Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: L//9CL8hD/ffIvIIhlkysB8vS0qhpZAxuuue5byJMU0=
Subject key identifier: 89:1C:27:22:B5:8C:BB:F1:10:74:E5:17:20:A3:4D:B2:78:62:3F:92
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 01A174A6B4C67CDE886273824EB685AD2612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 10EB
Signing time: Sun 25 Oct 2026 20:00:44 +0000
Manifest this update: Sun 25 Oct 2026 20:00:44 +0000
Manifest next update: Mon 26 Oct 2026 20:00:44 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: gII69ptDvHYd45WoUvXtWWw0RVIzmSDXvQ/EIvLEPqs=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:b4:c6:7c:de:88:62:73:82:4e:b6:85:ad:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Oct 25 20:00:44 2026 GMT
Not After : Oct 26 20:00:44 2026 GMT
Subject: CN=891c2722b58cbbf11074e51720a34db278623f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:ed:fb:d4:45:ad:7a:ad:0e:b0:4d:01:0e:
87:91:4d:29:0b:03:59:80:6b:33:ff:12:f0:e4:83:
a4:90:88:77:82:64:f3:47:64:93:98:2d:39:24:73:
0b:83:fe:72:90:f3:f2:db:7b:d5:35:3e:1a:40:2c:
ed:41:69:4c:71:6d:75:00:40:f4:6e:a9:a7:e6:d9:
54:70:b7:44:b5:94:67:0b:66:83:72:70:ee:f4:47:
2b:9f:1f:3d:90:a9:2c:5d:f9:da:55:43:c6:bc:fc:
f7:82:36:e1:7c:8d:46:53:94:00:1a:85:34:18:80:
32:f5:ee:3b:8f:eb:45:8d:ab:fb:7f:07:9c:1e:5c:
ca:aa:34:ee:7b:d1:8a:83:9f:de:fa:f5:16:0d:1a:
19:5e:21:a9:dd:fe:ec:d9:bc:04:f0:14:e6:4f:8e:
8c:a5:73:6f:6c:2f:9f:2f:40:e5:7a:91:88:46:55:
26:eb:2e:a0:11:b6:ec:f4:a7:13:03:d6:a9:61:60:
44:49:7b:28:5a:ad:17:48:d4:f7:47:a7:ca:43:10:
1f:ba:07:58:c3:70:7f:a3:ab:ac:36:39:fd:9b:9f:
12:d3:5d:8a:51:92:46:93:e1:b1:59:8f:3f:6d:8d:
77:6c:81:16:b9:58:d8:51:80:34:09:d9:33:d1:ea:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:27:22:B5:8C:BB:F1:10:74:E5:17:20:A3:4D:B2:78:62:3F:92
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:4f:79:a9:ac:6b:bb:62:e2:ac:2a:21:5f:78:da:5f:9f:
68:54:a4:41:3e:1e:2a:8c:cb:1f:30:58:ba:04:f1:1c:a0:f0:
a2:b4:d9:ff:78:d0:ed:79:bc:17:f5:b7:75:08:c2:34:d3:5f:
51:92:a3:c7:7f:92:2d:8b:51:ee:62:ba:0c:5f:07:00:8f:fa:
ec:2d:13:e9:a3:6a:43:34:55:e1:69:b0:cd:dd:df:14:9c:2f:
7b:9e:37:55:2a:8e:b5:be:e2:7a:c6:4a:1f:64:79:31:6c:c3:
a2:de:e7:9a:fa:34:02:05:32:c8:ce:f4:a5:6a:83:bd:b4:37:
54:75:8c:a9:4a:ae:82:65:a6:d5:f5:cb:ca:51:d2:36:bd:f3:
3e:db:91:86:57:a0:84:40:84:53:7a:c6:dd:85:11:bd:29:45:
46:7a:77:28:e6:6e:42:74:c2:bb:e5:2e:63:34:0c:57:98:a5:
ea:6e:c2:be:81:65:e0:c3:64:7c:65:70:4c:03:b7:0f:24:57:
af:55:46:fa:6e:dc:27:aa:3a:f1:9d:37:86:09:fd:27:d2:4b:
30:f3:13:eb:d9:5b:f0:29:18:36:72:f2:b1:1a:87:ff:10:6e:
d0:7f:71:9a:a2:f4:35:6a:40:41:d0:09:ef:be:b8:4c:8a:46:
ef:ce:10:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0prTGfN6IYnOCTraFrSYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm
MTgxNTYwHhcNMjYxMDI1MjAwMDQ0WhcNMjYxMDI2MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg4OTFjMjcyMmI1OGNiYmYxMTA3NGU1MTcyMGEzNGRiMjc4NjIzZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA397t+9RFrXqtDrBNAQ6HkU0pCwNZ
gGsz/xLw5IOkkIh3gmTzR2STmC05JHMLg/5ykPPy23vVNT4aQCztQWlMcW11AED0
bqmn5tlUcLdEtZRnC2aDcnDu9Ecrnx89kKksXfnaVUPGvPz3gjbhfI1GU5QAGoU0
GIAy9e47j+tFjav7fwecHlzKqjTue9GKg5/e+vUWDRoZXiGp3f7s2bwE8BTmT46M
pXNvbC+fL0DlepGIRlUm6y6gEbbs9KcTA9apYWBESXsoWq0XSNT3R6fKQxAfugdY
w3B/o6usNjn9m58S012KUZJGk+GxWY8/bY13bIEWuVjYUYA0Cdkz0eo8RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkcJyK1jLvxEHTlFyCjTbJ4Yj+SMB8GA1UdIwQY
MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt
Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj
LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcetPeams
a7ti4qwqIV942l+faFSkQT4eKozLHzBYugTxHKDworTZ/3jQ7Xm8F/W3dQjCNNNf
UZKjx3+SLYtR7mK6DF8HAI/67C0T6aNqQzRV4Wmwzd3fFJwve543VSqOtb7iesZK
H2R5MWzDot7nmvo0AgUyyM70pWqDvbQ3VHWMqUqugmWm1fXLylHSNr3zPtuRhleg
hECEU3rG3YURvSlFRnp3KOZuQnTCu+UuYzQMV5il6m7CvoFl4MNkfGVwTAO3DyRX
r1VG+m7cJ6o68Z03hgn9J9JLMPMT69lb8CkYNnLysRqH/xBu0H9xmqL0NWpAQdAJ
7764TIpG784Q/w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:46:09 2026 by rpki-client