Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: As2pu9YMnxcTb0U4Z8IT2n4Joac1+6H5J15HcbdqBZM=
Subject key identifier: 15:83:B7:1D:C9:97:7A:F7:32:B2:AE:06:C5:DB:62:3E:53:02:3A:EE
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019D3909C5F0B6689A2AE0E3E31E393B2916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 08F6
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: LwoLT1S5IZ3GJENrbIOLiJKkrxM.roa (hash: ANC1phdFKuJYTnQOKa5Ojw1nbMCT2ZAJrnTkKz9AGrk=)
2: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: +sMMqAjXe6Yq4eWSrCwOH87WzpkIawq/rBxGJH4/Qps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c5:f0:b6:68:9a:2a:e0:e3:e3:1e:39:3b:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=1583b71dc9977af732b2ae06c5db623e53023aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:ba:83:a4:88:97:36:f8:db:36:35:32:13:
8c:ab:5f:21:22:1e:22:6b:84:e0:e7:4d:c1:d4:91:
22:ef:3f:c5:f8:e4:57:8a:0c:7d:46:bf:23:57:7d:
70:07:9c:81:ba:a9:56:59:a1:2d:24:81:65:3d:bc:
d5:f0:b0:fd:1a:a2:03:e3:d0:dc:e6:a2:dc:7f:5a:
a2:c0:5b:60:20:f0:4c:10:81:9f:5b:22:e5:76:b6:
25:53:92:b7:68:9d:c1:0b:d9:01:6b:16:13:ee:1c:
d4:30:9e:76:9a:6d:96:8b:6a:cb:b5:9a:fb:15:1b:
89:d9:08:60:62:07:e3:9f:11:02:8e:c7:bd:04:69:
9d:55:9f:b4:cb:da:61:3a:29:51:2a:93:db:ed:85:
77:7a:be:ca:3d:ed:db:f3:e4:e6:5f:dc:29:da:e3:
81:b3:4c:0e:6d:43:79:33:11:ef:e4:dd:89:d8:f7:
e3:bc:28:84:2a:4b:bf:fc:41:1a:4a:b3:de:00:90:
f2:bb:fb:1e:1d:39:04:1a:26:71:39:af:bf:4f:d1:
3d:b3:d2:91:4b:7c:52:c1:1e:92:6a:09:68:c0:60:
69:21:5e:b7:c8:a3:ce:6a:67:31:64:f5:7b:e9:2c:
ae:a6:7a:54:29:fd:0e:87:a3:1f:0d:92:da:96:f6:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:B7:1D:C9:97:7A:F7:32:B2:AE:06:C5:DB:62:3E:53:02:3A:EE
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:c2:e9:be:0c:76:eb:d7:9b:7e:d6:dd:3a:d7:bd:1d:0c:
5c:27:a1:7f:26:98:89:d3:5d:7f:fd:20:f4:a3:a8:e1:75:73:
08:da:88:05:0c:8b:8a:92:b9:47:bd:e9:fd:87:6f:db:5d:fa:
6a:28:3b:be:f2:88:36:b1:e2:8e:85:93:c0:22:af:7e:f6:08:
28:1e:e6:d7:0c:64:5a:69:8f:75:89:ed:bf:16:1d:7a:ca:79:
ef:83:26:7d:d9:6e:62:fb:db:9d:f9:44:d7:68:be:8c:82:03:
85:8d:ea:02:6f:ca:71:d2:3e:75:ca:b6:f7:68:7d:27:ee:02:
8c:fb:e5:4f:f8:ed:ef:61:db:c0:ef:5a:0f:74:cc:68:72:a2:
3b:96:c7:8c:3a:e9:02:1d:72:f7:cd:89:2e:b1:0c:d2:70:6a:
9c:70:32:0e:7d:4c:38:45:b7:66:4a:5b:9d:36:a4:61:97:de:
bc:54:2d:97:4e:9c:67:d2:d7:cc:77:a8:4e:35:b8:e2:2c:c3:
77:cf:a2:72:a2:97:74:f6:13:84:2a:c4:53:f1:5d:7d:86:9d:
03:b1:a3:43:1a:73:7c:82:40:b4:58:c5:a1:1e:b6:f0:28:f3:
a5:33:04:27:4e:a8:cf:46:d0:23:ba:92:8b:38:8c:70:e5:ec:
19:44:59:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcXwtmiaKuDj4x45OykWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1
Y2FlNGQwHhcNMjYwMzI5MTAwMDM0WhcNMjYwMzMwMTAwMDM0WjAzMTEwLwYDVQQD
EygxNTgzYjcxZGM5OTc3YWY3MzJiMmFlMDZjNWRiNjIzZTUzMDIzYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA26g6SIlzb42zY1MhOMq18hIh4i
a4Tg503B1JEi7z/F+ORXigx9Rr8jV31wB5yBuqlWWaEtJIFlPbzV8LD9GqID49Dc
5qLcf1qiwFtgIPBMEIGfWyLldrYlU5K3aJ3BC9kBaxYT7hzUMJ52mm2Wi2rLtZr7
FRuJ2QhgYgfjnxECjse9BGmdVZ+0y9phOilRKpPb7YV3er7KPe3b8+TmX9wp2uOB
s0wObUN5MxHv5N2J2PfjvCiEKku//EEaSrPeAJDyu/seHTkEGiZxOa+/T9E9s9KR
S3xSwR6SaglowGBpIV63yKPOamcxZPV76SyupnpUKf0Oh6MfDZLalvYJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWDtx3Jl3r3MrKuBsXbYj5TAjruMB8GA1UdIwQY
MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt
NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4
LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaXC6b4M
duvXm37W3TrXvR0MXCehfyaYidNdf/0g9KOo4XVzCNqIBQyLipK5R73p/Ydv2136
aig7vvKINrHijoWTwCKvfvYIKB7m1wxkWmmPdYntvxYdesp574MmfdluYvvbnflE
12i+jIIDhY3qAm/KcdI+dcq292h9J+4CjPvlT/jt72HbwO9aD3TMaHKiO5bHjDrp
Ah1y982JLrEM0nBqnHAyDn1MOEW3ZkpbnTakYZfevFQtl06cZ9LXzHeoTjW44izD
d8+icqKXdPYThCrEU/FdfYadA7GjQxpzfIJAtFjFoR628CjzpTMEJ06oz0bQI7qS
iziMcOXsGURZ0w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:08 2026 by rpki-client