Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: t+FYyRB9yv+pKFJOOKWSLYS/W6/hTP4dGORWH6+baJ4=
Subject key identifier: A3:D7:9C:2F:8A:D5:17:66:CE:9C:E6:EB:19:AA:97:C6:A5:68:C8:0D
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019DA4C1FBCBC4A82E91E6E9E0E6A7736F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 0597
Signing time: Sun 19 Apr 2026 08:01:09 +0000
Manifest this update: Sun 19 Apr 2026 08:01:09 +0000
Manifest next update: Mon 20 Apr 2026 08:01:09 +0000
Files and hashes: 1: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: wyZGBy4uVhhCiXbOSgKyxSk4d9ERyAxMjOel6OafHVo=)
2: TJRxaYOzjaCJSFBaaOb3EycksAs.roa (hash: eOSY9kDDMBMljbLW+yYUj3pzdf96TWtB5cU/Op3wa8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:fb:cb:c4:a8:2e:91:e6:e9:e0:e6:a7:73:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Apr 19 08:01:09 2026 GMT
Not After : Apr 20 08:01:09 2026 GMT
Subject: CN=a3d79c2f8ad51766ce9ce6eb19aa97c6a568c80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:45:54:b1:70:d8:25:12:a8:28:b5:49:e8:
80:c0:39:8f:b1:a2:15:95:6e:32:82:00:0c:4d:c0:
ac:fb:e1:e9:41:f1:81:ad:44:83:6e:22:17:e7:2c:
ba:4f:09:db:da:89:7c:b6:06:70:6c:92:9d:a8:8f:
cc:61:b1:1e:76:ba:37:74:ae:f0:00:75:b1:cf:54:
85:d0:bd:ce:15:92:67:f3:35:f8:18:53:2a:9c:96:
e8:4e:cc:c6:cb:43:60:21:1b:3f:2f:c4:0c:f3:d2:
5d:bb:d6:ae:9c:f9:21:20:b1:dc:17:7c:49:b3:e4:
2a:64:f9:8b:3b:82:99:43:b5:26:e1:94:a9:c2:62:
ef:16:1b:2a:a6:52:dd:d3:03:3f:c4:21:cd:b2:b5:
49:27:d7:ad:88:0c:f3:74:20:fe:5e:af:70:b0:af:
93:47:ce:44:f2:ca:96:f5:8a:7e:06:13:70:a4:a2:
61:8a:d7:4a:0e:f3:6e:2e:88:e9:d3:19:50:8a:e3:
c3:1f:0a:88:ba:85:b0:60:51:5d:a7:a1:5a:39:67:
07:b6:e3:93:5c:4b:16:85:c7:94:02:52:fe:f1:6d:
57:d8:6d:de:4e:1c:0f:1e:40:9a:51:3f:64:12:04:
18:73:57:dd:0d:0b:84:ec:fc:fc:8d:3a:c5:85:84:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D7:9C:2F:8A:D5:17:66:CE:9C:E6:EB:19:AA:97:C6:A5:68:C8:0D
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:b8:b7:94:8f:f1:13:86:c4:a2:6d:86:9a:8b:04:44:0e:
17:cc:76:c5:98:2f:58:9b:14:9a:6a:6b:5e:cb:b0:29:79:5d:
1d:a5:48:fa:96:63:f3:ee:07:e6:1a:a6:2c:0f:0a:4c:c9:19:
12:33:3e:4f:cc:6b:89:18:28:ab:53:2a:ad:83:e1:15:f8:a3:
21:e3:48:b6:ef:51:0a:e9:82:34:3b:04:32:ef:4e:aa:95:c0:
b4:7a:78:1d:b4:d7:cb:a3:ac:b2:94:ce:65:0a:c2:77:94:56:
d1:a2:e1:97:ae:2a:34:31:bb:27:c2:d9:64:f7:83:94:72:c0:
c3:8a:6c:6f:95:c5:99:88:72:62:3d:dd:81:a1:c3:fe:4e:af:
d1:01:16:91:c8:36:b6:10:63:6f:8f:a9:c4:88:92:f2:7a:0f:
a1:da:33:ee:c1:17:10:9f:a9:a8:fe:73:12:a3:fc:de:b1:4b:
a4:a2:5d:9a:fe:63:6a:c9:c6:1b:36:81:e1:ed:9d:d6:04:80:
85:6d:97:62:e4:ad:30:d9:48:e2:3c:6b:21:a9:d6:9a:aa:1c:
92:0c:d7:4c:d3:a2:7d:cf:22:49:7a:e2:6d:35:b8:75:4c:7b:
32:1c:01:87:a5:25:ec:1b:20:ae:85:d3:9a:02:eb:0b:cd:04:
e1:bc:89:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwfvLxKgukebp4Oanc29rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2EwNGE5MjcwMTljM2NlMmQwYzlkYjNhMzE0OTc3YTBh
N2IzNWMwHhcNMjYwNDE5MDgwMTA5WhcNMjYwNDIwMDgwMTA5WjAzMTEwLwYDVQQD
EyhhM2Q3OWMyZjhhZDUxNzY2Y2U5Y2U2ZWIxOWFhOTdjNmE1NjhjODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dFFVLFw2CUSqCi1SeiAwDmPsaIV
lW4yggAMTcCs++HpQfGBrUSDbiIX5yy6Twnb2ol8tgZwbJKdqI/MYbEedro3dK7w
AHWxz1SF0L3OFZJn8zX4GFMqnJboTszGy0NgIRs/L8QM89Jdu9aunPkhILHcF3xJ
s+QqZPmLO4KZQ7Um4ZSpwmLvFhsqplLd0wM/xCHNsrVJJ9etiAzzdCD+Xq9wsK+T
R85E8sqW9Yp+BhNwpKJhitdKDvNuLojp0xlQiuPDHwqIuoWwYFFdp6FaOWcHtuOT
XEsWhceUAlL+8W1X2G3eThwPHkCaUT9kEgQYc1fdDQuE7Pz8jTrFhYRXzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPXnC+K1Rdmzpzm6xmql8alaMgNMB8GA1UdIwQY
MBaAFBF6BKknAZw84tDJ2zoxSXegp7NcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5Yzkt
MTFjMzAwOWY0NGRmLzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5YzktMTFjMzAwOWY0NGRm
LzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8G4t5SP
8ROGxKJthpqLBEQOF8x2xZgvWJsUmmprXsuwKXldHaVI+pZj8+4H5hqmLA8KTMkZ
EjM+T8xriRgoq1MqrYPhFfijIeNItu9RCumCNDsEMu9OqpXAtHp4HbTXy6OsspTO
ZQrCd5RW0aLhl64qNDG7J8LZZPeDlHLAw4psb5XFmYhyYj3dgaHD/k6v0QEWkcg2
thBjb4+pxIiS8noPodoz7sEXEJ+pqP5zEqP83rFLpKJdmv5jasnGGzaB4e2d1gSA
hW2XYuStMNlI4jxrIanWmqockgzXTNOifc8iSXribTW4dUx7MhwBh6Ul7BsgroXT
mgLrC80E4byJFw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:25 2026 by rpki-client