Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: /wYJ6sTBTQwnUXM4+2VAFK7VOBcIpzJ2i+n1b3S212k=
Subject key identifier: A3:CA:57:A2:8A:FA:70:AA:56:61:08:D0:1C:82:D8:07:38:9B:FC:1B
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 019D98BDED0B36269E822BD8BFE17E3B45BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 050D
Signing time: Fri 17 Apr 2026 00:01:16 +0000
Manifest this update: Fri 17 Apr 2026 00:01:16 +0000
Manifest next update: Sat 18 Apr 2026 00:01:16 +0000
Files and hashes: 1: Taq-VnAV0GtRFkkJ8jADCy9IBA4.roa (hash: YbxVfzZLxN4dbnEpk9Qnj+ot0+OX2VpkljxxR5pMXWk=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: lFQ2At624sBPBlgS/EvaIzPH/wbgUCoP7qasYBNvxQg=)
3: odXhA_xZijYQgRVHy6_dtJpV9S4.roa (hash: phjPAghGyg2dhEtydU7dRYb/McKqEnDMEOpSwT4IJtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ed:0b:36:26:9e:82:2b:d8:bf:e1:7e:3b:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Apr 17 00:01:16 2026 GMT
Not After : Apr 18 00:01:16 2026 GMT
Subject: CN=a3ca57a28afa70aa566108d01c82d807389bfc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:ef:0e:d3:b5:37:48:ee:93:ad:5b:26:c2:
0e:9b:5f:a1:39:d3:20:97:25:30:10:04:55:79:f5:
49:a5:ef:e6:22:2b:84:c4:06:01:94:38:03:8f:5a:
9c:45:42:fb:e8:96:5e:53:09:f9:1a:d7:d9:d6:90:
e4:51:58:4f:19:09:ca:cf:68:86:0b:07:89:76:31:
0c:f9:48:8d:bf:d0:77:a8:83:d9:80:9a:4c:38:7f:
ed:26:9d:26:64:90:d3:2a:8d:21:e0:b6:4b:15:f9:
4f:3f:6f:95:e4:d7:d8:19:75:8a:1b:ea:91:0b:46:
87:ad:cd:a0:45:9e:80:76:7e:d6:80:46:ed:04:04:
b0:85:67:ee:f7:df:51:58:e5:92:5f:0e:15:bd:ef:
9e:c3:83:09:8e:be:c5:96:85:57:15:03:17:ad:4d:
a7:c6:89:9d:ab:2e:9e:5b:a7:47:f5:8a:2d:e3:7f:
8a:7d:db:d2:ff:21:f2:11:1e:fd:a1:20:45:c0:e3:
49:00:77:2c:c2:4f:14:f8:63:08:75:86:fa:94:ff:
e0:18:f3:27:db:54:a3:21:88:50:c4:a7:44:b2:6b:
6d:fb:e9:96:fe:92:63:89:72:b2:af:be:73:30:16:
78:b6:2b:98:cb:08:35:9b:c0:ec:d3:c7:ac:24:d0:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:57:A2:8A:FA:70:AA:56:61:08:D0:1C:82:D8:07:38:9B:FC:1B
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:18:2f:8d:9b:25:cf:4a:12:7a:c6:eb:37:8a:0b:82:7e:
e0:28:30:00:31:62:9a:09:ec:b2:5b:e9:90:f6:4a:01:11:e1:
12:6a:65:d8:7e:38:64:16:25:19:d7:33:1c:02:29:3e:b9:5c:
64:01:bf:62:c1:8e:c0:c2:02:1d:2e:75:92:c1:7f:58:30:82:
1f:90:cf:74:56:3c:91:f6:ce:97:e5:6a:7b:1c:d9:ae:2f:b9:
4f:e8:4a:22:c2:33:02:0a:bb:77:31:01:41:8a:b1:48:f1:d4:
cc:78:5d:4b:2a:55:09:fb:6c:64:0c:94:6e:b3:b5:15:79:76:
61:6e:15:b1:91:ff:81:5c:34:9c:4c:45:1b:2b:b7:83:55:aa:
9d:98:5c:23:b9:47:df:1f:86:63:0e:06:c7:b6:b3:ff:84:71:
57:8b:53:13:2c:28:f1:db:42:d3:59:ad:dd:79:ab:32:36:2a:
9c:50:83:d7:ed:6c:85:be:f4:d5:76:d5:d7:7d:65:01:83:cb:
59:42:02:ce:19:8d:d5:2e:6a:22:aa:a0:c4:de:a1:c4:d1:15:
f3:71:a1:9d:e5:bb:16:53:e0:83:9c:b8:ad:8d:9a:82:43:30:
5d:4d:41:c8:b0:b6:40:70:dd:1f:48:db:e6:bb:d3:d4:3a:f5:
5d:1f:95:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yve0LNiaegivYv+F+O0W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGYyNTNhYmZmYTMyMTRjZGE4ZGM5OTU5OWU1ZTdjNjY0
YWJmNGEwHhcNMjYwNDE3MDAwMTE2WhcNMjYwNDE4MDAwMTE2WjAzMTEwLwYDVQQD
EyhhM2NhNTdhMjhhZmE3MGFhNTY2MTA4ZDAxYzgyZDgwNzM4OWJmYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/DvDtO1N0juk61bJsIOm1+hOdMg
lyUwEARVefVJpe/mIiuExAYBlDgDj1qcRUL76JZeUwn5GtfZ1pDkUVhPGQnKz2iG
CweJdjEM+UiNv9B3qIPZgJpMOH/tJp0mZJDTKo0h4LZLFflPP2+V5NfYGXWKG+qR
C0aHrc2gRZ6Adn7WgEbtBASwhWfu999RWOWSXw4Vve+ew4MJjr7FloVXFQMXrU2n
xomdqy6eW6dH9Yot43+KfdvS/yHyER79oSBFwONJAHcswk8U+GMIdYb6lP/gGPMn
21SjIYhQxKdEsmtt++mW/pJjiXKyr75zMBZ4tiuYywg1m8Ds08esJNCmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPKV6KK+nCqVmEI0ByC2Ac4m/wbMB8GA1UdIwQY
MBaAFHlPJTq/+jIUzajcmVmeXnxmSr9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODct
ZTZkZjhlZGFiZmI4LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODctZTZkZjhlZGFiZmI4
LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdMYL42b
Jc9KEnrG6zeKC4J+4CgwADFimgnsslvpkPZKARHhEmpl2H44ZBYlGdczHAIpPrlc
ZAG/YsGOwMICHS51ksF/WDCCH5DPdFY8kfbOl+VqexzZri+5T+hKIsIzAgq7dzEB
QYqxSPHUzHhdSypVCftsZAyUbrO1FXl2YW4VsZH/gVw0nExFGyu3g1WqnZhcI7lH
3x+GYw4Gx7az/4RxV4tTEywo8dtC01mt3XmrMjYqnFCD1+1shb701XbV131lAYPL
WUICzhmN1S5qIqqgxN6hxNEV83GhneW7FlPgg5y4rY2agkMwXU1ByLC2QHDdH0jb
5rvT1Dr1XR+VsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:48 2026 by rpki-client