Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: WooaKVdK/JtTG5a/7VpLco4aJrCS/1ud2JQggAUyeSE=
Subject key identifier: 31:8F:72:B1:98:48:02:5E:E7:05:AE:C4:0A:17:D8:3F:C1:2A:CE:59
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019FA33C469902AB3BCBA1A96C6766D133FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0A42
Signing time: Mon 27 Jul 2026 11:01:04 +0000
Manifest this update: Mon 27 Jul 2026 11:01:04 +0000
Manifest next update: Tue 28 Jul 2026 11:01:04 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: SLpW6H4B9mfF7Pzir9IEedAd6VBN+qq7tFMkIK84jAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:46:99:02:ab:3b:cb:a1:a9:6c:67:66:d1:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jul 27 11:01:04 2026 GMT
Not After : Jul 28 11:01:04 2026 GMT
Subject: CN=318f72b19848025ee705aec40a17d83fc12ace59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:75:58:89:dc:b4:d4:00:4b:da:21:c3:85:
e0:2a:ae:ae:6b:26:b9:5a:23:31:32:e4:01:5c:9c:
7a:ee:4d:61:42:4c:ad:7f:0b:56:6f:54:63:be:f0:
51:82:63:de:1a:e1:da:37:e7:12:45:fb:e0:ea:84:
c4:da:4c:bc:b3:b5:1f:da:f9:e1:af:3a:a9:c8:77:
da:10:4c:f5:b2:92:03:0c:2a:b0:af:4d:94:99:47:
34:80:bf:32:b1:7a:db:3b:64:77:3b:57:d4:a5:5b:
f4:5b:d6:eb:57:db:d5:2f:5f:a1:39:87:e8:2d:1e:
f6:43:31:73:a7:b6:bd:e1:c1:64:73:a6:e3:89:c8:
fa:d3:29:7b:ba:5d:af:a2:c7:f6:7f:e8:ee:ee:6a:
c0:2b:ff:9f:e0:c6:df:c0:27:2a:f1:fa:f5:89:b9:
78:18:37:de:86:15:c9:65:15:d1:13:87:57:bc:65:
03:b8:cf:40:ea:30:eb:de:27:1f:c8:2c:d8:a4:cd:
fe:d4:b7:0a:eb:2a:c5:9c:94:b4:16:70:f3:82:5a:
ad:fd:e3:7f:24:7e:ef:fb:2e:2d:71:3f:08:39:59:
f5:9e:2c:43:13:fe:a4:18:73:53:f9:bb:7f:48:d0:
c5:81:d4:e2:bb:dd:14:9e:73:8c:83:a9:d7:a2:5b:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:72:B1:98:48:02:5E:E7:05:AE:C4:0A:17:D8:3F:C1:2A:CE:59
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:52:ba:05:4b:49:df:94:52:0d:e3:09:f0:b5:e6:16:ae:
82:42:6f:c4:fc:0f:55:75:77:44:ec:6e:a1:d9:76:1e:0f:12:
e0:89:0c:f3:41:87:0f:f3:cb:58:c4:99:a2:b5:ac:f5:b5:f5:
ab:fc:fb:2b:e9:9c:ee:b3:74:76:b6:68:c5:c3:2e:26:4e:30:
23:62:48:24:2b:17:6c:3e:09:26:9b:e0:a8:b8:7d:4e:0a:5b:
2d:d9:68:ea:eb:e6:8e:16:64:b3:73:17:5a:ba:88:72:68:e2:
e6:c3:74:09:17:b2:51:1d:97:21:f2:22:1c:20:f6:83:0a:ca:
5b:27:e4:55:9a:24:3c:3d:58:7f:f0:5a:85:d2:5d:fa:ab:60:
25:62:f9:bc:3a:5d:bc:f9:f2:a2:89:f8:f5:dd:d2:31:3f:82:
0c:8a:4e:19:03:48:37:4f:5d:62:f1:e0:4b:db:55:ab:36:6b:
84:a4:e2:3a:c4:6a:59:73:fc:46:2d:38:2b:c9:47:03:85:36:
8e:0c:d1:e9:1a:be:1e:8c:1d:d0:55:9e:1f:06:5b:61:0c:ec:
91:0f:4d:dd:e4:25:7b:50:f7:1c:e5:7a:d2:5a:9f:59:e5:e7:
68:98:c8:c6:f3:69:77:b5:f4:5f:1b:36:40:d4:68:30:55:10:
fb:97:e7:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPEaZAqs7y6GpbGdm0TP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njc1OGJlYTY4ZjA4MjVjZjE2ZTY2ZmIwMmVlN2JjYTQ1
NGJhZTIwHhcNMjYwNzI3MTEwMTA0WhcNMjYwNzI4MTEwMTA0WjAzMTEwLwYDVQQD
EygzMThmNzJiMTk4NDgwMjVlZTcwNWFlYzQwYTE3ZDgzZmMxMmFjZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0x1WInctNQAS9ohw4XgKq6uaya5
WiMxMuQBXJx67k1hQkytfwtWb1RjvvBRgmPeGuHaN+cSRfvg6oTE2ky8s7Uf2vnh
rzqpyHfaEEz1spIDDCqwr02UmUc0gL8ysXrbO2R3O1fUpVv0W9brV9vVL1+hOYfo
LR72QzFzp7a94cFkc6bjicj60yl7ul2vosf2f+ju7mrAK/+f4MbfwCcq8fr1ibl4
GDfehhXJZRXRE4dXvGUDuM9A6jDr3icfyCzYpM3+1LcK6yrFnJS0FnDzglqt/eN/
JH7v+y4tcT8IOVn1nixDE/6kGHNT+bt/SNDFgdTiu90UnnOMg6nXolu8hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGPcrGYSAJe5wWuxAoX2D/BKs5ZMB8GA1UdIwQY
MBaAFHhnWL6mjwglzxbmb7Au57ykVLriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEt
ZWVkNDVjOTM3NzVlLzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEtZWVkNDVjOTM3NzVl
LzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqJSugVL
Sd+UUg3jCfC15haugkJvxPwPVXV3ROxuodl2Hg8S4IkM80GHD/PLWMSZorWs9bX1
q/z7K+mc7rN0drZoxcMuJk4wI2JIJCsXbD4JJpvgqLh9TgpbLdlo6uvmjhZks3MX
WrqIcmji5sN0CReyUR2XIfIiHCD2gwrKWyfkVZokPD1Yf/BahdJd+qtgJWL5vDpd
vPnyoon49d3SMT+CDIpOGQNIN09dYvHgS9tVqzZrhKTiOsRqWXP8Ri04K8lHA4U2
jgzR6Rq+Howd0FWeHwZbYQzskQ9N3eQle1D3HOV60lqfWeXnaJjIxvNpd7X0Xxs2
QNRoMFUQ+5fnSQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:13 2026 by rpki-client