Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: Xu8zOkNyg541gbxhw0+5v1RwU028/Vf2oKlbtalY/7g=
Subject key identifier: AC:25:DD:DC:68:66:DE:54:62:C4:1C:0B:E0:BD:1C:DD:DE:8C:A7:1C
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019D9A06FFD4B019E65352E1DF05857B6180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1582
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: SqlodRMvuDftOV6TtN6xNSe+EaNOeR4Xl6kqLXMx29A=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ff:d4:b0:19:e6:53:52:e1:df:05:85:7b:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=ac25dddc6866de5462c41c0be0bd1cddde8ca71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:c5:48:5c:ad:18:7d:4e:a2:19:a5:36:aa:
5d:3f:a9:10:f5:74:bf:9c:24:35:59:44:44:35:64:
95:d8:3a:83:7b:04:c3:b3:f9:d7:d1:cf:a9:73:bd:
89:64:92:01:ea:47:73:40:4c:60:aa:fe:d7:1a:15:
1d:a6:4d:b5:01:10:ea:2c:5d:22:5f:5e:b5:0b:7e:
cb:28:9b:11:5b:eb:70:d1:6e:a7:35:d8:e9:e3:95:
e9:b5:c1:22:7c:76:9f:c7:44:26:b4:8a:a5:82:01:
30:76:f4:00:68:b4:9f:d8:f8:d5:9d:15:6c:50:ab:
33:61:e1:90:97:5d:4c:3d:1f:fa:a5:a0:71:a5:7b:
e8:2e:db:25:8c:e9:c6:9c:ca:8b:67:67:59:3f:72:
8c:22:3d:38:dc:1c:6e:8a:aa:46:5d:d2:a2:d8:b0:
ec:0e:7b:84:75:35:0a:96:d5:14:7c:56:33:a6:9e:
89:f1:16:92:e9:b8:90:cf:72:b1:4d:8d:80:8a:c1:
52:2b:f4:c8:44:6c:b0:c3:01:d2:80:18:92:7d:41:
b7:d3:ac:3b:34:0a:ca:e2:d2:0d:fa:23:e3:e8:3f:
2b:e1:d2:1e:1d:5f:38:56:7d:b8:78:4a:06:49:87:
83:4b:90:33:1f:b3:68:1b:bc:1b:50:3e:c9:34:49:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:DD:DC:68:66:DE:54:62:C4:1C:0B:E0:BD:1C:DD:DE:8C:A7:1C
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:15:52:50:97:c5:94:ad:74:cc:b0:ce:88:3e:25:0a:ea:52:
60:81:d2:58:4a:8f:14:f8:f0:46:80:e7:69:53:14:0c:86:05:
16:33:43:93:e9:81:a3:21:89:74:07:a6:66:d2:5a:0b:06:8c:
9b:a1:47:97:ff:b2:24:3b:ca:3a:23:c3:c0:a3:3d:24:cf:11:
73:90:a0:1f:cc:f2:f4:b1:d1:4f:d0:e1:ea:a8:40:1c:11:39:
28:bc:73:fc:3e:fa:b3:ef:76:d5:57:d0:86:be:b6:ae:26:10:
a5:95:05:56:99:7c:fa:8d:d4:e3:72:9f:79:18:24:7b:67:ef:
2d:3e:7c:e9:6c:c4:3b:3d:8a:d4:bb:e0:ba:79:49:57:bb:ff:
45:22:69:89:be:86:ff:2c:0e:ac:9f:0c:99:0b:48:31:c0:a4:
f1:79:8f:b1:25:b6:7d:1a:bd:b4:30:72:1f:38:fe:91:87:b0:
a0:67:81:85:66:a8:8a:7d:18:12:26:dc:6a:25:d4:d8:05:88:
e7:12:3e:67:64:d0:3e:b8:74:7c:04:65:86:6a:09:52:bf:de:
38:aa:66:1f:0a:de:c2:13:c3:3b:a6:a4:a8:02:51:2c:ca:c3:
24:30:48:20:0a:75:86:88:35:1b:52:6b:15:27:4e:b0:73:28:
7b:9d:2c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBv/UsBnmU1Lh3wWFe2GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3
MmY0NWMwHhcNMjYwNDE3MDYwMDQzWhcNMjYwNDE4MDYwMDQzWjAzMTEwLwYDVQQD
EyhhYzI1ZGRkYzY4NjZkZTU0NjJjNDFjMGJlMGJkMWNkZGRlOGNhNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCbFSFytGH1OohmlNqpdP6kQ9XS/
nCQ1WURENWSV2DqDewTDs/nX0c+pc72JZJIB6kdzQExgqv7XGhUdpk21ARDqLF0i
X161C37LKJsRW+tw0W6nNdjp45XptcEifHafx0QmtIqlggEwdvQAaLSf2PjVnRVs
UKszYeGQl11MPR/6paBxpXvoLtsljOnGnMqLZ2dZP3KMIj043BxuiqpGXdKi2LDs
DnuEdTUKltUUfFYzpp6J8RaS6biQz3KxTY2AisFSK/TIRGywwwHSgBiSfUG306w7
NArK4tIN+iPj6D8r4dIeHV84Vn24eEoGSYeDS5AzH7NoG7wbUD7JNEnufwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwl3dxoZt5UYsQcC+C9HN3ejKccMB8GA1UdIwQY
MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt
ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4
LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRVSUJfF
lK10zLDOiD4lCupSYIHSWEqPFPjwRoDnaVMUDIYFFjNDk+mBoyGJdAemZtJaCwaM
m6FHl/+yJDvKOiPDwKM9JM8Rc5CgH8zy9LHRT9Dh6qhAHBE5KLxz/D76s+921VfQ
hr62riYQpZUFVpl8+o3U43KfeRgke2fvLT586WzEOz2K1LvgunlJV7v/RSJpib6G
/ywOrJ8MmQtIMcCk8XmPsSW2fRq9tDByHzj+kYewoGeBhWaoin0YEibcaiXU2AWI
5xI+Z2TQPrh0fARlhmoJUr/eOKpmHwrewhPDO6akqAJRLMrDJDBIIAp1hog1G1Jr
FSdOsHMoe50sDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:46 2026 by rpki-client