Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: k3VgPcEon/e/pyCCzF3RfCRSR4OBp7WVDog8MpxWqYE=
Subject key identifier: 99:D6:CE:FB:DE:25:0B:24:F8:21:A5:4E:04:12:B8:17:E8:7D:22:0C
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019D9CD1AB447E5C1D618B219353D72C6F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 1285
Signing time: Fri 17 Apr 2026 19:01:19 +0000
Manifest this update: Fri 17 Apr 2026 19:01:19 +0000
Manifest next update: Sat 18 Apr 2026 19:01:19 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: oAwhJJE3K4Bowzhw7zmJ7jEvjMKOC7PZkuBAUGGpvr0=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:ab:44:7e:5c:1d:61:8b:21:93:53:d7:2c:6f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Apr 17 19:01:19 2026 GMT
Not After : Apr 18 19:01:19 2026 GMT
Subject: CN=99d6cefbde250b24f821a54e0412b817e87d220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:e8:6b:d6:ce:de:96:37:84:bd:cf:db:fb:
ec:d7:6c:fe:bf:75:42:0b:56:a7:82:36:4d:e2:cd:
cb:b0:e5:63:57:b7:3f:29:b3:27:75:0b:74:e1:ea:
3b:a2:03:01:e9:7b:01:a5:27:57:a1:fc:c8:d2:7c:
2b:5f:2d:a6:6a:e0:89:d4:9b:73:97:f7:7b:da:06:
6e:cf:fb:95:de:55:1c:83:7f:67:b7:f1:3b:f1:03:
6f:97:01:f4:69:e6:89:3a:3e:e1:5b:e0:74:30:0b:
7a:e2:3f:10:fd:f3:ab:10:95:29:6c:71:e0:8a:2f:
d2:5f:56:66:73:74:9d:69:a7:dd:72:69:f6:cd:2f:
81:86:e8:93:8f:04:9b:14:7c:21:e5:38:8c:39:ac:
55:51:74:48:af:ca:da:a4:10:d7:66:86:26:cc:b6:
7e:4a:47:f7:7e:8c:2c:10:4d:86:c9:df:0a:ad:68:
0b:75:66:95:25:84:fb:fc:9d:0b:03:9e:80:e5:23:
94:5e:d5:4e:26:d2:86:10:df:c8:2e:24:9f:d7:db:
eb:7b:c0:5d:81:d0:b3:95:d9:e0:1d:e6:1a:a0:31:
9e:81:eb:ab:27:cd:ea:88:3b:a2:33:55:15:5b:de:
4b:2a:3e:e1:31:40:ed:9d:8e:aa:c2:37:d0:32:85:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:CE:FB:DE:25:0B:24:F8:21:A5:4E:04:12:B8:17:E8:7D:22:0C
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:67:60:3c:4e:2c:27:ee:24:f7:78:d3:4f:02:4a:82:50:36:
57:05:96:72:5c:53:09:1c:33:74:0e:49:96:ab:90:6f:e7:7a:
2c:00:c6:08:ac:92:63:c3:aa:29:39:12:de:8e:7c:d4:7a:4f:
73:27:c8:b2:a1:1e:8c:d7:6b:e2:33:6b:d2:2b:c6:19:e2:1d:
f1:31:05:42:8d:6d:cc:97:f2:52:22:06:3c:a3:3c:aa:47:29:
80:3a:9f:b3:13:cf:5e:8e:69:98:a7:01:0f:3e:a4:3f:b5:c4:
06:58:4b:25:51:96:6f:7a:b7:bb:c9:69:65:00:56:8e:42:a4:
5c:da:a1:32:d6:d2:2d:c7:f1:2a:ac:73:cc:f6:fb:6e:79:c2:
fa:2c:2f:9b:78:16:c7:d5:22:81:fe:a1:1c:50:30:2a:c3:ab:
ec:c5:1b:33:f7:93:1a:30:02:03:32:5a:5b:cb:5b:10:44:20:
d1:32:39:f4:87:c8:14:0c:81:4e:2b:2b:5f:cf:5e:f0:52:b6:
87:53:25:2c:a3:68:99:97:44:31:4e:be:23:a0:9a:fc:73:96:
10:a9:72:3c:d4:9a:c3:1c:b1:7c:e9:7e:f8:de:03:a4:be:5f:
93:86:db:78:bd:ae:4a:22:d8:fa:bf:d4:d3:33:67:53:65:e3:
ce:2b:b5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0atEflwdYYshk1PXLG8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4
NThkOTMwHhcNMjYwNDE3MTkwMTE5WhcNMjYwNDE4MTkwMTE5WjAzMTEwLwYDVQQD
Eyg5OWQ2Y2VmYmRlMjUwYjI0ZjgyMWE1NGUwNDEyYjgxN2U4N2QyMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Poa9bO3pY3hL3P2/vs12z+v3VC
C1angjZN4s3LsOVjV7c/KbMndQt04eo7ogMB6XsBpSdXofzI0nwrXy2mauCJ1Jtz
l/d72gZuz/uV3lUcg39nt/E78QNvlwH0aeaJOj7hW+B0MAt64j8Q/fOrEJUpbHHg
ii/SX1Zmc3Sdaafdcmn2zS+BhuiTjwSbFHwh5TiMOaxVUXRIr8rapBDXZoYmzLZ+
Skf3fowsEE2Gyd8KrWgLdWaVJYT7/J0LA56A5SOUXtVOJtKGEN/ILiSf19vre8Bd
gdCzldngHeYaoDGegeurJ83qiDuiM1UVW95LKj7hMUDtnY6qwjfQMoUM2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnWzvveJQsk+CGlTgQSuBfofSIMMB8GA1UdIwQY
MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt
ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx
LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGdgPE4s
J+4k93jTTwJKglA2VwWWclxTCRwzdA5JlquQb+d6LADGCKySY8OqKTkS3o581HpP
cyfIsqEejNdr4jNr0ivGGeId8TEFQo1tzJfyUiIGPKM8qkcpgDqfsxPPXo5pmKcB
Dz6kP7XEBlhLJVGWb3q3u8lpZQBWjkKkXNqhMtbSLcfxKqxzzPb7bnnC+iwvm3gW
x9Uigf6hHFAwKsOr7MUbM/eTGjACAzJaW8tbEEQg0TI59IfIFAyBTisrX89e8FK2
h1MlLKNomZdEMU6+I6Ca/HOWEKlyPNSawxyxfOl++N4DpL5fk4bbeL2uSiLY+r/U
0zNnU2Xjziu1Eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:04 2026 by rpki-client