Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: TrIrRbB2VE7okpQYIBEA9iu03DiqwgTBk8GJzH9+2gA=
Subject key identifier: E7:3D:BD:30:2F:09:67:78:C3:F4:72:D9:36:2F:23:89:95:CE:AE:BC
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019D9B51584522E9B4D0EFB4A810E275AAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 12:01:32 +0000
Manifest this update: Fri 17 Apr 2026 12:01:32 +0000
Manifest next update: Sat 18 Apr 2026 12:01:32 +0000
Files and hashes: 1: NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa (hash: 08IB4CQ6qXGvHbqlm2iST8aQYIXZEjOYZuD8asm6wTA=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: YBJ1p8lE3K635H7fpAxy/pElz6s+vk7Ae5YnLTOF01s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:58:45:22:e9:b4:d0:ef:b4:a8:10:e2:75:aa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Apr 17 12:01:32 2026 GMT
Not After : Apr 18 12:01:32 2026 GMT
Subject: CN=e73dbd302f096778c3f472d9362f238995ceaebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:e2:e7:fc:4b:15:52:58:82:ce:32:11:16:
b9:d5:cc:a4:17:7f:2f:28:a5:7f:9c:ef:10:09:d8:
b7:43:3f:ca:bd:e9:74:1b:a7:98:4a:07:bb:7e:7d:
38:09:82:f3:e5:df:90:a3:ad:36:29:0d:c1:ef:13:
4f:c5:05:23:5d:d9:42:a3:ab:97:98:cd:74:05:14:
99:96:62:ec:6e:dd:82:67:27:71:9e:c5:b1:23:b3:
79:d3:a8:14:9f:f4:59:1a:1a:bb:4e:8e:1d:be:50:
29:70:4a:52:f3:05:d6:e7:0a:c4:d8:e4:cc:b5:d9:
c0:ca:36:ce:f6:eb:b0:9c:e7:38:c1:aa:fc:7a:a8:
fa:ba:93:5f:51:d7:dc:4d:70:f0:0e:b4:91:15:3a:
91:24:16:28:90:0e:4c:56:79:a9:38:5e:8e:46:9d:
06:81:17:80:fd:c2:50:8c:be:34:e7:90:81:90:c1:
2e:80:56:b3:93:8a:3e:0d:a1:e3:52:87:45:06:f3:
8b:3b:36:d9:13:37:5a:13:49:85:ab:d3:ba:36:44:
3b:ee:cd:38:f9:6d:55:95:f6:c6:b1:3d:a0:db:3e:
d9:83:7e:ca:44:76:a0:c2:3b:d7:ce:04:1a:24:13:
bf:3a:15:be:bd:61:b3:53:4d:e1:48:00:41:54:cb:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:BD:30:2F:09:67:78:C3:F4:72:D9:36:2F:23:89:95:CE:AE:BC
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:21:4f:17:3b:3a:7e:6a:6b:23:c1:c1:98:6d:29:ea:77:
4d:65:a3:ae:fd:a6:89:d5:8c:37:cc:e0:59:53:59:c0:9c:86:
07:bc:9b:b5:41:2b:24:9b:f6:2c:18:83:7a:f0:62:c4:f0:eb:
ea:ff:87:8e:22:43:04:41:9d:b0:5b:aa:7c:a8:4e:8e:7f:20:
56:f8:0e:9f:be:ed:b9:ef:df:1d:fe:b3:c8:53:1e:49:ba:ae:
83:3f:25:06:c5:bf:19:92:10:80:4e:5b:7a:c9:c4:d1:c5:e6:
94:e6:3e:ff:71:0f:a7:ed:90:7f:a5:68:d7:31:77:41:44:04:
2a:e6:a6:95:13:66:79:46:c1:e4:73:9f:f3:ce:5c:22:ee:26:
31:f5:2a:ad:b5:d0:17:6f:13:d4:b5:7d:d5:a5:31:b9:8b:fa:
ab:ea:af:92:e3:05:2d:9f:d8:99:18:a3:98:f1:59:a3:0f:5b:
ce:a4:aa:00:55:61:73:71:7e:36:ad:81:6a:f0:e3:f4:a1:db:
ee:85:96:e8:80:51:15:51:b6:d7:b5:35:99:2a:a8:ca:5e:a0:
51:e5:c2:06:12:22:26:1e:08:33:6c:aa:63:56:bf:b9:a3:4b:
d8:f6:f0:65:dd:02:a2:ba:85:92:6e:b4:04:f4:8f:71:d0:f7:
53:ed:6e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVhFIum00O+0qBDidar1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy
ZjRjOTQwHhcNMjYwNDE3MTIwMTMyWhcNMjYwNDE4MTIwMTMyWjAzMTEwLwYDVQQD
EyhlNzNkYmQzMDJmMDk2Nzc4YzNmNDcyZDkzNjJmMjM4OTk1Y2VhZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH7i5/xLFVJYgs4yERa51cykF38v
KKV/nO8QCdi3Qz/Kvel0G6eYSge7fn04CYLz5d+Qo602KQ3B7xNPxQUjXdlCo6uX
mM10BRSZlmLsbt2CZydxnsWxI7N506gUn/RZGhq7To4dvlApcEpS8wXW5wrE2OTM
tdnAyjbO9uuwnOc4war8eqj6upNfUdfcTXDwDrSRFTqRJBYokA5MVnmpOF6ORp0G
gReA/cJQjL4055CBkMEugFazk4o+DaHjUodFBvOLOzbZEzdaE0mFq9O6NkQ77s04
+W1VlfbGsT2g2z7Zg37KRHagwjvXzgQaJBO/OhW+vWGzU03hSABBVMs1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc9vTAvCWd4w/Ry2TYvI4mVzq68MB8GA1UdIwQY
MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct
Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3
LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcUhTxc7
On5qayPBwZhtKep3TWWjrv2midWMN8zgWVNZwJyGB7ybtUErJJv2LBiDevBixPDr
6v+HjiJDBEGdsFuqfKhOjn8gVvgOn77tue/fHf6zyFMeSbqugz8lBsW/GZIQgE5b
esnE0cXmlOY+/3EPp+2Qf6Vo1zF3QUQEKuamlRNmeUbB5HOf885cIu4mMfUqrbXQ
F28T1LV91aUxuYv6q+qvkuMFLZ/YmRijmPFZow9bzqSqAFVhc3F+Nq2BavDj9KHb
7oWW6IBRFVG217U1mSqoyl6gUeXCBhIiJh4IM2yqY1a/uaNL2PbwZd0CorqFkm60
BPSPcdD3U+1uXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:16 2026 by rpki-client