Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: K97Sf4vz4OMc/dGHzuXay4jIq/5Az1EebgqjxyOaRwQ=
Subject key identifier: 29:2F:EE:4B:60:E0:97:48:06:1A:FD:6C:AE:FB:F8:94:BC:66:1F:38
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 01A175F07FDE37B878C426ACD4DD5A8BDBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 02:00:57 +0000
Manifest this update: Mon 26 Oct 2026 02:00:57 +0000
Manifest next update: Tue 27 Oct 2026 02:00:57 +0000
Files and hashes: 1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: iLCSsHIpTYQ6+lfQ9Yoes0+n7djbNBDRMfF47VFUw98=)
3: ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa (hash: 3P+Qk6FSe+iXFNy50RbYcBKfyRXeennfx5/RBemjyco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:7f:de:37:b8:78:c4:26:ac:d4:dd:5a:8b:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Oct 26 02:00:57 2026 GMT
Not After : Oct 27 02:00:57 2026 GMT
Subject: CN=292fee4b60e09748061afd6caefbf894bc661f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:4a:e6:6f:c2:31:1d:d5:32:c3:7c:9e:d3:
d6:f1:fa:f2:e0:e0:9e:c4:1d:72:45:28:e7:1b:68:
48:1d:80:69:69:8c:98:03:0c:62:0a:c2:ea:0b:d8:
b6:04:fa:8a:be:05:d6:d5:52:ad:56:de:14:cc:b9:
c5:70:9d:64:21:21:b2:62:d7:fc:9d:4c:f8:43:46:
a7:dd:7f:f8:98:5f:56:3d:40:0c:dc:01:2a:6a:78:
30:c8:f4:4b:c3:83:8d:68:a8:2f:fc:1a:67:9c:c3:
32:86:3d:8a:5f:26:65:0f:ff:e4:9c:f6:f8:9b:d2:
74:bd:8e:ed:80:6b:28:3b:7b:5a:bc:b3:03:51:42:
3f:17:40:10:4d:2e:b8:3f:9e:1a:75:b7:b9:12:31:
5d:b0:8c:36:cc:27:b8:5b:61:62:26:46:e9:6b:f3:
ba:68:41:af:27:aa:61:c4:e2:cb:4b:8c:b0:f1:d1:
9f:8b:84:96:4d:f7:b3:72:ba:ba:ad:d7:4d:1b:03:
a2:a3:52:8b:09:89:f2:d6:09:9f:ac:36:bf:0a:36:
34:04:10:35:cc:46:a0:b5:ca:74:35:4d:67:48:e3:
3f:34:61:64:f1:6b:b0:0a:ee:2f:78:f9:34:3a:1d:
39:d2:df:f5:d6:f8:78:25:b7:48:5f:be:48:2f:7f:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:EE:4B:60:E0:97:48:06:1A:FD:6C:AE:FB:F8:94:BC:66:1F:38
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:8f:2b:30:10:ad:70:4a:9c:2c:07:21:f7:71:04:4a:d3:
53:83:09:50:fc:c5:b1:6d:65:81:c3:45:d6:d8:e9:9b:8c:2a:
82:08:3b:ab:2b:c0:26:77:8f:5b:96:36:fe:9f:e9:b2:a3:b9:
c1:fa:17:5e:e9:e8:14:f3:15:33:65:7f:6b:12:41:30:69:87:
13:cc:ab:0a:1b:c5:ad:35:4c:8f:4a:4e:c3:6d:7e:8c:b8:6d:
00:82:43:54:db:e9:18:b2:d7:bd:2f:66:45:99:16:c4:f7:76:
e8:d4:ba:0d:20:85:87:a8:91:f9:96:2a:d4:21:9f:42:3e:9e:
84:0a:95:6b:a7:10:9b:6d:63:90:82:4d:3c:5e:c4:4f:c9:0e:
24:89:03:02:45:73:61:ad:42:74:1a:84:d3:f1:92:82:80:2e:
80:b1:9c:97:18:3e:b2:14:57:f6:7a:47:cf:e0:26:ba:27:9a:
7e:d0:42:96:4d:ed:88:c1:82:df:83:4f:ee:0d:4d:7f:eb:67:
13:28:9e:b3:be:ab:fc:fd:c7:f8:84:91:a6:b2:14:8e:2b:ca:
f5:3e:7d:11:c5:0d:c8:c2:6a:91:c4:3b:d2:36:16:3a:56:5b:
29:fe:c1:7d:5e:53:ee:69:1e:4c:1c:11:bd:9b:4d:5d:9f:f4:
4a:32:c6:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF18H/eN7h4xCas1N1ai9v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGYwZTViMGMxZGVjMDA1MWZlNWU2ZWJlYjU4ZTc2MDdm
MzE0YjIwHhcNMjYxMDI2MDIwMDU3WhcNMjYxMDI3MDIwMDU3WjAzMTEwLwYDVQQD
EygyOTJmZWU0YjYwZTA5NzQ4MDYxYWZkNmNhZWZiZjg5NGJjNjYxZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysBK5m/CMR3VMsN8ntPW8fry4OCe
xB1yRSjnG2hIHYBpaYyYAwxiCsLqC9i2BPqKvgXW1VKtVt4UzLnFcJ1kISGyYtf8
nUz4Q0an3X/4mF9WPUAM3AEqangwyPRLw4ONaKgv/BpnnMMyhj2KXyZlD//knPb4
m9J0vY7tgGsoO3tavLMDUUI/F0AQTS64P54adbe5EjFdsIw2zCe4W2FiJkbpa/O6
aEGvJ6phxOLLS4yw8dGfi4SWTfezcrq6rddNGwOio1KLCYny1gmfrDa/CjY0BBA1
zEagtcp0NU1nSOM/NGFk8WuwCu4vePk0Oh050t/11vh4JbdIX75IL3/bFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkv7ktg4JdIBhr9bK77+JS8Zh84MB8GA1UdIwQY
MBaAFBKPDlsMHewAUf5ebr61jnYH8xSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGM0NWMtNDUyNC00MTc3LWJmYWMt
YTUyNDI0ZmIyYTBlLzEvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81NGM0NWMtNDUyNC00MTc3LWJmYWMtYTUyNDI0ZmIyYTBl
LzEvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuOPKzAQ
rXBKnCwHIfdxBErTU4MJUPzFsW1lgcNF1tjpm4wqggg7qyvAJnePW5Y2/p/psqO5
wfoXXunoFPMVM2V/axJBMGmHE8yrChvFrTVMj0pOw21+jLhtAIJDVNvpGLLXvS9m
RZkWxPd26NS6DSCFh6iR+ZYq1CGfQj6ehAqVa6cQm21jkIJNPF7ET8kOJIkDAkVz
Ya1CdBqE0/GSgoAugLGclxg+shRX9npHz+AmuieaftBClk3tiMGC34NP7g1Nf+tn
Eyies76r/P3H+ISRprIUjivK9T59EcUNyMJqkcQ70jYWOlZbKf7BfV5T7mkeTBwR
vZtNXZ/0SjLG5w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:13:11 2026 by rpki-client