Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: C0iF3hUWszF/zh9et6pOPzKKYm2gR5rozyQG+ETT3TE=
Subject key identifier: 79:D8:A1:D8:A7:63:77:27:F5:78:07:D8:99:41:10:A1:97:B8:86:25
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 019D39AE761144F1C18C098285B39862064B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: 1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa (hash: 56KjRsURL02cJfN9ZbBPqkJyvGYvGYVoP3tBohTeEsI=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: VOcTqc+0vB8/g+upkgSmhwRvuPeaHH/ATQ0ZatDPPOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:76:11:44:f1:c1:8c:09:82:85:b3:98:62:06:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=79d8a1d8a7637727f57807d8994110a197b88625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:b5:43:64:6c:fb:ca:47:c1:17:34:d0:b9:
8c:e1:2e:67:af:df:52:16:1c:0c:cc:b2:96:c4:9c:
bd:da:90:ed:49:87:f7:63:7d:40:ab:fd:e0:b9:33:
df:e4:03:e3:52:57:fc:bf:5e:ab:1d:37:4c:51:5a:
a3:31:46:dc:21:86:b6:e2:6c:37:b6:cd:e7:c4:3e:
4b:7d:3d:65:57:fe:14:c7:46:68:15:2c:7d:b8:3c:
48:c5:c9:f8:a6:24:af:8b:9b:ba:93:a9:2d:a6:65:
be:e3:21:9b:51:a2:dd:fc:6d:97:aa:ce:44:22:4b:
25:2b:6a:3b:4c:02:78:ca:c7:18:55:61:9b:e9:4b:
a9:36:fa:c9:08:33:b2:b4:4c:7c:6e:1e:85:6d:92:
1a:b4:a8:04:83:14:73:de:77:12:69:de:a8:60:b0:
30:6a:3f:55:56:ee:0f:81:4c:b2:12:9b:c7:a7:8a:
ae:b9:c2:6c:97:42:91:42:b8:65:aa:dc:90:cb:82:
8d:06:6c:1a:74:7a:c3:6c:d8:f7:01:ba:02:a0:db:
6d:ea:c7:82:9e:dd:6b:aa:23:bc:32:bb:ea:a3:b6:
34:fd:1d:22:16:11:8c:b0:69:87:08:2b:0d:fb:c7:
a4:c0:8e:db:e9:e9:6f:f2:57:f7:55:c4:b9:28:f1:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:A1:D8:A7:63:77:27:F5:78:07:D8:99:41:10:A1:97:B8:86:25
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:d9:27:4e:aa:79:28:1a:46:8f:bf:b4:f5:3e:36:6c:f4:
2a:62:5a:0b:b2:28:82:8d:ea:26:11:ac:07:2a:b9:67:5b:97:
1c:cd:57:10:88:78:06:a1:01:b0:2d:71:15:0e:3e:09:09:cd:
3f:04:1c:f7:6f:d4:12:93:a9:65:13:48:22:d6:bd:86:5a:91:
7f:0c:29:d2:c9:9b:24:b2:c2:96:ba:9d:fa:c9:e1:5f:43:58:
4f:29:67:8f:93:f9:d8:0f:8c:f1:a6:62:67:5c:18:c5:4e:ea:
6f:d0:d9:58:fa:91:a9:c1:40:50:e5:14:9b:57:47:e0:3f:b7:
d0:3d:9a:44:50:4c:dc:59:72:0b:76:3a:cc:70:21:65:63:fb:
b9:35:7d:97:1c:f1:c3:78:f0:ea:04:99:7b:39:f7:fe:d2:39:
a4:cd:42:20:37:a5:ad:d4:68:77:8c:c3:1f:b5:ba:fd:7d:49:
ee:44:0d:6b:71:bc:c8:ce:b3:17:63:54:73:27:07:54:3f:76:
0a:74:19:34:ef:a6:fd:8d:ca:99:74:6d:5d:81:8b:5e:80:75:
30:7d:d6:b4:4b:cf:08:13:66:a4:f1:d1:da:27:4c:63:5c:23:
e2:f4:4c:ed:6c:7d:ca:da:d6:ed:ac:c8:2c:c6:50:15:c6:21:
95:67:b8:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnYRRPHBjAmChbOYYgZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy
MzYwMTMwHhcNMjYwMzI5MTMwMDI3WhcNMjYwMzMwMTMwMDI3WjAzMTEwLwYDVQQD
Eyg3OWQ4YTFkOGE3NjM3NzI3ZjU3ODA3ZDg5OTQxMTBhMTk3Yjg4NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ni1Q2Rs+8pHwRc00LmM4S5nr99S
FhwMzLKWxJy92pDtSYf3Y31Aq/3guTPf5APjUlf8v16rHTdMUVqjMUbcIYa24mw3
ts3nxD5LfT1lV/4Ux0ZoFSx9uDxIxcn4piSvi5u6k6ktpmW+4yGbUaLd/G2Xqs5E
IkslK2o7TAJ4yscYVWGb6UupNvrJCDOytEx8bh6FbZIatKgEgxRz3ncSad6oYLAw
aj9VVu4PgUyyEpvHp4quucJsl0KRQrhlqtyQy4KNBmwadHrDbNj3AboCoNtt6seC
nt1rqiO8Mrvqo7Y0/R0iFhGMsGmHCCsN+8ekwI7b6elv8lf3VcS5KPGkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnYodinY3cn9XgH2JlBEKGXuIYlMB8GA1UdIwQY
MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt
NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0
LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0TZJ06q
eSgaRo+/tPU+Nmz0KmJaC7Iogo3qJhGsByq5Z1uXHM1XEIh4BqEBsC1xFQ4+CQnN
PwQc92/UEpOpZRNIIta9hlqRfwwp0smbJLLClrqd+snhX0NYTylnj5P52A+M8aZi
Z1wYxU7qb9DZWPqRqcFAUOUUm1dH4D+30D2aRFBM3FlyC3Y6zHAhZWP7uTV9lxzx
w3jw6gSZezn3/tI5pM1CIDelrdRod4zDH7W6/X1J7kQNa3G8yM6zF2NUcycHVD92
CnQZNO+m/Y3KmXRtXYGLXoB1MH3WtEvPCBNmpPHR2idMY1wj4vRM7Wx9ytrW7azI
LMZQFcYhlWe48A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:35 2026 by rpki-client