Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: eszDnKjCJnl0gPXmX6zMPDcX41WJIr8f2odP/qkcP7Q=
Subject key identifier: 83:34:64:00:6A:7F:E6:06:E9:50:37:CE:85:62:A4:A8:33:19:94:71
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019D363FFF249A2B60387D184CFC25B6C18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 21:00:56 +0000
Manifest this update: Sat 28 Mar 2026 21:00:56 +0000
Manifest next update: Sun 29 Mar 2026 21:00:56 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: DNoa3NSEfHQLHDeHlOjfBZsd3vKESqivIQToi86/Flg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:3f:ff:24:9a:2b:60:38:7d:18:4c:fc:25:b6:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Mar 28 21:00:56 2026 GMT
Not After : Mar 29 21:00:56 2026 GMT
Subject: CN=833464006a7fe606e95037ce8562a4a833199471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:75:6c:85:da:11:4c:b1:85:6a:45:98:a4:
cf:cb:28:19:48:76:ec:ae:35:19:5f:d2:17:f8:f8:
04:91:7e:14:0a:b2:a5:b4:c0:00:f0:b0:36:ec:f9:
69:1f:f7:82:b0:1d:ce:60:e7:9f:99:57:92:9f:bc:
86:23:e0:ce:10:6d:e0:90:0d:a5:b0:14:3b:41:84:
b0:ae:25:60:80:c0:27:99:08:f7:f1:c4:a0:73:3c:
f5:89:32:af:d7:cb:86:0f:5c:0b:71:30:2a:4a:a2:
e5:a2:5e:fe:74:3b:f4:51:59:dc:10:28:37:8a:fb:
b1:a4:fa:0a:af:0c:e1:a1:99:87:bb:7c:26:76:07:
ce:c1:d9:76:ff:28:1a:ad:f5:ad:14:f8:85:f2:ec:
7e:4b:15:bd:a7:4d:ae:13:8a:19:78:d2:c4:b2:1d:
61:dd:f1:ad:da:bb:4a:06:aa:98:b3:b6:3e:54:1c:
bc:3b:43:2e:2b:81:37:2c:73:bc:c9:e1:c8:3b:71:
91:77:85:69:74:2b:65:c0:c6:5d:51:b7:8c:8d:d3:
5e:63:98:94:fd:42:73:a4:52:ae:13:c2:27:f3:72:
b0:dd:23:e5:83:9a:3b:c6:a0:3f:bf:3e:71:43:ed:
9b:f0:d0:9e:ff:d1:6e:7a:0c:99:38:4c:5d:a4:f5:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:64:00:6A:7F:E6:06:E9:50:37:CE:85:62:A4:A8:33:19:94:71
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ea:af:4c:50:7b:2e:0b:9a:1d:42:ff:83:8c:eb:de:dd:45:
db:7e:38:b1:82:fd:e4:1f:fb:cf:2a:3b:a3:12:43:e0:2d:57:
50:a3:09:d0:a5:c7:e3:8a:95:4d:5a:15:cf:89:ba:41:21:ff:
f6:40:42:37:e3:b6:d2:32:63:c0:59:fe:5c:66:51:b1:48:e8:
d1:39:39:d9:de:e9:fb:21:52:31:2e:3b:33:0f:10:76:7d:d1:
2c:c3:30:ef:ca:87:fa:52:ef:30:98:de:1a:62:aa:8f:84:93:
ff:23:8f:cb:e4:d6:ec:f6:3b:da:76:d5:bf:69:ac:68:0a:c7:
aa:22:c4:04:27:e5:34:0f:2d:20:e9:32:53:ad:89:e1:ae:6a:
cb:e0:9e:c0:45:88:5c:29:3b:49:76:21:14:13:0e:33:73:b7:
56:e6:c5:ab:d6:10:c3:d7:aa:a1:a6:ba:46:52:f3:85:81:a2:
b2:66:d2:9d:fb:a8:17:b0:fb:de:06:e3:d3:3d:4f:fa:72:3d:
78:bf:c6:f9:e1:14:89:a2:53:50:04:5a:e2:bc:c2:c0:e5:8a:
25:79:58:c5:4d:19:f9:7f:95:40:d7:00:a1:41:f9:6d:35:06:
26:28:f9:89:75:38:ae:7a:ee:52:90:6d:d8:a6:2b:14:5e:98:
4c:90:70:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ02P/8kmitgOH0YTPwltsGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0
ZDRhZDkwHhcNMjYwMzI4MjEwMDU2WhcNMjYwMzI5MjEwMDU2WjAzMTEwLwYDVQQD
Eyg4MzM0NjQwMDZhN2ZlNjA2ZTk1MDM3Y2U4NTYyYTRhODMzMTk5NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZZ1bIXaEUyxhWpFmKTPyygZSHbs
rjUZX9IX+PgEkX4UCrKltMAA8LA27PlpH/eCsB3OYOefmVeSn7yGI+DOEG3gkA2l
sBQ7QYSwriVggMAnmQj38cSgczz1iTKv18uGD1wLcTAqSqLlol7+dDv0UVncECg3
ivuxpPoKrwzhoZmHu3wmdgfOwdl2/ygarfWtFPiF8ux+SxW9p02uE4oZeNLEsh1h
3fGt2rtKBqqYs7Y+VBy8O0MuK4E3LHO8yeHIO3GRd4VpdCtlwMZdUbeMjdNeY5iU
/UJzpFKuE8In83Kw3SPlg5o7xqA/vz5xQ+2b8NCe/9FuegyZOExdpPUrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM0ZABqf+YG6VA3zoVipKgzGZRxMB8GA1UdIwQY
MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt
NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5
LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeqvTFB7
LguaHUL/g4zr3t1F2344sYL95B/7zyo7oxJD4C1XUKMJ0KXH44qVTVoVz4m6QSH/
9kBCN+O20jJjwFn+XGZRsUjo0Tk52d7p+yFSMS47Mw8Qdn3RLMMw78qH+lLvMJje
GmKqj4ST/yOPy+TW7PY72nbVv2msaArHqiLEBCflNA8tIOkyU62J4a5qy+CewEWI
XCk7SXYhFBMOM3O3VubFq9YQw9eqoaa6RlLzhYGismbSnfuoF7D73gbj0z1P+nI9
eL/G+eEUiaJTUARa4rzCwOWKJXlYxU0Z+X+VQNcAoUH5bTUGJij5iXU4rnruUpBt
2KYrFF6YTJBwPA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 03:25:24 2026 by rpki-client