Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: WYWZNJGnspEVTixDCiZPXMnuqJ33DQAidQKEOD9TZNg=
Subject key identifier: 5A:31:D7:79:94:06:5C:53:E4:72:F6:FC:AD:F7:B2:E5:30:5B:F8:AA
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019CAAC6CBF6E39178DD5053FF644FEB007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: iEM+sNFUywF5DhNXJtK04YhibElaLBclY248xzSCGBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cb:f6:e3:91:78:dd:50:53:ff:64:4f:eb:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=5a31d77994065c53e472f6fcadf7b2e5305bf8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:8d:77:ad:f3:11:2e:6f:56:5d:63:46:17:
e7:0f:c2:db:6e:25:ea:26:8f:7c:9c:72:0f:05:2d:
53:1f:bb:74:75:45:cc:a1:69:46:70:26:86:4d:4a:
90:0d:07:5a:62:6a:b5:3e:24:9c:1b:e0:53:0a:ea:
48:8b:e7:87:17:db:a6:11:53:35:b8:6b:26:9d:c1:
85:48:bd:a5:67:51:9d:f8:fc:85:7d:f2:62:40:30:
69:59:82:79:4c:ed:7c:2e:d7:12:9b:02:56:0b:b4:
24:9d:db:ca:d5:2a:bd:20:4b:50:f2:1e:72:8e:72:
42:95:74:78:f2:8d:5f:a2:08:32:ea:2c:1e:73:2c:
53:e5:d0:c4:8f:f0:32:67:63:44:d2:03:cf:10:2e:
fa:55:61:ac:96:29:8a:7f:79:2a:68:d8:13:f6:c6:
b7:b3:eb:16:fa:d9:a6:ba:f6:c7:ca:b4:44:c5:f0:
36:fa:e1:c7:21:2d:44:f9:a3:42:cd:4e:7e:0f:92:
d7:77:d4:28:8d:93:9e:8f:80:39:d6:85:46:fb:70:
35:ac:af:81:d9:ff:c3:f7:f8:d7:ed:25:b2:00:07:
1d:bb:80:03:df:47:c8:83:4b:03:4f:fa:3e:ae:43:
61:82:7c:3c:8d:0e:d3:1e:db:c9:ed:91:e5:6b:5c:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:D7:79:94:06:5C:53:E4:72:F6:FC:AD:F7:B2:E5:30:5B:F8:AA
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:68:6b:a9:e7:0e:b4:98:ba:96:01:34:a4:d8:48:22:b1:30:
64:9e:58:42:ab:e0:6b:c7:73:0c:95:66:e8:87:a9:7e:17:8c:
7f:75:8c:d6:a7:75:4d:cc:2f:40:59:c3:48:b5:c9:cf:9c:8e:
6a:ef:de:8f:f1:6d:cb:67:9f:d7:38:cc:05:41:09:db:d3:e9:
f7:d9:ab:37:ce:82:02:8b:a6:54:f5:3b:65:42:c4:8e:08:49:
b6:48:6d:64:b3:7b:19:80:25:5c:84:c7:7d:85:ce:a6:a0:2e:
99:70:c2:74:15:c1:0e:81:36:8b:5f:f4:39:08:77:c8:54:d3:
19:cf:ce:c1:24:d8:18:38:5e:7e:37:bf:db:ca:9d:67:8c:a4:
29:76:ba:46:79:1f:90:43:bd:60:83:e3:24:36:b1:0a:c9:1e:
9e:01:d7:73:7c:3b:63:75:71:f6:d1:c4:4b:f5:c4:f3:07:67:
34:62:47:07:0a:01:f5:0c:28:7b:c9:8e:5e:c8:5e:b8:a7:c0:
a1:d6:56:55:38:ea:b9:07:7d:70:98:7e:05:ec:51:43:a4:5e:
3f:ef:92:4b:87:2f:13:81:85:23:1a:d7:37:0b:67:88:1c:99:
6c:ba:82:df:80:7e:47:39:7b:59:0d:80:7b:c2:59:47:58:18:
25:95:e4:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsv245F43VBT/2RP6wB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi
MTg1YmIwHhcNMjYwMzAxMTkwMTIwWhcNMjYwMzAyMTkwMTIwWjAzMTEwLwYDVQQD
Eyg1YTMxZDc3OTk0MDY1YzUzZTQ3MmY2ZmNhZGY3YjJlNTMwNWJmOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j6Nd63zES5vVl1jRhfnD8LbbiXq
Jo98nHIPBS1TH7t0dUXMoWlGcCaGTUqQDQdaYmq1PiScG+BTCupIi+eHF9umEVM1
uGsmncGFSL2lZ1Gd+PyFffJiQDBpWYJ5TO18LtcSmwJWC7QkndvK1Sq9IEtQ8h5y
jnJClXR48o1foggy6iwecyxT5dDEj/AyZ2NE0gPPEC76VWGslimKf3kqaNgT9sa3
s+sW+tmmuvbHyrRExfA2+uHHIS1E+aNCzU5+D5LXd9QojZOej4A51oVG+3A1rK+B
2f/D9/jX7SWyAAcdu4AD30fIg0sDT/o+rkNhgnw8jQ7THtvJ7ZHla1w/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFox13mUBlxT5HL2/K33suUwW/iqMB8GA1UdIwQY
MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt
NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5
LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2hrqecO
tJi6lgE0pNhIIrEwZJ5YQqvga8dzDJVm6IepfheMf3WM1qd1TcwvQFnDSLXJz5yO
au/ej/Fty2ef1zjMBUEJ29Pp99mrN86CAoumVPU7ZULEjghJtkhtZLN7GYAlXITH
fYXOpqAumXDCdBXBDoE2i1/0OQh3yFTTGc/OwSTYGDhefje/28qdZ4ykKXa6Rnkf
kEO9YIPjJDaxCskengHXc3w7Y3Vx9tHES/XE8wdnNGJHBwoB9Qwoe8mOXsheuKfA
odZWVTjquQd9cJh+BexRQ6ReP++SS4cvE4GFIxrXNwtniByZbLqC34B+Rzl7WQ2A
e8JZR1gYJZXkjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:10 2026 by rpki-client