Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: cv9gojn29GkyNZHDUiI6MwiNxzScBH7Wo08hgrruIKo=
Subject key identifier: 8D:CA:56:65:C7:0D:C4:F8:2C:0B:05:40:AF:E5:79:45:2F:E3:B9:B2
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 019CAB6BAA7DF432D24A4FB8C9DABDAAFB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 06B5
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa (hash: 0Jfzcvn5KxpE+uRT7hhET5tdaNQSgWGkWhSb4S4MAyk=)
2: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (hash: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E=)
3: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: 7kEI7GMdmCbfDP0qerkHoafOYYzG/7kdT+MNubrRq+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:aa:7d:f4:32:d2:4a:4f:b8:c9:da:bd:aa:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=8dca5665c70dc4f82c0b0540afe579452fe3b9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:75:b7:1d:a8:76:ba:af:f3:99:04:47:64:
e6:6f:f5:6a:b2:94:5b:60:e4:e7:b0:1e:4c:5e:7f:
d8:26:84:d0:2a:5d:3c:d8:0f:09:a3:42:c6:1d:ec:
9f:10:27:ac:22:71:ad:0b:dc:80:4f:5e:5d:7a:cc:
8d:45:da:a3:a3:49:07:c4:3e:1f:b6:54:ba:5c:eb:
8b:b3:15:59:83:7f:9c:d0:fd:33:f7:48:84:88:0b:
33:e0:63:1a:18:0e:4b:17:d4:e8:ce:80:5e:c1:38:
40:76:9f:09:fb:94:dc:c1:fc:b3:d3:e0:2f:21:a5:
08:31:3c:00:17:da:7f:79:c3:0e:ff:a0:bd:22:8b:
30:73:0f:23:f8:d3:94:8b:bf:f3:9e:18:74:d2:53:
6f:77:0f:bd:ab:45:df:65:ed:2d:5e:c9:49:cb:19:
74:a4:f3:e9:f4:2a:aa:2b:cb:af:f9:6f:a2:da:48:
e9:a0:3d:99:9d:d9:6a:c6:49:a0:26:13:97:54:cb:
03:70:ae:ae:d0:f3:c6:a4:7f:b4:88:d4:5e:92:35:
5c:72:26:ce:02:57:32:1b:b3:00:8b:3b:76:d9:ba:
f8:7e:79:ef:60:bf:ae:42:30:76:bf:bc:0c:89:cc:
8f:ce:23:ca:2d:f0:a1:c0:c7:dd:68:1b:9a:a0:f9:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:56:65:C7:0D:C4:F8:2C:0B:05:40:AF:E5:79:45:2F:E3:B9:B2
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:f3:ad:8a:a7:f9:5e:04:c0:5a:2b:a0:01:5c:93:12:37:
55:b9:57:db:68:cb:d7:5e:91:65:71:fa:1d:fd:d4:45:af:a0:
a1:f1:00:b5:33:19:88:95:f9:b0:d9:78:fc:33:f8:0e:4e:06:
0d:5f:9c:e2:56:94:40:ed:26:32:f3:48:1d:e1:44:78:fa:2f:
33:7b:fe:26:6f:7f:d0:eb:7d:86:4a:5e:87:78:ee:68:97:24:
49:70:8c:3b:1e:c8:04:ce:f4:c6:fb:89:4f:a4:49:19:b1:df:
22:19:0f:cf:02:0b:f4:d0:c7:88:d4:4a:28:c9:d9:bd:4b:6e:
32:af:e1:0c:5c:bf:d1:3d:4c:31:0c:2f:f2:d6:36:65:97:5f:
4b:ac:54:2e:e4:41:9c:3e:25:fc:81:83:61:ce:0d:01:50:63:
62:bb:24:1e:42:e0:8a:32:c8:a2:ee:0c:3f:95:4b:e9:eb:b2:
5c:e3:53:cc:00:56:de:5b:8b:54:a5:a1:2e:ac:c9:92:88:da:
a8:8f:fb:bd:72:59:59:25:39:d6:8a:2d:5d:7f:22:b8:20:69:
c4:ae:3e:cb:8f:20:ff:d0:aa:ab:7f:88:f3:43:2f:6c:9c:bc:
c4:e5:ef:39:d0:6e:78:6f:2f:71:e7:05:f5:57:d7:b6:fa:33:
13:78:fe:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6p99DLSSk+4ydq9qvufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk
MTg2ZmMwHhcNMjYwMzAxMjIwMTI1WhcNMjYwMzAyMjIwMTI1WjAzMTEwLwYDVQQD
Eyg4ZGNhNTY2NWM3MGRjNGY4MmMwYjA1NDBhZmU1Nzk0NTJmZTNiOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjp1tx2odrqv85kER2Tmb/VqspRb
YOTnsB5MXn/YJoTQKl082A8Jo0LGHeyfECesInGtC9yAT15desyNRdqjo0kHxD4f
tlS6XOuLsxVZg3+c0P0z90iEiAsz4GMaGA5LF9TozoBewThAdp8J+5Tcwfyz0+Av
IaUIMTwAF9p/ecMO/6C9Ioswcw8j+NOUi7/znhh00lNvdw+9q0XfZe0tXslJyxl0
pPPp9CqqK8uv+W+i2kjpoD2ZndlqxkmgJhOXVMsDcK6u0PPGpH+0iNRekjVccibO
AlcyG7MAizt22br4fnnvYL+uQjB2v7wMicyPziPKLfChwMfdaBuaoPlVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3KVmXHDcT4LAsFQK/leUUv47myMB8GA1UdIwQY
MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt
ODBhOTFhZjQyYTY1LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1
LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXfzrYqn
+V4EwForoAFckxI3VblX22jL116RZXH6Hf3URa+gofEAtTMZiJX5sNl4/DP4Dk4G
DV+c4laUQO0mMvNIHeFEePovM3v+Jm9/0Ot9hkpeh3juaJckSXCMOx7IBM70xvuJ
T6RJGbHfIhkPzwIL9NDHiNRKKMnZvUtuMq/hDFy/0T1MMQwv8tY2ZZdfS6xULuRB
nD4l/IGDYc4NAVBjYrskHkLgijLIou4MP5VL6euyXONTzABW3luLVKWhLqzJkoja
qI/7vXJZWSU51ootXX8iuCBpxK4+y48g/9Cqq3+I80MvbJy8xOXvOdBueG8vcecF
9VfXtvozE3j+Dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:53 2026 by rpki-client