Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: UdrBeEcjEF4MMmjaJ+ddx1niDP15lFXGnF+TfKiOVNk=
Subject key identifier: E8:67:37:DD:F8:9A:57:F7:9A:2B:6E:14:5C:39:9B:44:E7:DD:85:CE
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019DCFE3410C119E182A64490FBCBB628564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0F08
Signing time: Mon 27 Apr 2026 17:01:09 +0000
Manifest this update: Mon 27 Apr 2026 17:01:09 +0000
Manifest next update: Tue 28 Apr 2026 17:01:09 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: WQGf0v+vX4trxONuqD7U5ch3MDQOqumeyXjystKmh7c=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:41:0c:11:9e:18:2a:64:49:0f:bc:bb:62:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Apr 27 17:01:09 2026 GMT
Not After : Apr 28 17:01:09 2026 GMT
Subject: CN=e86737ddf89a57f79a2b6e145c399b44e7dd85ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:7f:8c:26:2f:4d:43:bc:08:a3:1b:07:ba:
7d:2d:a6:55:c4:4c:34:eb:54:ee:ba:cc:ea:cc:35:
0c:e6:fd:ac:5e:87:ae:e5:88:d0:95:5a:94:55:8b:
f1:1b:cc:7c:8e:dd:26:2c:52:25:84:14:76:ce:63:
67:d1:53:13:dc:2a:f6:07:0d:a4:a4:3a:ba:b6:c9:
7d:e2:07:40:73:b1:6e:f0:f6:85:bf:ed:67:a4:45:
84:3a:96:52:a9:c0:98:2f:41:c5:f8:24:6f:7b:dc:
8a:b9:66:c6:63:21:bd:78:82:e0:d2:3b:35:88:c1:
d0:0f:20:37:de:4c:46:56:dc:91:38:27:a8:ab:c6:
8f:ee:e8:a4:e6:9b:f3:e0:2a:fc:31:46:1d:7f:94:
cf:30:ea:29:95:8f:d5:34:ad:ef:3f:c3:be:ca:c3:
dc:16:08:98:65:d3:d0:c8:0d:0d:63:1a:b4:8c:c0:
86:5c:a7:ee:77:5b:ed:76:c0:c6:f6:f8:a2:59:4e:
03:00:7e:ed:8b:44:1b:0a:f3:56:aa:de:03:56:c4:
6c:2c:31:88:2b:bd:34:00:dd:88:34:ac:8b:22:7e:
0d:c6:36:18:aa:b4:69:a6:42:f8:5d:70:88:5c:01:
eb:6b:e9:a6:7b:01:17:12:d1:4c:e9:51:75:51:ce:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:37:DD:F8:9A:57:F7:9A:2B:6E:14:5C:39:9B:44:E7:DD:85:CE
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:8d:ef:ee:52:c2:ad:d7:e9:ca:ad:28:6b:99:cb:ae:4a:
d5:99:28:f9:dc:83:57:68:20:5c:59:da:2d:d3:84:a4:28:4b:
70:59:62:81:14:f8:ef:84:9a:e7:27:d1:d0:ca:00:0a:97:bf:
5e:d9:53:4c:e8:07:df:f5:c4:27:cc:ec:de:84:88:84:a2:1f:
81:e1:eb:c1:07:f7:75:1e:34:de:9b:36:f9:f6:bf:6a:d7:36:
aa:4e:44:f2:4f:87:c4:ba:94:1e:09:06:fe:3e:d8:d7:00:cf:
a9:49:13:8e:07:35:f3:f5:05:b6:f9:42:1b:d8:6e:9f:5d:82:
26:0c:06:e3:5e:35:08:4b:12:b7:38:c5:46:f5:1f:06:b4:1e:
f7:3a:a4:52:ba:cc:3a:5b:f1:28:8b:ba:68:0e:c1:b0:6a:c7:
84:d2:7a:73:f6:ee:5e:42:0d:b1:3a:99:ca:7d:04:8e:1e:85:
b5:cc:89:12:71:ad:6b:3a:84:d3:19:a2:d3:ba:6a:1a:bb:9a:
30:60:24:cc:9a:cb:7b:73:a8:98:97:63:4f:76:31:6d:b6:d2:
1c:f9:38:4d:c3:95:25:62:31:97:d9:f9:7e:db:f3:3f:af:18:
30:2b:a0:99:85:26:54:7c:a9:2b:75:9f:b9:3f:2d:60:95:ae:
8b:f2:25:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P40EMEZ4YKmRJD7y7YoVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm
MTgxNTYwHhcNMjYwNDI3MTcwMTA5WhcNMjYwNDI4MTcwMTA5WjAzMTEwLwYDVQQD
EyhlODY3MzdkZGY4OWE1N2Y3OWEyYjZlMTQ1YzM5OWI0NGU3ZGQ4NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2J/jCYvTUO8CKMbB7p9LaZVxEw0
61TuuszqzDUM5v2sXoeu5YjQlVqUVYvxG8x8jt0mLFIlhBR2zmNn0VMT3Cr2Bw2k
pDq6tsl94gdAc7Fu8PaFv+1npEWEOpZSqcCYL0HF+CRve9yKuWbGYyG9eILg0js1
iMHQDyA33kxGVtyROCeoq8aP7uik5pvz4Cr8MUYdf5TPMOoplY/VNK3vP8O+ysPc
FgiYZdPQyA0NYxq0jMCGXKfud1vtdsDG9viiWU4DAH7ti0QbCvNWqt4DVsRsLDGI
K700AN2INKyLIn4NxjYYqrRppkL4XXCIXAHra+mmewEXEtFM6VF1Uc7EFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhnN934mlf3mituFFw5m0Tn3YXOMB8GA1UdIwQY
MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt
Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj
LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMyN7+5S
wq3X6cqtKGuZy65K1Zko+dyDV2ggXFnaLdOEpChLcFligRT474Sa5yfR0MoACpe/
XtlTTOgH3/XEJ8zs3oSIhKIfgeHrwQf3dR403ps2+fa/atc2qk5E8k+HxLqUHgkG
/j7Y1wDPqUkTjgc18/UFtvlCG9hun12CJgwG4141CEsStzjFRvUfBrQe9zqkUrrM
OlvxKIu6aA7BsGrHhNJ6c/buXkINsTqZyn0Ejh6FtcyJEnGtazqE0xmi07pqGrua
MGAkzJrLe3OomJdjT3YxbbbSHPk4TcOVJWIxl9n5ftvzP68YMCugmYUmVHypK3Wf
uT8tYJWui/Ilgg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:26 2026 by rpki-client