Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: PjKOu7fAUmyt/0CFaRJv/YFXkDXXL/ekMfAdNXNhTZ8=
Subject key identifier: 96:03:CB:CF:F4:47:EA:5D:B3:C8:81:4D:99:76:2F:86:5F:29:D9:B8
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019CD354A29284200A3788E7AC2B71782448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0998
Signing time: Mon 09 Mar 2026 16:01:05 +0000
Manifest this update: Mon 09 Mar 2026 16:01:05 +0000
Manifest next update: Tue 10 Mar 2026 16:01:05 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: tDwTqqLjBnAwvSMRNKRQ9q1KNo59hf17yQma0OKW/ug=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:54:a2:92:84:20:0a:37:88:e7:ac:2b:71:78:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Mar 9 16:01:05 2026 GMT
Not After : Mar 10 16:01:05 2026 GMT
Subject: CN=9603cbcff447ea5db3c8814d99762f865f29d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:00:f3:f1:f0:5c:8b:80:1f:0e:20:79:6c:
8d:d6:09:02:3a:a2:a4:c4:72:a1:ae:34:ca:02:74:
2a:4f:c5:e0:e2:18:99:d2:00:c1:97:50:1a:db:56:
02:15:c2:ba:67:d8:21:ef:84:ca:37:03:c6:bf:1b:
fd:9f:45:51:8a:d4:0b:da:34:c3:6b:8e:63:fd:42:
bb:bf:91:bb:38:ed:b8:43:09:37:01:c9:43:55:de:
9c:77:f8:6c:02:be:11:fc:45:3d:b5:33:a3:73:26:
83:22:f3:f9:bc:b5:35:77:98:58:ab:2d:06:ac:e9:
7b:f8:05:a1:c5:94:b4:7a:1a:33:de:a2:50:ab:75:
2b:bb:65:48:0c:6b:34:e5:88:b2:5d:a9:95:b5:e3:
ee:de:47:64:0c:b0:c0:15:e0:cf:ef:c4:02:21:a5:
ef:01:a4:d8:ab:bd:dc:22:9f:b3:42:66:5b:4d:f9:
fd:6d:e5:44:56:00:30:a5:ff:07:4b:84:5f:89:5d:
b5:57:93:9d:14:67:02:7d:38:66:40:1f:29:e7:22:
74:ff:f5:0b:bb:6b:59:c4:b6:f2:74:93:1e:89:51:
15:d1:ad:5c:78:ac:88:c8:e7:eb:ca:1f:69:f0:42:
c8:9b:39:b0:30:db:46:6a:e3:3d:eb:a1:b8:c2:fc:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:CB:CF:F4:47:EA:5D:B3:C8:81:4D:99:76:2F:86:5F:29:D9:B8
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:29:1a:c8:ae:8a:84:76:73:d5:8f:8f:91:b0:b4:41:1a:
a9:9e:d7:15:ab:75:7d:4d:47:e5:71:9a:49:38:b2:e6:3d:ea:
6e:77:1b:4f:6f:50:b7:19:09:32:f7:ee:48:2f:10:24:7e:48:
23:21:68:06:fe:75:d7:70:a3:c3:1e:56:aa:5a:7a:0c:53:18:
bd:16:62:3c:10:0a:65:b3:5f:ba:17:94:bd:d1:77:82:51:9b:
fb:13:4d:95:ba:38:d5:38:48:07:3b:b8:59:a1:89:0c:2f:66:
db:9e:e8:3b:5c:dd:68:40:d6:38:ea:9d:93:3e:b1:e0:ca:f5:
8c:e7:82:d0:df:63:d3:d3:47:0c:b3:d3:53:77:d5:3f:93:fc:
8d:13:72:29:bc:b5:ec:4b:6e:84:14:ad:7c:d0:ea:de:6e:40:
0b:84:00:97:4e:04:a7:a9:e6:a3:a8:95:0e:92:b0:a1:73:43:
74:94:b4:b7:c8:03:1e:02:b8:80:b1:c3:46:81:18:a8:a3:81:
2d:ea:b3:bd:46:b5:f6:01:35:6a:5b:e8:e4:32:e6:21:31:7f:
c2:cb:91:c4:8b:55:42:91:8f:fb:b4:26:21:3d:dd:d8:d7:8c:
a5:71:d3:7f:62:93:ba:c5:81:ab:c5:9f:80:9f:fa:16:07:93:
64:e8:34:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzTVKKShCAKN4jnrCtxeCRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwMzA5MTYwMTA1WhcNMjYwMzEwMTYwMTA1WjAzMTEwLwYDVQQD
Eyg5NjAzY2JjZmY0NDdlYTVkYjNjODgxNGQ5OTc2MmY4NjVmMjlkOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDwA8/HwXIuAHw4geWyN1gkCOqKk
xHKhrjTKAnQqT8Xg4hiZ0gDBl1Aa21YCFcK6Z9gh74TKNwPGvxv9n0VRitQL2jTD
a45j/UK7v5G7OO24Qwk3AclDVd6cd/hsAr4R/EU9tTOjcyaDIvP5vLU1d5hYqy0G
rOl7+AWhxZS0ehoz3qJQq3Uru2VIDGs05YiyXamVtePu3kdkDLDAFeDP78QCIaXv
AaTYq73cIp+zQmZbTfn9beVEVgAwpf8HS4RfiV21V5OdFGcCfThmQB8p5yJ0//UL
u2tZxLbydJMeiVEV0a1ceKyIyOfryh9p8ELImzmwMNtGauM966G4wvxmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYDy8/0R+pds8iBTZl2L4ZfKdm4MB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiUpGsiu
ioR2c9WPj5GwtEEaqZ7XFat1fU1H5XGaSTiy5j3qbncbT29QtxkJMvfuSC8QJH5I
IyFoBv5113Cjwx5Wqlp6DFMYvRZiPBAKZbNfuheUvdF3glGb+xNNlbo41ThIBzu4
WaGJDC9m257oO1zdaEDWOOqdkz6x4Mr1jOeC0N9j09NHDLPTU3fVP5P8jRNyKby1
7EtuhBStfNDq3m5AC4QAl04Ep6nmo6iVDpKwoXNDdJS0t8gDHgK4gLHDRoEYqKOB
LeqzvUa19gE1alvo5DLmITF/wsuRxItVQpGP+7QmIT3d2NeMpXHTf2KTusWBq8Wf
gJ/6FgeTZOg0fw==
-----END CERTIFICATE-----
Generated at Tue Mar 10 02:22:52 2026 by rpki-client