Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: /gqfA9Ll0CBjgMnt7tpyAXrrvK/NvLBPlXYcLdOKYqo=
Subject key identifier: 75:32:0C:2C:BC:C4:F6:E5:65:C7:F2:05:1E:15:2F:6B:96:01:C3:21
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 019CABD9D28804ED40027730ABDFA4C292BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 07FF
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: VHaxyZ0bnJK9cv+PeFtH35zNpn+xMT8slpefBuCqR9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d2:88:04:ed:40:02:77:30:ab:df:a4:c2:92:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=75320c2cbcc4f6e565c7f2051e152f6b9601c321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:52:cf:ff:06:17:5e:28:1d:c2:24:77:a3:
15:45:00:2d:e1:dd:9c:5a:69:4a:fc:44:ec:f1:c5:
6b:2b:4f:13:25:2c:2c:f7:42:44:26:e0:e6:42:53:
e7:9c:5a:78:1e:a5:45:e7:08:9b:e6:b7:45:52:fa:
f4:97:52:87:2e:62:e4:1e:47:d4:c9:a3:eb:04:28:
71:3f:45:c4:8d:f1:08:70:bd:cf:4d:66:b3:aa:51:
e7:db:38:3e:fa:62:7e:ed:c7:b3:fc:eb:b1:f0:20:
9a:cd:cf:5b:70:0f:38:96:42:e7:ea:4a:9a:c1:ee:
fc:be:bc:4f:01:4d:ea:a1:84:7a:cc:86:ee:47:53:
9b:72:ae:07:f6:a6:c4:8f:c4:2e:a8:01:28:71:c9:
54:a2:3a:f4:8c:d1:ad:2f:4f:3f:9c:2e:c0:26:9d:
92:ac:dd:96:8c:83:72:24:25:ed:e5:6f:f5:2a:72:
82:ea:bf:f9:cb:99:eb:f3:f9:49:7c:d6:a2:b8:8a:
d9:b0:62:43:f1:fa:4f:4f:af:9f:74:41:d1:ad:80:
80:2c:db:01:96:39:b8:81:b1:b8:3d:9d:a2:82:26:
db:a0:0d:1b:77:68:fa:4d:ac:73:fa:a4:f0:6d:8e:
08:45:f2:37:4d:8b:10:55:ca:94:3e:b9:c4:3e:91:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:0C:2C:BC:C4:F6:E5:65:C7:F2:05:1E:15:2F:6B:96:01:C3:21
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:3a:e6:b6:04:b9:1e:04:ae:dc:a2:88:71:32:4a:57:89:
2b:41:b4:08:db:5f:19:bc:a7:ee:bf:ab:46:47:f4:f7:63:84:
04:4b:92:61:f0:92:ad:07:db:8d:e8:65:54:f5:cc:cf:fb:61:
90:29:85:13:8e:85:d0:05:91:63:52:b2:e0:8f:0c:6e:dd:17:
d8:80:4e:a3:51:28:41:94:1b:6e:3c:1d:43:fd:cc:79:fc:d5:
a3:ac:93:d4:47:35:a2:33:ec:00:d9:5f:27:7b:da:b1:fb:bc:
ff:ce:07:b1:d0:99:77:5e:4c:b6:e4:73:83:a6:15:10:d0:a4:
87:26:b0:cf:27:5c:b9:9d:a2:ec:32:0a:75:b8:cb:37:0f:be:
bd:86:55:b7:66:0e:f4:cf:7d:33:51:ed:78:88:3f:9e:06:f0:
15:25:14:a3:d6:80:87:90:fb:91:f1:88:22:83:6d:34:32:d9:
73:43:03:1f:af:29:3e:d9:f1:3b:1e:dd:c9:6a:fa:f4:19:58:
5c:d0:29:e0:d9:46:af:48:60:ca:7c:b5:b9:a0:54:92:ea:fc:
b8:ed:c4:1c:c1:21:a4:57:c4:74:32:9d:a5:e1:d1:c6:cd:0c:
17:3f:2e:03:fb:cb:09:7b:fd:f7:47:46:10:b0:08:a1:5f:23:
e1:aa:c4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dKIBO1AAncwq9+kwpK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTU2YzE5YTQ1NTZmMzZmNzYwMDAwNmQ4ZWFjZDFmYTNm
NDM5ZjIwHhcNMjYwMzAyMDAwMTQ1WhcNMjYwMzAzMDAwMTQ1WjAzMTEwLwYDVQQD
Eyg3NTMyMGMyY2JjYzRmNmU1NjVjN2YyMDUxZTE1MmY2Yjk2MDFjMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+VSz/8GF14oHcIkd6MVRQAt4d2c
WmlK/ETs8cVrK08TJSws90JEJuDmQlPnnFp4HqVF5wib5rdFUvr0l1KHLmLkHkfU
yaPrBChxP0XEjfEIcL3PTWazqlHn2zg++mJ+7cez/Oux8CCazc9bcA84lkLn6kqa
we78vrxPAU3qoYR6zIbuR1Obcq4H9qbEj8QuqAEocclUojr0jNGtL08/nC7AJp2S
rN2WjINyJCXt5W/1KnKC6r/5y5nr8/lJfNaiuIrZsGJD8fpPT6+fdEHRrYCALNsB
ljm4gbG4PZ2igibboA0bd2j6Taxz+qTwbY4IRfI3TYsQVcqUPrnEPpG75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUyDCy8xPblZcfyBR4VL2uWAcMhMB8GA1UdIwQY
MBaAFHpVbBmkVW8292AABtjqzR+j9DnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMt
ZTNkMGEwYWNlMzk4LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMtZTNkMGEwYWNlMzk4
LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttQ65rYE
uR4ErtyiiHEySleJK0G0CNtfGbyn7r+rRkf092OEBEuSYfCSrQfbjehlVPXMz/th
kCmFE46F0AWRY1Ky4I8Mbt0X2IBOo1EoQZQbbjwdQ/3MefzVo6yT1Ec1ojPsANlf
J3vasfu8/84HsdCZd15MtuRzg6YVENCkhyawzydcuZ2i7DIKdbjLNw++vYZVt2YO
9M99M1HteIg/ngbwFSUUo9aAh5D7kfGIIoNtNDLZc0MDH68pPtnxOx7dyWr69BlY
XNAp4NlGr0hgyny1uaBUkur8uO3EHMEhpFfEdDKdpeHRxs0MFz8uA/vLCXv990dG
ELAIoV8j4arELw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:37 2026 by rpki-client