Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: vCoYAaGRIXobfPBItz7BoufZGQdwFFRCtyVOccQkrtw=
Subject key identifier: 23:66:0A:32:24:A6:B0:11:C4:DA:64:E0:B0:4D:A6:03:79:96:6A:EC
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 019CABA1EE694C2B1A67A1DE28EE6224E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: F4_6vm4Y26JBMzR_Y_dxpPQFkQs.roa (hash: Gu3DZ3eZb3x6LcHfAUgXfPenNxtzgzeOBfwF8ARfW7s=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: vvCXZgU0bI2QJ82ufrnBpf9dGuAMcKt8gU3Rf2d+s0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ee:69:4c:2b:1a:67:a1:de:28:ee:62:24:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=23660a3224a6b011c4da64e0b04da60379966aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:3d:5f:be:22:55:69:29:fb:91:08:ed:31:
35:66:bb:e0:2c:89:56:69:d3:60:99:11:55:e4:f7:
03:15:02:da:43:cc:11:f3:80:81:d4:bb:0c:fe:fd:
47:57:fd:b9:8c:56:0e:e7:dd:02:bf:b2:91:c2:f8:
f0:83:d0:ea:ca:c8:77:11:24:40:1b:bd:1e:a9:c4:
0a:f8:7d:ed:c6:05:1a:07:4a:61:67:08:ef:8a:42:
e9:aa:2b:99:e7:d2:bf:33:0d:2f:70:80:a9:13:92:
18:59:55:c0:a6:c0:06:7f:c4:4a:05:da:92:ea:04:
60:59:6f:08:db:6c:79:b4:ff:d3:54:4c:0e:6f:59:
ca:04:42:06:22:3c:fc:b9:57:8d:43:9c:c8:47:1e:
35:9e:22:bb:6b:13:23:40:f5:63:cd:a7:8f:59:e6:
ec:5a:70:b1:25:e0:3c:c2:0f:30:31:18:f9:ca:27:
da:97:ac:04:9c:39:82:30:9b:41:44:1b:bc:29:5e:
25:48:61:0e:aa:73:84:38:da:3f:e5:c8:59:c4:69:
36:cd:28:ac:1d:96:28:f2:8a:ef:7e:2b:ba:bf:26:
c7:05:24:f7:d6:3d:ba:5f:bb:ba:1a:cc:d8:0f:08:
50:60:35:37:cb:ce:98:4f:07:ef:e5:7f:a6:f4:91:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:0A:32:24:A6:B0:11:C4:DA:64:E0:B0:4D:A6:03:79:96:6A:EC
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:34:04:52:01:d8:c9:49:ea:b1:02:60:a7:e8:95:8e:d3:83:
5c:97:93:29:e6:fc:25:c0:af:29:66:fc:5d:90:f8:c5:d8:2d:
99:97:28:95:1e:8b:67:7e:d4:7b:d3:35:19:58:2d:a6:47:ca:
6a:e5:06:c4:77:a8:b4:70:a9:c3:9c:76:51:f8:75:b8:ef:9e:
1a:5b:05:49:3a:24:07:4d:bf:f6:6f:a7:87:0f:c3:a3:9e:4a:
ea:e1:8e:e4:9a:c8:d7:6a:e3:2b:da:f4:98:76:c8:d0:6f:d7:
70:ae:b0:f2:d8:fb:5d:26:3d:1d:ab:25:5f:fd:2e:35:a6:b2:
2a:f0:ca:63:d6:5c:75:1a:0f:af:f7:96:3b:df:2b:ca:c3:52:
06:2a:89:d6:f6:c8:0a:88:b2:77:0a:18:76:06:a2:f8:16:2b:
fc:d2:55:da:f5:05:4c:35:8b:48:eb:48:25:f3:38:6e:36:82:
5a:0c:1d:1b:49:9c:12:e2:74:8e:1e:64:79:d9:72:88:78:64:
bc:bd:42:7f:c6:4d:1b:93:82:99:c2:27:8c:ec:f5:39:ed:59:
9d:95:91:89:b2:ca:d0:5c:eb:c7:a9:c4:0d:63:f9:32:a7:28:
31:6c:0e:15:02:dc:3f:c2:a4:96:7b:12:d5:5e:db:29:ec:48:
12:81:ff:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroe5pTCsaZ6HeKO5iJOjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGY4NmQwNDRhNGEyYTIzMzMxOTQxOGFhOGRhOWFkODM3
Yzc2ZWEwHhcNMjYwMzAxMjMwMDQyWhcNMjYwMzAyMjMwMDQyWjAzMTEwLwYDVQQD
EygyMzY2MGEzMjI0YTZiMDExYzRkYTY0ZTBiMDRkYTYwMzc5OTY2YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3M9X74iVWkp+5EI7TE1ZrvgLIlW
adNgmRFV5PcDFQLaQ8wR84CB1LsM/v1HV/25jFYO590Cv7KRwvjwg9Dqysh3ESRA
G70eqcQK+H3txgUaB0phZwjvikLpqiuZ59K/Mw0vcICpE5IYWVXApsAGf8RKBdqS
6gRgWW8I22x5tP/TVEwOb1nKBEIGIjz8uVeNQ5zIRx41niK7axMjQPVjzaePWebs
WnCxJeA8wg8wMRj5yifal6wEnDmCMJtBRBu8KV4lSGEOqnOEONo/5chZxGk2zSis
HZYo8orvfiu6vybHBST31j26X7u6GszYDwhQYDU3y86YTwfv5X+m9JGbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNmCjIkprARxNpk4LBNpgN5lmrsMB8GA1UdIwQY
MBaAFHgPhtBEpKKiMzGUGKqNqa2DfHbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDkt
NTI0ODAzZWUyOTQ5LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDktNTI0ODAzZWUyOTQ5
LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezQEUgHY
yUnqsQJgp+iVjtODXJeTKeb8JcCvKWb8XZD4xdgtmZcolR6LZ37Ue9M1GVgtpkfK
auUGxHeotHCpw5x2Ufh1uO+eGlsFSTokB02/9m+nhw/Do55K6uGO5JrI12rjK9r0
mHbI0G/XcK6w8tj7XSY9HaslX/0uNaayKvDKY9ZcdRoPr/eWO98rysNSBiqJ1vbI
CoiydwoYdgai+BYr/NJV2vUFTDWLSOtIJfM4bjaCWgwdG0mcEuJ0jh5kedlyiHhk
vL1Cf8ZNG5OCmcInjOz1Oe1ZnZWRibLK0Fzrx6nEDWP5MqcoMWwOFQLcP8KklnsS
1V7bKexIEoH/Og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:51 2026 by rpki-client