Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: 2dYV3Et3CCWEmlgHGrKPjFIxdNxqWXHxM/g5Q03NtsI=
Subject key identifier: 4D:4F:68:86:E4:F3:C5:99:7E:28:01:75:14:F6:93:EC:1B:0C:3F:96
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 019CAB348979C994363CA1EC87F3E43BE187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0654
Signing time: Sun 01 Mar 2026 21:01:12 +0000
Manifest this update: Sun 01 Mar 2026 21:01:12 +0000
Manifest next update: Mon 02 Mar 2026 21:01:12 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: tRAoDw10IJ5uMr8iH86JMsZF9QpleCdxvL3A+DYrD0Y=)
2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:89:79:c9:94:36:3c:a1:ec:87:f3:e4:3b:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Mar 1 21:01:12 2026 GMT
Not After : Mar 2 21:01:12 2026 GMT
Subject: CN=4d4f6886e4f3c5997e28017514f693ec1b0c3f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:12:9d:67:a2:2a:cc:f2:1f:03:ad:3f:f9:
ba:3f:92:34:e3:a5:a4:1f:8b:88:20:62:5e:1e:2b:
55:7e:fc:b5:d2:99:94:38:66:fa:11:6f:72:46:e6:
9e:2d:53:15:e7:0c:86:a9:cd:b5:df:f2:49:b4:0d:
28:87:0e:62:f7:65:49:f2:45:04:54:75:21:f4:b0:
32:69:c5:e1:3c:0b:b7:0b:f3:cb:b6:52:ba:5d:f8:
7a:e7:38:07:33:b3:f5:91:fe:11:2b:09:ed:6d:3c:
9d:eb:83:fb:3f:72:35:64:bb:43:34:fc:4a:25:9c:
ca:fc:d2:18:22:49:27:95:58:6d:77:06:77:f6:7c:
33:1e:83:c9:eb:df:ab:22:f3:90:a0:df:59:d5:d0:
8e:3d:d7:fb:e4:c3:43:9c:64:65:9a:ed:ff:0f:97:
78:2e:c5:13:f9:45:02:2e:d1:2c:75:c9:a6:5d:e2:
bb:8d:8a:be:01:e5:09:1e:56:21:21:6d:28:c0:96:
b8:a7:75:9b:03:78:06:43:29:12:7e:56:ca:b2:9d:
89:a2:64:de:cf:78:bc:3e:98:0e:45:f0:93:a6:33:
26:df:42:1d:90:6e:ae:b2:45:ed:b7:96:22:0e:37:
c9:df:42:17:fb:ef:4a:ab:cc:20:8a:28:b0:37:7d:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:68:86:E4:F3:C5:99:7E:28:01:75:14:F6:93:EC:1B:0C:3F:96
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a6:44:7e:05:e1:df:62:41:e5:ef:e2:72:d4:46:58:e3:25:
ff:74:2e:b7:9c:e3:31:a0:ec:fc:77:27:e5:ae:26:f9:f2:94:
46:98:1d:57:b6:67:12:76:bf:b4:29:26:5d:da:12:47:cd:eb:
f4:66:bf:ab:75:58:eb:fc:c4:bb:8a:37:57:fc:de:84:57:30:
4b:49:30:02:20:ad:04:ac:54:30:5f:68:36:4f:18:76:ef:62:
bb:44:5b:a8:88:b5:7a:90:12:d2:4d:50:6c:9a:b5:5b:7b:80:
16:8b:6f:7b:62:25:87:05:d6:10:1c:b8:72:a7:1a:e1:27:53:
bd:c0:12:e0:7e:82:ae:7b:c4:f7:29:c6:c4:32:9b:79:5e:d9:
9a:16:db:a4:2c:1e:4e:dc:2d:9a:0f:0f:92:7e:59:0e:0c:2d:
d8:6e:42:39:a6:22:b0:e6:73:ba:84:30:94:29:71:44:95:e9:
99:a2:96:f8:37:a7:e6:0c:61:33:6c:26:c8:10:13:48:e5:af:
f8:77:7f:1a:68:9e:71:ca:47:78:f3:db:9a:41:6e:6b:31:d8:
81:a4:6d:6d:a6:e7:ae:8a:fe:63:37:53:5e:86:be:af:2c:54:
48:71:45:5a:1a:5a:91:f2:11:c6:40:d3:9b:19:21:b8:59:c5:
44:d9:b8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNIl5yZQ2PKHsh/PkO+GHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw
ZjgwZTkwHhcNMjYwMzAxMjEwMTEyWhcNMjYwMzAyMjEwMTEyWjAzMTEwLwYDVQQD
Eyg0ZDRmNjg4NmU0ZjNjNTk5N2UyODAxNzUxNGY2OTNlYzFiMGMzZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaISnWeiKszyHwOtP/m6P5I046Wk
H4uIIGJeHitVfvy10pmUOGb6EW9yRuaeLVMV5wyGqc213/JJtA0ohw5i92VJ8kUE
VHUh9LAyacXhPAu3C/PLtlK6Xfh65zgHM7P1kf4RKwntbTyd64P7P3I1ZLtDNPxK
JZzK/NIYIkknlVhtdwZ39nwzHoPJ69+rIvOQoN9Z1dCOPdf75MNDnGRlmu3/D5d4
LsUT+UUCLtEsdcmmXeK7jYq+AeUJHlYhIW0owJa4p3WbA3gGQykSflbKsp2JomTe
z3i8PpgORfCTpjMm30IdkG6uskXtt5YiDjfJ30IX++9Kq8wgiiiwN31A4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1PaIbk88WZfigBdRT2k+wbDD+WMB8GA1UdIwQY
MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt
YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh
LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKZEfgXh
32JB5e/ictRGWOMl/3Qut5zjMaDs/Hcn5a4m+fKURpgdV7ZnEna/tCkmXdoSR83r
9Ga/q3VY6/zEu4o3V/zehFcwS0kwAiCtBKxUMF9oNk8Ydu9iu0RbqIi1epAS0k1Q
bJq1W3uAFotve2IlhwXWEBy4cqca4SdTvcAS4H6CrnvE9ynGxDKbeV7ZmhbbpCwe
Ttwtmg8Pkn5ZDgwt2G5COaYisOZzuoQwlClxRJXpmaKW+Den5gxhM2wmyBATSOWv
+Hd/GmieccpHePPbmkFuazHYgaRtbabnror+YzdTXoa+ryxUSHFFWhpakfIRxkDT
mxkhuFnFRNm46Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:31 2026 by rpki-client