Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File: eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier: RHykSsovyDRev7liu7PN86rdcvHHUc47POi8GtgRJC4=
Subject key identifier: D0:5E:9D:7E:EA:D9:31:D6:92:FC:A4:E4:D8:D1:E8:1D:78:8C:D8:71
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 01A12BB247E3AD7BA9225224228EE787DA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number: 0228
Signing time: Sun 11 Oct 2026 16:01:06 +0000
Manifest this update: Sun 11 Oct 2026 16:01:06 +0000
Manifest next update: Mon 12 Oct 2026 16:01:06 +0000
Files and hashes: 1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: YJsPWeorpqfMJgOTYXRtj4OefJZOKIa8iYlJHSEQuvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:47:e3:ad:7b:a9:22:52:24:22:8e:e7:87:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Oct 11 16:01:06 2026 GMT
Not After : Oct 12 16:01:06 2026 GMT
Subject: CN=d05e9d7eead931d692fca4e4d8d1e81d788cd871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:35:20:5c:89:bd:5d:3a:1f:94:ef:3a:3f:
b1:2c:72:b6:e7:78:0e:7a:ff:39:34:c9:44:7a:9d:
52:6b:94:a8:eb:bd:ed:59:d4:0a:f6:e4:a6:26:59:
12:49:d4:58:f7:cf:81:95:e3:be:9b:87:b4:54:88:
1e:fc:be:bc:d4:ac:c8:fb:23:09:8a:fa:c6:0e:2d:
ff:10:06:14:d1:4c:43:26:4d:d3:fc:c1:ac:13:9f:
91:29:19:68:da:21:b7:51:5d:a6:ae:dc:55:ce:14:
9f:b8:01:d9:3e:35:71:7c:82:c8:2b:76:86:59:fd:
f4:32:52:57:a1:00:c3:33:fb:60:c0:63:53:11:57:
29:13:90:40:6a:08:d9:39:77:e3:9b:9b:41:ce:03:
a8:20:a9:65:7a:b2:fa:df:46:bf:f4:97:81:70:9d:
00:43:c1:96:64:f9:67:f0:98:b7:b4:d4:36:07:8a:
d0:09:e7:3f:4f:c8:2b:2a:c9:7a:e8:bf:cb:a3:c4:
64:d6:b8:fa:3b:95:ac:22:ae:be:4d:b7:d1:ee:8d:
e1:f6:d3:4e:96:f4:03:2b:3a:f6:a8:aa:24:86:e6:
a3:8d:4d:c4:c8:33:46:df:2b:9f:19:87:67:f7:91:
87:42:7e:38:3c:b2:84:f3:19:fa:4e:c1:ac:00:ca:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:9D:7E:EA:D9:31:D6:92:FC:A4:E4:D8:D1:E8:1D:78:8C:D8:71
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:4d:15:86:b8:60:82:17:aa:d4:ad:dd:fe:f5:c8:fe:99:
1a:a5:3e:04:14:eb:dd:f8:48:7c:e7:b0:27:74:ec:21:e5:39:
98:f8:ce:37:73:b0:8d:33:a0:1b:b3:33:9d:10:03:7f:7b:75:
99:15:33:1f:bb:8e:5b:d0:1a:87:dd:7f:4c:bc:3c:06:d5:d9:
7f:a2:cd:d4:2c:b9:97:c9:00:aa:72:4f:22:c3:b4:0d:25:db:
d0:f8:ed:2b:60:9a:12:6a:7c:2f:5b:c2:75:34:26:35:c7:9d:
a3:f3:c2:c2:28:57:20:df:2f:63:8a:23:3f:96:54:0c:b3:8c:
94:86:a4:83:eb:d7:6d:21:29:5f:b7:45:d7:5f:12:5a:a1:84:
64:37:48:5c:21:9a:59:19:86:bd:a7:38:e7:be:7d:ef:f4:55:
6e:fa:b0:58:03:a2:c9:f2:09:7f:db:b1:9e:70:27:b0:db:5f:
88:cb:8f:d8:21:4f:f2:fa:de:56:c3:44:ba:d5:6f:a7:73:ad:
ca:ce:8a:9c:92:a7:ff:52:d5:b5:e8:71:41:0f:43:a9:75:db:
27:5f:cc:c3:ba:a6:c5:8f:55:09:f4:a0:14:e6:d1:f0:fc:87:
1b:0a:0b:9b:cc:ac:37:00:14:5d:e6:b2:31:e5:d7:0a:e5:6c:
f3:5c:3a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErskfjrXupIlIkIo7nh9pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTkxMTFiZmQ3MGI5MTc0NGRmYTRhNDlmZjkwM2IzOTFj
NWMzMzIwHhcNMjYxMDExMTYwMTA2WhcNMjYxMDEyMTYwMTA2WjAzMTEwLwYDVQQD
EyhkMDVlOWQ3ZWVhZDkzMWQ2OTJmY2E0ZTRkOGQxZTgxZDc4OGNkODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcg1IFyJvV06H5TvOj+xLHK253gO
ev85NMlEep1Sa5So673tWdQK9uSmJlkSSdRY98+BleO+m4e0VIge/L681KzI+yMJ
ivrGDi3/EAYU0UxDJk3T/MGsE5+RKRlo2iG3UV2mrtxVzhSfuAHZPjVxfILIK3aG
Wf30MlJXoQDDM/tgwGNTEVcpE5BAagjZOXfjm5tBzgOoIKllerL630a/9JeBcJ0A
Q8GWZPln8Ji3tNQ2B4rQCec/T8grKsl66L/Lo8Rk1rj6O5WsIq6+TbfR7o3h9tNO
lvQDKzr2qKokhuajjU3EyDNG3yufGYdn95GHQn44PLKE8xn6TsGsAMoPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBenX7q2THWkvyk5NjR6B14jNhxMB8GA1UdIwQY
MBaAFHiZERv9cLkXRN+kpJ/5A7ORxcMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0Mjgt
ZmE5MjQ0MDc0MDFmLzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0MjgtZmE5MjQ0MDc0MDFm
LzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjBNFYa4
YIIXqtSt3f71yP6ZGqU+BBTr3fhIfOewJ3TsIeU5mPjON3OwjTOgG7MznRADf3t1
mRUzH7uOW9Aah91/TLw8BtXZf6LN1Cy5l8kAqnJPIsO0DSXb0PjtK2CaEmp8L1vC
dTQmNcedo/PCwihXIN8vY4ojP5ZUDLOMlIakg+vXbSEpX7dF118SWqGEZDdIXCGa
WRmGvac457597/RVbvqwWAOiyfIJf9uxnnAnsNtfiMuP2CFP8vreVsNEutVvp3Ot
ys6KnJKn/1LVtehxQQ9DqXXbJ1/Mw7qmxY9VCfSgFObR8PyHGwoLm8ysNwAUXeay
MeXXCuVs81w6Kw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:10:05 2026 by rpki-client