Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: OLtSClJeWmlqQTVV6yYwfkG2IJib+2CTRx8ONoEChrI=
Subject key identifier: 86:4F:FD:19:75:1C:58:BB:C8:86:96:1E:51:6F:72:6E:E3:12:C7:32
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 01A14EE36128102CEEA9F2FDFF50264F483A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1AAC
Signing time: Sun 18 Oct 2026 12:01:26 +0000
Manifest this update: Sun 18 Oct 2026 12:01:26 +0000
Manifest next update: Mon 19 Oct 2026 12:01:26 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: tS5eIWO+Aj0hrqfNHUK0db9gzkNuZTWI+MWZZvU8Ipo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:e3:61:28:10:2c:ee:a9:f2:fd:ff:50:26:4f:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Oct 18 12:01:26 2026 GMT
Not After : Oct 19 12:01:26 2026 GMT
Subject: CN=864ffd19751c58bbc886961e516f726ee312c732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:ad:18:82:50:30:19:4e:63:8c:50:c4:4d:
8c:e0:81:43:0f:9c:79:31:56:4e:10:59:93:61:6c:
b2:a7:c6:50:5a:81:00:f8:60:0a:18:24:8c:b5:6d:
2d:46:e2:ad:44:36:c1:a2:30:67:08:01:c6:53:78:
30:b9:04:41:ca:8f:b8:98:b1:0d:88:e3:3f:cc:62:
42:63:ca:12:1b:03:cd:90:27:af:50:62:ea:d9:6b:
61:ba:7d:6f:34:1a:e7:7e:a0:e7:8b:5c:d2:10:89:
da:f8:f8:bd:6e:b3:7a:2e:bb:cf:74:69:b7:63:5f:
9e:03:0b:2a:ca:49:be:79:9f:38:0b:94:fc:c8:e4:
32:e8:28:ea:ab:52:58:5a:67:b5:6f:9b:fd:80:ef:
7d:91:9c:98:38:8b:7d:62:6e:23:ae:d6:f2:71:07:
61:c5:7a:62:6d:81:d8:6f:74:c3:bd:6c:b6:08:aa:
e3:35:c6:7d:dd:b2:50:f4:bd:fd:e8:31:a6:4c:42:
33:bd:eb:a5:a3:70:64:9d:be:c3:49:97:75:7a:c0:
69:dd:76:4e:d2:02:33:6a:79:a0:31:67:e1:9d:85:
45:cd:fb:3a:5b:9a:fd:28:4f:54:dc:1b:aa:6b:1b:
93:1b:a1:10:16:97:2d:3d:e3:bf:bc:8d:eb:b1:25:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:FD:19:75:1C:58:BB:C8:86:96:1E:51:6F:72:6E:E3:12:C7:32
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:07:1f:78:7c:5c:ad:3f:36:ab:e5:65:8a:bd:d2:2d:4f:
d5:13:3b:77:51:a1:60:5c:77:89:24:87:a1:de:c8:28:e7:69:
c4:ec:a3:1b:67:82:f8:90:08:30:73:07:2e:5c:46:36:6b:0b:
24:1c:42:1d:e7:e7:30:19:dd:5b:e8:c9:f2:b6:89:e4:89:00:
d8:51:7b:e2:58:e5:6a:60:85:d1:de:5d:91:f5:7c:50:f7:89:
98:c2:86:7c:32:6c:7e:cc:f1:b0:21:6b:e2:30:58:05:3a:81:
2d:b3:24:4f:20:17:9e:ea:ec:53:27:6b:67:92:73:6e:f7:a9:
8b:80:27:e8:f8:22:59:72:f7:a2:13:80:ba:bf:f7:3a:b7:68:
0d:24:3e:0a:3f:d5:9d:96:ed:16:0b:b1:d5:38:d7:05:0f:ca:
a8:fe:b0:d4:a2:80:4e:c8:f2:e4:87:67:5e:0d:57:14:13:ca:
d8:3c:48:aa:9a:99:2a:3a:05:b5:74:f1:96:dc:47:f9:79:3e:
57:cd:56:6b:46:e6:b8:6b:cd:a3:b2:8f:1c:8e:ab:86:00:8f:
9a:2c:d4:a8:1c:6c:b1:f3:4f:4d:63:9f:06:3c:e2:00:88:aa:
dd:11:1f:45:f5:86:d1:bd:3d:77:5f:d7:eb:ab:56:4d:4a:6b:
9b:cd:93:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFO42EoECzuqfL9/1AmT0g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0
ZDRhZDkwHhcNMjYxMDE4MTIwMTI2WhcNMjYxMDE5MTIwMTI2WjAzMTEwLwYDVQQD
Eyg4NjRmZmQxOTc1MWM1OGJiYzg4Njk2MWU1MTZmNzI2ZWUzMTJjNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMetGIJQMBlOY4xQxE2M4IFDD5x5
MVZOEFmTYWyyp8ZQWoEA+GAKGCSMtW0tRuKtRDbBojBnCAHGU3gwuQRByo+4mLEN
iOM/zGJCY8oSGwPNkCevUGLq2Wthun1vNBrnfqDni1zSEIna+Pi9brN6LrvPdGm3
Y1+eAwsqykm+eZ84C5T8yOQy6Cjqq1JYWme1b5v9gO99kZyYOIt9Ym4jrtbycQdh
xXpibYHYb3TDvWy2CKrjNcZ93bJQ9L396DGmTEIzveulo3Bknb7DSZd1esBp3XZO
0gIzanmgMWfhnYVFzfs6W5r9KE9U3BuqaxuTG6EQFpctPeO/vI3rsSVhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZP/Rl1HFi7yIaWHlFvcm7jEscyMB8GA1UdIwQY
MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt
NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5
LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauwHH3h8
XK0/NqvlZYq90i1P1RM7d1GhYFx3iSSHod7IKOdpxOyjG2eC+JAIMHMHLlxGNmsL
JBxCHefnMBndW+jJ8raJ5IkA2FF74ljlamCF0d5dkfV8UPeJmMKGfDJsfszxsCFr
4jBYBTqBLbMkTyAXnursUydrZ5Jzbvepi4An6PgiWXL3ohOAur/3OrdoDSQ+Cj/V
nZbtFgux1TjXBQ/KqP6w1KKATsjy5IdnXg1XFBPK2DxIqpqZKjoFtXTxltxH+Xk+
V81Wa0bmuGvNo7KPHI6rhgCPmizUqBxssfNPTWOfBjziAIiq3REfRfWG0b09d1/X
66tWTUprm82TmA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:14 2026 by rpki-client