4a:0c:f9:fa:a4:
22:97:ef:21:7b:b9:16:88:82:d0:0f:30:28:42:5f:
e6:5d:aa:da:2f:ad:f0:d0:cd:a5:d8:d0:8a:de:4b:
c8:f2:0f:b4:0f:99:1c:5f:f8:b8:1b:39:a5:4a:2b:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:EB:49:A1:0C:78:B7:D6:3B:49:C0:13:CC:5B:D2:DF:33:8A:97
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:0e:b9:ff:83:6d:21:f0:14:19:aa:f9:cb:ca:92:6a:5d:
79:2c:90:a5:a9:2f:b4:90:e9:cb:1e:b9:f8:bf:18:33:f3:8d:
b6:44:2e:ec:47:3c:79:7b:a1:7c:94:4a:7c:07:da:c8:d0:4c:
85:72:f1:de:d9:d9:24:9a:43:11:86:aa:20:43:be:83:63:90:
fd:48:18:bb:a5:39:73:41:03:b8:2f:53:82:0a:bb:86:56:7f:
96:f5:b8:f5:b5:b4:f9:55:8e:eb:5a:d8:30:9b:4c:85:b0:a8:
a8:e0:4c:95:c2:09:6c:64:60:ac:33:33:b5:b5:07:d9:9b:65:
21:27:29:b2:b2:fe:c6:54:3f:d2:0d:61:a5:7f:d3:4c:3e:97:
7b:e0:df:df:e7:71:e9:6b:48:c3:f3:47:d1:ad:f4:45:8f:ce:
30:7e:1c:e5:dc:6d:7d:7f:c7:ce:ab:ac:68:36:ed:c0:fe:5b:
aa:21:4f:90:8e:79:34:03:a0:21:bb:33:a2:00:19:b2:c7:bb:
57:aa:00:26:f1:c7:17:0d:e4:cd:1e:ed:77:cf:00:98:37:34:
a1:54:9a:f8:bf:10:be:43:b2:97:96:c1:0b:1c:e3:06:02:24:
5d:11:0a:8a:e8:90:64:ac:39:69:cd:ec:31:fc:fb:46:36:c7:
03:96:a8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2l3nK0ojXewfepVATRCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDhkZTIwMmUxNzRjYjIzNzQ2ZGNiZGVlYThhOWQ0NDk1
ODAwMTkwHhcNMjYwMzAyMTQwMTEyWhcNMjYwMzAzMTQwMTEyWjAzMTEwLwYDVQQD
EyhkYTA2ZWI0OWExMGM3OGI3ZDYzYjQ5YzAxM2NjNWJkMmRmMzM4YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG80cxBvsMXlmWtGX1P+y3PlE4r9
cFEQYiGDOYdhRjxTAu12foMwHK1ubHqySA1IZSN3SH9Q7mgW0TWD/I2i/SYjHJY2
gM2Z7ie9xSP6JS0nyL046f1MM3nhF2FB7kh1hjmjAzIlbzlkTonsc3DK5hEmd5wa
35xn51eL56bsbs6CyfzK6Yi2Jx8cs59wlLlvtcpJ2FZwprSb+JSv7XcxU8lELqr9
nX3O+Bam73GOciq3lZX7ZPOim7D33DplFckYtLKgm7CzMnvK2G8iSgz5+qQil+8h
e7kWiILQDzAoQl/mXaraL63w0M2l2NCK3kvI8g+0D5kcX/i4GzmlSivA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoG60mhDHi31jtJwBPMW9LfM4qXMB8GA1UdIwQY
MBaAFHkI3iAuF0yyN0bcve6oqdRJWAAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMt
NTYxZDVmZjhkYzBlLzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMtNTYxZDVmZjhkYzBl
LzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ4Ouf+D
bSHwFBmq+cvKkmpdeSyQpakvtJDpyx65+L8YM/ONtkQu7Ec8eXuhfJRKfAfayNBM
hXLx3tnZJJpDEYaqIEO+g2OQ/UgYu6U5c0EDuC9Tggq7hlZ/lvW49bW0+VWO61rY
MJtMhbCoqOBMlcIJbGRgrDMztbUH2ZtlIScpsrL+xlQ/0g1hpX/TTD6Xe+Df3+dx
6WtIw/NH0a30RY/OMH4c5dxtfX/HzqusaDbtwP5bqiFPkI55NAOgIbszogAZsse7
V6oAJvHHFw3kzR7td88AmDc0oVSa+L8QvkOyl5bBCxzjBgIkXREKiuiQZKw5ac3s
Mfz7RjbHA5aoow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:23 2026 by rpki-client