Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: TMwgycrn2pfVpgRv3SJrSzlFBPB5vX+owVBan31YkQU=
Subject key identifier: A6:39:EA:88:D3:F8:34:65:37:13:3F:58:C3:2D:76:03:F4:CD:24:31
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019CAD596EBF65FF527C98EBC201A5B5A7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 1209
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: PxEM7TNKnbQ0llKsJjI4YbnbGa7uetcGqbineblVfeQ=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6e:bf:65:ff:52:7c:98:eb:c2:01:a5:b5:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=a639ea88d3f8346537133f58c32d7603f4cd2431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:be:8b:64:ea:78:17:c3:62:c5:8c:0f:be:
64:49:16:c9:f8:02:b4:c6:e9:b6:0f:6c:71:7e:db:
82:01:db:e3:f1:fb:b1:e6:16:80:8f:6f:43:0e:9a:
eb:d7:32:14:5c:a9:04:b6:78:12:56:cd:ec:a8:79:
de:0c:43:7c:fb:de:8c:c7:5f:2c:ba:7e:5b:76:5e:
6d:cf:db:43:2d:ba:85:ac:3a:c4:e1:92:b7:6a:17:
eb:74:65:7e:f4:d0:9e:a8:2d:f2:e0:ec:d0:cd:48:
dd:db:eb:da:06:9c:0c:80:06:37:87:a2:9a:a3:b8:
6e:82:a3:e1:93:5d:e3:01:76:76:8b:77:02:e3:a1:
c3:e5:35:52:62:a6:c8:2e:9f:30:43:07:74:97:5b:
3d:76:42:bd:e2:55:ca:64:07:b5:a8:41:ea:d4:9c:
4b:63:11:5f:d6:f0:1d:db:75:fc:ec:70:17:b2:63:
a6:49:b3:2e:76:32:f3:f3:7d:e0:37:d5:f3:26:c6:
a9:62:c2:ae:c8:86:c4:c0:b4:26:d5:6f:d6:4b:9a:
52:91:26:9d:c4:85:7e:18:33:8d:54:a0:06:52:9f:
9a:2c:e1:e6:74:32:1b:60:04:da:54:b7:d5:26:75:
71:72:de:11:ee:c4:10:ca:66:0c:3d:5a:af:5b:20:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:EA:88:D3:F8:34:65:37:13:3F:58:C3:2D:76:03:F4:CD:24:31
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:86:25:61:d8:b0:f5:15:2a:e8:95:8c:12:4d:f9:e4:03:
a8:a1:00:9a:ec:96:13:6c:7c:d1:fc:cc:1b:49:1e:37:7e:fb:
62:c5:ce:6b:cb:6c:bd:b3:f4:b8:c5:f3:76:7e:50:39:38:1b:
07:69:6a:84:7c:41:87:05:83:4b:f9:c0:96:fa:f2:17:b0:38:
4d:2a:4a:21:75:05:4b:e6:a3:4b:55:21:33:23:83:8b:fb:3f:
79:18:0b:54:9c:1b:67:50:10:78:86:3e:d4:7d:d0:03:df:a0:
e3:e5:d6:b3:55:bc:b8:eb:c6:4f:bf:c9:e0:9b:a1:0d:b3:7e:
27:e3:92:68:f6:f3:a5:e6:02:66:ce:72:5a:56:58:58:bd:8f:
fb:4c:73:29:20:11:7f:ac:b4:0b:9e:b4:a5:fa:eb:bc:c9:94:
6a:89:6f:e7:6a:a1:da:80:16:b2:8b:40:34:08:4e:66:4c:97:
14:70:2f:da:50:50:5c:73:06:07:d7:0f:e1:43:89:ac:9d:a9:
ce:55:d7:72:a7:f3:85:c9:bc:f1:df:7e:9b:ea:61:2f:a0:c2:
cb:af:c4:54:12:59:ea:ae:72:8f:22:24:e9:2b:db:52:eb:0a:
3d:47:24:bf:80:cb:e2:31:e7:19:58:5e:44:00:ca:5e:d7:92:
2a:62:83:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWW6/Zf9SfJjrwgGltaezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4
NThkOTMwHhcNMjYwMzAyMDcwMDQ1WhcNMjYwMzAzMDcwMDQ1WjAzMTEwLwYDVQQD
EyhhNjM5ZWE4OGQzZjgzNDY1MzcxMzNmNThjMzJkNzYwM2Y0Y2QyNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Uq+i2TqeBfDYsWMD75kSRbJ+AK0
xum2D2xxftuCAdvj8fux5haAj29DDprr1zIUXKkEtngSVs3sqHneDEN8+96Mx18s
un5bdl5tz9tDLbqFrDrE4ZK3ahfrdGV+9NCeqC3y4OzQzUjd2+vaBpwMgAY3h6Ka
o7hugqPhk13jAXZ2i3cC46HD5TVSYqbILp8wQwd0l1s9dkK94lXKZAe1qEHq1JxL
YxFf1vAd23X87HAXsmOmSbMudjLz833gN9XzJsapYsKuyIbEwLQm1W/WS5pSkSad
xIV+GDONVKAGUp+aLOHmdDIbYATaVLfVJnVxct4R7sQQymYMPVqvWyCswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY56ojT+DRlNxM/WMMtdgP0zSQxMB8GA1UdIwQY
MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt
ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx
LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPqGJWHY
sPUVKuiVjBJN+eQDqKEAmuyWE2x80fzMG0keN377YsXOa8tsvbP0uMXzdn5QOTgb
B2lqhHxBhwWDS/nAlvryF7A4TSpKIXUFS+ajS1UhMyODi/s/eRgLVJwbZ1AQeIY+
1H3QA9+g4+XWs1W8uOvGT7/J4JuhDbN+J+OSaPbzpeYCZs5yWlZYWL2P+0xzKSAR
f6y0C560pfrrvMmUaolv52qh2oAWsotANAhOZkyXFHAv2lBQXHMGB9cP4UOJrJ2p
zlXXcqfzhcm88d9+m+phL6DCy6/EVBJZ6q5yjyIk6SvbUusKPUckv4DL4jHnGVhe
RADKXteSKmKDSA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:08 2026 by rpki-client