Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: xCVATpslVEXi8+CoS6ZNjjO37GmugD27DY/rtcV66DM=
Subject key identifier: C2:E9:4D:D3:17:CE:E3:98:FE:D2:E3:41:C4:A2:2B:48:00:04:61:0E
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019CE66D820C14CD349000ECE495C330736E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: DC
Signing time: Fri 13 Mar 2026 09:01:02 +0000
Manifest this update: Fri 13 Mar 2026 09:01:02 +0000
Manifest next update: Sat 14 Mar 2026 09:01:02 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: X4amjTCACIRnu1ofDQLap7CM8j4apJi1Ht1EGh2ioVk=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:82:0c:14:cd:34:90:00:ec:e4:95:c3:30:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Mar 13 09:01:02 2026 GMT
Not After : Mar 14 09:01:02 2026 GMT
Subject: CN=c2e94dd317cee398fed2e341c4a22b480004610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:0f:9d:46:29:6f:55:39:09:72:19:22:de:
1d:63:24:d5:06:96:e5:05:a9:5e:69:50:a1:2d:cc:
ee:62:f8:3c:59:b7:8e:ef:0e:e6:aa:73:79:f2:f3:
58:e8:f7:3a:b8:57:73:be:45:70:de:8f:83:46:29:
24:21:98:b1:1a:b4:b7:a0:d7:dd:81:64:f7:bf:5d:
f4:67:89:ee:54:8c:6d:70:bb:ac:f4:c6:05:cb:35:
1c:61:8e:2c:58:47:d4:73:ce:4d:0c:99:89:0e:b7:
d4:3b:ae:66:f2:91:dc:b8:42:84:66:55:df:9c:8f:
23:fb:28:ed:4d:c9:3f:5b:88:17:c4:e9:5e:7d:a6:
c6:1c:b7:f2:52:99:0c:04:b8:b3:43:2c:c8:73:5e:
c9:5e:e8:fb:8e:29:9a:ec:e3:29:c3:61:67:e6:b5:
ed:16:a1:ba:78:9c:c8:51:59:bf:73:e3:29:42:00:
a6:28:be:c5:9a:5c:72:74:6d:50:5f:2c:eb:c9:d7:
5e:66:d9:cb:c2:f2:31:47:7a:d0:aa:8c:68:ec:03:
e5:8f:d2:3f:c7:1b:e6:22:93:93:98:74:65:97:c8:
a4:54:3d:c1:26:68:8c:56:81:85:5b:77:55:e0:4b:
25:37:40:8e:62:70:fc:45:a8:92:f2:68:57:d6:98:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:4D:D3:17:CE:E3:98:FE:D2:E3:41:C4:A2:2B:48:00:04:61:0E
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:5a:90:d3:65:66:09:c7:78:57:a1:ec:d0:d9:8e:5f:b8:
b2:31:4d:3f:9d:66:3e:ae:3f:7c:ef:c1:3e:6b:54:33:c4:96:
a0:c6:3e:f5:15:d2:a9:0f:a1:93:71:dd:46:57:7c:14:13:ce:
8a:21:6a:c6:39:77:aa:5a:30:b1:b5:7b:05:bc:75:05:c3:0c:
31:28:bf:43:a8:cc:64:17:92:da:b4:85:86:36:6d:68:e7:5e:
3f:f4:7d:44:fe:fb:17:7a:2a:23:61:15:c6:ac:1a:76:01:9a:
56:78:f2:fc:93:65:14:a1:87:44:a2:14:0a:6b:ca:7e:90:81:
8d:7b:1b:05:31:b0:7c:b6:c1:44:70:96:7c:b5:37:d8:86:15:
cb:c4:69:c5:ac:76:66:01:0f:4d:47:2d:aa:ab:78:71:79:06:
c0:22:33:66:f9:6d:ab:d0:9a:56:33:de:46:ad:1d:12:c0:ce:
2f:6d:37:24:b8:8a:6d:34:ad:9e:22:2e:0f:b4:a4:3c:38:3c:
5a:44:35:39:76:30:b5:2f:42:bc:b5:89:e6:ff:cb:0c:04:f0:
7e:ac:aa:31:3f:60:0a:e8:2e:7c:1c:0f:9b:45:5b:27:34:0b:
17:a3:44:3c:cb:0d:85:cd:b4:88:20:7e:24:b8:98:42:c1:62:
8e:8b:54:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbYIMFM00kADs5JXDMHNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5
NmNmZTgwHhcNMjYwMzEzMDkwMTAyWhcNMjYwMzE0MDkwMTAyWjAzMTEwLwYDVQQD
EyhjMmU5NGRkMzE3Y2VlMzk4ZmVkMmUzNDFjNGEyMmI0ODAwMDQ2MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYwPnUYpb1U5CXIZIt4dYyTVBpbl
BaleaVChLczuYvg8WbeO7w7mqnN58vNY6Pc6uFdzvkVw3o+DRikkIZixGrS3oNfd
gWT3v130Z4nuVIxtcLus9MYFyzUcYY4sWEfUc85NDJmJDrfUO65m8pHcuEKEZlXf
nI8j+yjtTck/W4gXxOlefabGHLfyUpkMBLizQyzIc17JXuj7jima7OMpw2Fn5rXt
FqG6eJzIUVm/c+MpQgCmKL7FmlxydG1QXyzryddeZtnLwvIxR3rQqoxo7APlj9I/
xxvmIpOTmHRll8ikVD3BJmiMVoGFW3dV4EslN0COYnD8RaiS8mhX1pgU8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLpTdMXzuOY/tLjQcSiK0gABGEOMB8GA1UdIwQY
MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt
N2VhMGRlYjgzMGFiLzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi
LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgVakNNl
ZgnHeFeh7NDZjl+4sjFNP51mPq4/fO/BPmtUM8SWoMY+9RXSqQ+hk3HdRld8FBPO
iiFqxjl3qlowsbV7Bbx1BcMMMSi/Q6jMZBeS2rSFhjZtaOdeP/R9RP77F3oqI2EV
xqwadgGaVnjy/JNlFKGHRKIUCmvKfpCBjXsbBTGwfLbBRHCWfLU32IYVy8Rpxax2
ZgEPTUctqqt4cXkGwCIzZvltq9CaVjPeRq0dEsDOL203JLiKbTStniIuD7SkPDg8
WkQ1OXYwtS9CvLWJ5v/LDATwfqyqMT9gCugufBwPm0VbJzQLF6NEPMsNhc20iCB+
JLiYQsFijotU0g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:58:57 2026 by rpki-client