Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: ea0g53cbhpuarKjkaRKxacmh+ruY4Nu38+MlrFc+qbA=
Subject key identifier: 4A:54:FA:BC:12:1A:D1:92:FA:8D:C8:AC:50:59:68:FE:F7:11:DA:6C
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 01A0CCA2F5C2E459EF537BBE15D6623A5B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: 01BD
Signing time: Wed 23 Sep 2026 05:00:26 +0000
Manifest this update: Wed 23 Sep 2026 05:00:26 +0000
Manifest next update: Thu 24 Sep 2026 05:00:26 +0000
Files and hashes: 1: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (hash: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: F2FeBq3FWzOcmQTli1ADwUTQ2R3MaENCRbaVewsqhpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:f5:c2:e4:59:ef:53:7b:be:15:d6:62:3a:5b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Sep 23 05:00:26 2026 GMT
Not After : Sep 24 05:00:26 2026 GMT
Subject: CN=4a54fabc121ad192fa8dc8ac505968fef711da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:59:64:e2:f8:cd:61:55:11:c8:60:8d:52:
d8:fd:3e:c2:01:18:16:45:19:b2:62:b4:e6:c6:61:
1f:2d:82:dc:15:cf:2d:8c:3c:59:0d:f0:cb:bf:70:
6a:39:39:e8:21:54:f5:98:bc:c5:58:98:41:21:eb:
5e:58:37:b1:bc:30:51:af:cb:90:d2:65:13:ef:a9:
8e:b4:97:03:10:10:b5:78:4a:cd:40:e7:7d:72:82:
b1:0d:ba:01:14:3a:b8:42:75:6d:61:f1:f4:50:95:
0c:ae:0b:ed:bb:f6:e6:fa:22:0a:15:51:28:c4:3e:
82:d8:75:62:91:2a:74:00:b4:86:01:41:5d:6f:8b:
95:5c:73:0b:37:65:67:b3:39:7d:07:0c:02:25:88:
a4:8e:00:4b:e3:a3:ef:a8:52:e7:e8:04:75:26:38:
bd:ad:12:b1:44:9c:bd:3d:89:49:57:3a:05:82:f5:
18:79:30:f8:2a:f7:75:3c:47:c8:fc:d7:3f:a4:30:
9a:41:4a:92:ea:cc:a2:73:74:c8:f0:20:4d:94:df:
41:2a:b4:2c:b6:15:8e:d9:13:17:ce:8b:4d:1f:3e:
c2:d3:73:3c:45:45:5a:9d:c9:68:58:be:22:e9:db:
f9:49:26:95:ed:f4:63:39:be:43:c6:aa:f4:75:cd:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:FA:BC:12:1A:D1:92:FA:8D:C8:AC:50:59:68:FE:F7:11:DA:6C
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:eb:3b:0e:8e:02:e4:01:77:42:53:5c:2e:fa:8e:dd:96:8b:
12:c6:4b:d0:13:11:b0:ce:7e:a9:34:2f:ce:05:20:ce:59:16:
13:1b:0e:d2:0c:e2:2a:0f:1c:bb:0f:b0:bc:55:fe:3f:e4:5a:
ce:8a:53:40:50:6f:5b:5b:c8:bd:f3:8f:62:61:d7:9d:e8:5a:
c2:cc:b7:01:c8:f2:bb:6f:93:cf:35:b0:b3:9f:cd:34:8c:a3:
45:c4:70:b2:ee:3c:98:12:08:bf:c9:93:f9:fb:dd:61:91:53:
98:46:7a:66:4d:74:5b:c5:3f:27:bb:68:49:59:ca:34:a7:fd:
9b:05:6e:01:ee:16:52:5d:ae:a5:22:3d:dc:2a:12:df:6c:ad:
8f:cb:3c:89:6f:62:21:95:75:e3:fe:06:07:fc:b8:c3:0d:fa:
a0:78:93:fd:6d:8b:7a:36:f6:85:d7:45:5a:f3:91:bd:1e:d6:
07:fc:a7:c9:c6:76:71:2d:16:ad:ab:45:df:50:53:00:42:d8:
3a:59:49:f2:20:1c:34:cf:c8:e3:ce:bc:49:ae:9c:cf:3e:66:
86:d7:57:9c:1a:13:0b:25:89:52:71:bd:17:ed:af:3c:f2:f2:
67:d6:0f:a0:ba:07:cd:d6:cf:8f:bd:44:9c:aa:c1:2f:fc:e9:
63:c5:73:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMovXC5FnvU3u+FdZiOlt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNDlkMGIwMzYzZTdhNjQwODNlMmU1NGNjMzAxZjUxNGFl
MDg5MTAwHhcNMjYwOTIzMDUwMDI2WhcNMjYwOTI0MDUwMDI2WjAzMTEwLwYDVQQD
Eyg0YTU0ZmFiYzEyMWFkMTkyZmE4ZGM4YWM1MDU5NjhmZWY3MTFkYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5BZZOL4zWFVEchgjVLY/T7CARgW
RRmyYrTmxmEfLYLcFc8tjDxZDfDLv3BqOTnoIVT1mLzFWJhBIeteWDexvDBRr8uQ
0mUT76mOtJcDEBC1eErNQOd9coKxDboBFDq4QnVtYfH0UJUMrgvtu/bm+iIKFVEo
xD6C2HVikSp0ALSGAUFdb4uVXHMLN2Vnszl9BwwCJYikjgBL46PvqFLn6AR1Jji9
rRKxRJy9PYlJVzoFgvUYeTD4Kvd1PEfI/Nc/pDCaQUqS6syic3TI8CBNlN9BKrQs
thWO2RMXzotNHz7C03M8RUVancloWL4i6dv5SSaV7fRjOb5Dxqr0dc05+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpU+rwSGtGS+o3IrFBZaP73EdpsMB8GA1UdIwQY
MBaAFHtJ0LA2PnpkCD4uVMwwH1FK4IkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTBuUXNEWS1lbVFJUGk1VXpEQWZVVXJnaVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kYjM0MjAtNTk0Ny00OTRlLTk0ZGUt
NmE3MzcxNmQ5NmQ4LzEvZTBuUXNEWS1lbVFJUGk1VXpEQWZVVXJnaVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kYjM0MjAtNTk0Ny00OTRlLTk0ZGUtNmE3MzcxNmQ5NmQ4
LzEvZTBuUXNEWS1lbVFJUGk1VXpEQWZVVXJnaVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaes7Do4C
5AF3QlNcLvqO3ZaLEsZL0BMRsM5+qTQvzgUgzlkWExsO0gziKg8cuw+wvFX+P+Ra
zopTQFBvW1vIvfOPYmHXnehawsy3Acjyu2+TzzWws5/NNIyjRcRwsu48mBIIv8mT
+fvdYZFTmEZ6Zk10W8U/J7toSVnKNKf9mwVuAe4WUl2upSI93CoS32ytj8s8iW9i
IZV14/4GB/y4ww36oHiT/W2Lejb2hddFWvORvR7WB/ynycZ2cS0WratF31BTAELY
OllJ8iAcNM/I4868Sa6czz5mhtdXnBoTCyWJUnG9F+2vPPLyZ9YPoLoHzdbPj71E
nKrBL/zpY8VzkQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:43:21 2026 by rpki-client