Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: Lp7GUg1/BXVGms7ZXC6Dr/geHnydCoXq70sXMAJEdSQ=
Subject key identifier: 81:CF:AB:B0:E0:00:D3:F0:B0:28:66:45:2E:C2:70:86:6D:0E:CA:FD
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019CAF481159C96EFC61DD4EDD35A1EE9C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 039F
Signing time: Mon 02 Mar 2026 16:01:01 +0000
Manifest this update: Mon 02 Mar 2026 16:01:01 +0000
Manifest next update: Tue 03 Mar 2026 16:01:01 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: wKlmfkoK/T2IKinLKubhuvrzAQwOknBQLpboudikJvk=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:11:59:c9:6e:fc:61:dd:4e:dd:35:a1:ee:9c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 2 16:01:01 2026 GMT
Not After : Mar 3 16:01:01 2026 GMT
Subject: CN=81cfabb0e000d3f0b02866452ec270866d0ecafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:ce:c9:fb:5d:51:c4:08:81:27:77:6c:65:
c1:d4:7a:f5:8c:23:3f:58:78:21:90:c2:da:2a:22:
b1:fe:2b:94:a5:af:51:8f:f2:65:7a:b5:b8:56:63:
57:d5:a3:9c:ed:8a:9f:02:40:fa:fa:7c:6f:c6:87:
28:cc:17:cc:f7:d0:56:8c:9d:9a:c4:37:80:4f:d1:
05:66:2e:b9:e6:49:d5:81:dc:d3:7a:9a:23:b9:4b:
ab:5f:db:19:3c:5e:d3:48:97:81:6e:9a:7e:b0:1b:
6d:d6:6c:e2:84:7c:cc:5e:4b:c4:8e:22:c8:32:0d:
9c:18:9d:06:75:ec:46:9f:fe:aa:fb:ab:f1:65:fb:
ef:1b:6b:12:a0:73:37:cb:f3:75:eb:c5:0f:ca:25:
74:3f:f2:6d:fd:19:17:ab:05:dc:9c:da:c7:ec:ee:
e0:93:b4:a3:59:f3:c7:5b:8f:bd:b4:03:77:4a:7c:
f4:ed:34:2b:95:9b:80:5f:99:62:77:3c:b5:0b:e0:
39:5f:c1:00:9d:51:62:da:0e:80:3e:02:a9:5c:86:
d2:63:d6:17:77:98:e1:10:47:d6:5f:0d:1f:17:34:
c9:00:d3:66:b9:7c:0f:8b:da:39:09:d7:f7:f1:bf:
7e:5f:28:1d:4d:27:05:79:d4:bb:3f:af:94:31:60:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:AB:B0:E0:00:D3:F0:B0:28:66:45:2E:C2:70:86:6D:0E:CA:FD
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:52:99:ea:d1:ed:b0:f9:00:b2:aa:b8:ac:cb:b6:2c:44:
0c:af:46:c9:46:47:39:e7:d6:74:22:83:d1:67:cb:cc:33:81:
d4:e3:31:e0:43:81:d6:2b:d6:12:58:88:b2:01:89:11:5c:73:
9c:8b:d6:34:20:6e:58:2b:61:b7:7d:ab:f4:2d:d7:59:8a:14:
8f:f8:37:45:90:c0:73:2d:83:0c:76:02:1f:06:e3:8c:18:b7:
d4:e9:e4:9d:ba:16:e7:d7:d6:96:84:7c:ab:9b:1b:a7:d6:d7:
e4:05:ad:9e:89:96:e4:71:61:e9:cf:49:37:f7:3a:b0:f4:fd:
41:c4:6e:c7:39:02:5b:9b:62:fb:5e:29:78:a9:6d:54:86:4f:
08:7f:96:26:fb:aa:42:88:fa:38:bc:f7:dc:e9:31:e2:81:e8:
6b:56:1b:7e:47:4f:a6:d5:b2:01:fa:11:2a:e4:80:1b:2a:8c:
6f:06:6b:df:84:2d:c1:f3:1b:e2:60:24:c8:f0:50:30:33:7d:
81:4c:43:2b:f8:ad:c7:ab:2c:cc:f1:67:e4:6c:03:b9:eb:72:
f2:c2:3f:3b:c8:cc:85:2b:66:b9:df:af:07:5e:16:2c:34:98:
de:74:f3:e4:06:d7:c6:01:98:09:af:e3:9c:d6:cb:09:5f:c2:
51:7b:53:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSBFZyW78Yd1O3TWh7pwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjYwMzAyMTYwMTAxWhcNMjYwMzAzMTYwMTAxWjAzMTEwLwYDVQQD
Eyg4MWNmYWJiMGUwMDBkM2YwYjAyODY2NDUyZWMyNzA4NjZkMGVjYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaTOyftdUcQIgSd3bGXB1Hr1jCM/
WHghkMLaKiKx/iuUpa9Rj/JlerW4VmNX1aOc7YqfAkD6+nxvxocozBfM99BWjJ2a
xDeAT9EFZi655knVgdzTepojuUurX9sZPF7TSJeBbpp+sBtt1mzihHzMXkvEjiLI
Mg2cGJ0GdexGn/6q+6vxZfvvG2sSoHM3y/N168UPyiV0P/Jt/RkXqwXcnNrH7O7g
k7SjWfPHW4+9tAN3Snz07TQrlZuAX5lidzy1C+A5X8EAnVFi2g6APgKpXIbSY9YX
d5jhEEfWXw0fFzTJANNmuXwPi9o5Cdf38b9+XygdTScFedS7P6+UMWA4PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHPq7DgANPwsChmRS7CcIZtDsr9MB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrpSmerR
7bD5ALKquKzLtixEDK9GyUZHOefWdCKD0WfLzDOB1OMx4EOB1ivWEliIsgGJEVxz
nIvWNCBuWCtht32r9C3XWYoUj/g3RZDAcy2DDHYCHwbjjBi31OnknboW59fWloR8
q5sbp9bX5AWtnomW5HFh6c9JN/c6sPT9QcRuxzkCW5ti+14peKltVIZPCH+WJvuq
Qoj6OLz33Okx4oHoa1YbfkdPptWyAfoRKuSAGyqMbwZr34QtwfMb4mAkyPBQMDN9
gUxDK/itx6sszPFn5GwDuety8sI/O8jMhStmud+vB14WLDSY3nTz5AbXxgGYCa/j
nNbLCV/CUXtTmg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:02 2026 by rpki-client