Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: Po7hpuv13v9/D+Wym5nl+K6HHg9lssKNVMDY7fuM+yg=
Subject key identifier: 9D:FF:5D:B5:4B:0C:D6:CB:D6:EB:92:C5:E2:0B:E3:AF:E6:B7:E3:62
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 019D394119215F0645A73ECA1A179391CDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 05AB
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (hash: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: fu0bTdi0u2Ux0UGKSFLUQYy+9yjtKNqDrKuGCImG0V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:21:5f:06:45:a7:3e:ca:1a:17:93:91:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=9dff5db54b0cd6cbd6eb92c5e20be3afe6b7e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:32:35:3d:10:17:92:af:10:ee:25:cb:08:
cf:8f:19:ad:95:7b:bd:37:20:06:09:00:75:ea:22:
ba:21:1b:4b:c2:bc:08:68:19:77:96:e3:76:1c:61:
49:cf:7e:15:46:14:91:14:6b:36:07:6e:ea:e8:a0:
d2:d8:a4:52:fd:ca:08:47:51:e0:a3:58:ad:b6:44:
3a:0b:12:e5:04:a7:9c:71:bf:2b:f3:bc:9b:fc:98:
09:22:4e:2b:55:9b:86:b8:24:fa:36:e2:9e:09:3c:
71:0f:5f:d3:53:ec:8c:b9:0e:8f:94:f3:dd:d9:64:
73:5c:c8:78:03:46:87:b1:fe:58:cd:a0:2c:30:3b:
5d:db:2a:8e:9f:04:22:91:10:ca:57:c5:93:34:d3:
36:83:d0:a5:eb:eb:7c:8d:5f:15:94:8b:7b:c4:e0:
06:26:ed:af:45:91:e3:d3:47:12:d1:b1:7d:32:f3:
53:55:8a:be:18:f3:2f:54:f3:91:b5:ec:0c:dd:06:
68:6b:3f:2e:c5:49:eb:04:f0:3f:77:fa:61:fe:92:
4d:b3:a4:29:85:33:c2:17:a2:3c:49:6d:4b:87:de:
5d:14:df:1c:c0:ab:a6:e0:cd:d9:59:07:d0:30:4e:
e9:9e:8f:c2:92:f9:3e:94:0a:75:75:eb:f6:02:39:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:5D:B5:4B:0C:D6:CB:D6:EB:92:C5:E2:0B:E3:AF:E6:B7:E3:62
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2b:b2:01:a1:4d:1e:e5:83:1e:b4:37:73:e3:c5:eb:d0:b2:
64:d6:3c:e2:7f:61:a5:9d:b7:7d:de:06:86:05:94:f5:93:ee:
69:6f:73:ce:98:90:e8:eb:5a:af:58:16:53:34:25:64:b7:5f:
b1:98:f7:8d:6f:0c:f5:48:e9:0a:7b:08:8a:8a:a3:6a:d7:fc:
4e:3f:5f:90:05:46:67:f0:34:09:4b:7e:89:1f:65:e1:06:63:
5a:a2:7f:19:7e:0a:72:05:9b:c9:43:8c:40:b9:5b:93:e0:a1:
df:aa:b0:36:2f:be:c8:16:26:bd:ca:23:f4:b2:69:eb:80:e5:
a3:9e:b4:6b:e0:03:d2:17:89:e9:9d:8f:71:78:ab:8d:d7:98:
bc:01:d7:e5:13:4d:3f:6c:e9:46:ef:30:ca:81:81:7a:6b:56:
ef:b1:54:9b:41:cb:f9:bb:4b:9e:3f:4f:ad:35:7c:9c:c6:a6:
b7:72:75:ce:66:97:03:f2:e5:ee:46:c9:82:bd:90:1a:2d:0b:
0d:94:27:9a:d5:df:01:22:e4:09:e9:3c:fe:fa:f6:14:89:9d:
b3:9c:90:ef:79:3b:a5:7e:c9:07:5e:81:4f:45:33:ff:30:16:
69:1b:ca:71:10:7e:3e:af:3e:55:91:15:c4:2a:4c:96:5f:e1:
49:2a:5a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRkhXwZFpz7KGheTkc3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNjNDM2Mjc5NTM3ZDRmNzI2ZDIzMTBjZWYxNGE0MmYx
YjJiOGEwHhcNMjYwMzI5MTEwMTAwWhcNMjYwMzMwMTEwMTAwWjAzMTEwLwYDVQQD
Eyg5ZGZmNWRiNTRiMGNkNmNiZDZlYjkyYzVlMjBiZTNhZmU2YjdlMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI0yNT0QF5KvEO4lywjPjxmtlXu9
NyAGCQB16iK6IRtLwrwIaBl3luN2HGFJz34VRhSRFGs2B27q6KDS2KRS/coIR1Hg
o1ittkQ6CxLlBKeccb8r87yb/JgJIk4rVZuGuCT6NuKeCTxxD1/TU+yMuQ6PlPPd
2WRzXMh4A0aHsf5YzaAsMDtd2yqOnwQikRDKV8WTNNM2g9Cl6+t8jV8VlIt7xOAG
Ju2vRZHj00cS0bF9MvNTVYq+GPMvVPORtewM3QZoaz8uxUnrBPA/d/ph/pJNs6Qp
hTPCF6I8SW1Lh95dFN8cwKum4M3ZWQfQME7pno/Ckvk+lAp1dev2AjlAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3/XbVLDNbL1uuSxeIL46/mt+NiMB8GA1UdIwQY
MBaAFBCDxDYnlTfU9ybSMQzvFKQvGyuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTIt
ODEyMjQ4YjY1MzcwLzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTItODEyMjQ4YjY1Mzcw
LzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECuyAaFN
HuWDHrQ3c+PF69CyZNY84n9hpZ23fd4GhgWU9ZPuaW9zzpiQ6Otar1gWUzQlZLdf
sZj3jW8M9UjpCnsIioqjatf8Tj9fkAVGZ/A0CUt+iR9l4QZjWqJ/GX4KcgWbyUOM
QLlbk+Ch36qwNi++yBYmvcoj9LJp64Dlo560a+AD0heJ6Z2PcXirjdeYvAHX5RNN
P2zpRu8wyoGBemtW77FUm0HL+btLnj9PrTV8nMamt3J1zmaXA/Ll7kbJgr2QGi0L
DZQnmtXfASLkCek8/vr2FImds5yQ73k7pX7JB16BT0Uz/zAWaRvKcRB+Pq8+VZEV
xCpMll/hSSpaeA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:18 2026 by rpki-client