Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: ifpg+nSGpFhNBoGP5GwXquiKSi2rGPEtccNn/uvWzoM=
Subject key identifier: 22:3A:C7:5B:99:FF:34:40:60:58:4F:92:8A:59:35:0E:18:9D:91:9B
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 019D39415A2876C406291667D6D1E01A7FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: YKCft9HN6Pst9hK3MaLfhUqHma8.roa (hash: Iaq8AqqZdxk3lIXgrLTs4UJ8UF+Xl1Tj1di8fJpanws=)
2: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: vLLcftFwPNuI1JhwiTG9ErUkNOfMERM+ISGlNk2JcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5a:28:76:c4:06:29:16:67:d6:d1:e0:1a:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=223ac75b99ff344060584f928a59350e189d919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:3a:6d:15:75:44:8e:16:03:ce:8d:8b:66:
dc:97:cc:a6:e2:6d:91:db:8a:ed:6f:ce:a4:36:ea:
31:87:f4:85:30:a5:88:bb:72:36:6d:ee:72:2d:4c:
e3:60:c2:6b:7b:42:08:fb:4a:20:c2:df:1c:aa:34:
dd:06:c3:ac:a3:8d:73:e9:33:9d:c1:4c:df:a2:ee:
53:4b:56:f0:76:aa:e0:19:24:37:b7:45:18:e6:fd:
92:dc:7f:3d:9d:6b:98:d1:d0:74:ea:9c:cb:90:c5:
53:c4:ff:c8:7f:5d:12:70:41:bb:8c:46:fb:03:f3:
86:e7:df:e8:2f:78:05:3f:8a:0e:0e:98:ca:b6:b8:
0b:1d:e0:6f:42:0a:eb:e7:94:89:0e:4c:9e:36:a2:
26:25:aa:70:94:54:10:97:2b:13:da:d5:83:d1:ed:
d7:23:48:08:00:81:67:86:d3:59:56:99:de:d9:ce:
4d:48:2e:47:5a:7a:55:21:4c:3d:1d:ce:9b:70:af:
2f:c0:38:10:19:d0:7f:78:03:e9:c3:cc:d6:b0:a5:
a4:12:89:27:3b:19:a5:bf:cf:fb:3b:0c:e3:ad:47:
bb:c5:cd:08:d3:33:4f:c0:90:ec:4a:23:28:95:76:
41:39:aa:53:fe:5e:29:64:57:41:70:e3:94:41:79:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:C7:5B:99:FF:34:40:60:58:4F:92:8A:59:35:0E:18:9D:91:9B
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:ba:28:e2:8b:ac:07:70:00:0b:e1:68:10:df:10:d3:39:
ae:5e:80:d8:72:00:d2:3f:35:ed:ac:a3:a9:77:c2:33:07:c1:
20:d2:94:00:55:0f:6b:9d:da:a9:48:8a:0d:47:08:92:e6:15:
d5:2e:71:ef:ba:27:f2:ec:c4:6e:43:b7:39:a7:1a:f4:17:1d:
ef:7a:41:7e:bf:3f:f6:e9:79:25:64:a6:44:d7:2c:ec:0c:6b:
59:81:8c:5b:25:1b:0e:a2:f5:0c:01:8e:77:5b:37:85:70:74:
2a:db:45:12:fb:6e:3d:f1:3b:09:de:8a:43:b4:65:8a:c3:53:
30:41:35:e2:52:f0:ef:60:7e:cd:7d:7d:17:3f:1a:eb:bd:3e:
4d:c6:91:54:d6:55:01:79:a1:75:b0:7b:47:f3:41:57:ef:e8:
81:67:66:da:79:44:d0:52:e4:1f:6f:5b:6d:fe:41:ec:4f:cf:
40:78:6e:af:97:9b:77:76:2d:8f:36:72:dc:09:63:ba:05:fb:
d5:a0:fd:45:85:74:bc:ab:d3:ff:a6:3d:d4:02:69:d1:6f:87:
28:51:c7:f2:1f:4e:b3:99:0b:84:ff:0d:03:62:b1:35:dc:5c:
f9:57:d1:53:4f:9e:74:f5:5e:64:d4:ca:e0:ed:d4:14:8b:5c:
a4:74:78:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVoodsQGKRZn1tHgGn/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGI4NWI1MWUzM2RmMGM2OTRkYmQ3N2JjOGMyYmEzZWFi
NGQ1MTkwHhcNMjYwMzI5MTEwMTE3WhcNMjYwMzMwMTEwMTE3WjAzMTEwLwYDVQQD
EygyMjNhYzc1Yjk5ZmYzNDQwNjA1ODRmOTI4YTU5MzUwZTE4OWQ5MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHI6bRV1RI4WA86Ni2bcl8ym4m2R
24rtb86kNuoxh/SFMKWIu3I2be5yLUzjYMJre0II+0ogwt8cqjTdBsOso41z6TOd
wUzfou5TS1bwdqrgGSQ3t0UY5v2S3H89nWuY0dB06pzLkMVTxP/If10ScEG7jEb7
A/OG59/oL3gFP4oODpjKtrgLHeBvQgrr55SJDkyeNqImJapwlFQQlysT2tWD0e3X
I0gIAIFnhtNZVpne2c5NSC5HWnpVIUw9Hc6bcK8vwDgQGdB/eAPpw8zWsKWkEokn
Oxmlv8/7OwzjrUe7xc0I0zNPwJDsSiMolXZBOapT/l4pZFdBcOOUQXkLkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI6x1uZ/zRAYFhPkopZNQ4YnZGbMB8GA1UdIwQY
MBaAFHmLhbUeM98MaU29d7yMK6PqtNUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEt
OTQwZGZiOTYxNjMwLzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEtOTQwZGZiOTYxNjMw
LzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZa6KOKL
rAdwAAvhaBDfENM5rl6A2HIA0j817ayjqXfCMwfBINKUAFUPa53aqUiKDUcIkuYV
1S5x77on8uzEbkO3Oaca9Bcd73pBfr8/9ul5JWSmRNcs7AxrWYGMWyUbDqL1DAGO
d1s3hXB0KttFEvtuPfE7Cd6KQ7RlisNTMEE14lLw72B+zX19Fz8a670+TcaRVNZV
AXmhdbB7R/NBV+/ogWdm2nlE0FLkH29bbf5B7E/PQHhur5ebd3YtjzZy3AljugX7
1aD9RYV0vKvT/6Y91AJp0W+HKFHH8h9Os5kLhP8NA2KxNdxc+VfRU0+edPVeZNTK
4O3UFItcpHR4uw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:27 2026 by rpki-client