Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: YkWcyiFF8CDgFroyZQFLt/KRQTVxZ4FjxBuG5pFhQuU=
Subject key identifier: DB:04:79:8F:85:EC:5F:46:53:B1:06:3F:1B:9A:CF:C2:FE:13:FB:BA
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 019D3865C0AB78512D43AFB575BBD2F1128A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: 0283
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: eNgxFof__aJgFG-fM-WbMgesakE.roa (hash: e+MHRSvAKiQl4NPwsvF2TCAiilK823zLQWoT/MlXItM=)
2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: rQNi9ejSCo7D02w1MG3k9neoSBWH6SS+6qVxjX5NWn8=)
3: vcYfbPfGVs0aMYKOlxwdnUc65Uc.roa (hash: YMNkeJBfcEDciUVO4DqSW7poLvVvmF0rwrSlq2tpwWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c0:ab:78:51:2d:43:af:b5:75:bb:d2:f1:12:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=db04798f85ec5f4653b1063f1b9acfc2fe13fbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:70:a9:a7:14:04:9c:1e:38:cd:cb:8b:65:
98:36:06:dc:6d:b1:79:db:fe:7a:a7:21:f6:41:83:
93:db:58:d3:fe:22:97:92:c8:20:74:33:84:8d:44:
c3:ce:dd:26:bc:c7:b2:b2:3d:69:c3:8f:c1:dc:0b:
72:dc:01:7f:ca:b2:c0:e7:71:6d:0f:7a:9b:31:e8:
52:47:3e:18:38:c2:78:c0:52:53:39:1c:1a:08:0f:
2a:31:9d:96:8a:77:72:7d:1b:38:07:ea:1a:d5:f1:
e2:f0:85:f1:55:bd:92:72:8f:9d:12:ba:9b:aa:f5:
a5:7f:5c:2b:ab:6e:65:03:bc:25:f4:f1:58:8f:9f:
05:7c:52:f9:4f:55:dc:d0:be:19:b0:79:5c:44:32:
05:bc:d2:13:a7:ad:9c:3b:fd:b9:c8:7c:aa:a2:06:
48:15:86:d9:08:41:9a:42:3c:52:45:ab:2b:b1:72:
d1:e5:ef:69:1d:bf:7d:25:b5:55:0c:41:c8:c8:86:
26:8d:1c:23:4c:5b:33:87:e6:a4:8e:14:40:d1:8d:
a6:95:14:d3:a7:44:85:79:94:af:0c:25:cb:65:99:
b4:87:2f:e5:b4:93:93:c8:3c:71:56:06:59:59:c1:
e5:d0:77:02:22:7f:a0:2b:30:8a:77:78:c2:c0:65:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:04:79:8F:85:EC:5F:46:53:B1:06:3F:1B:9A:CF:C2:FE:13:FB:BA
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a6:16:4f:7c:6a:48:ac:98:7f:13:e9:87:f4:6d:f1:f8:0d:
84:f5:5e:a6:72:0a:db:ea:dd:66:30:b7:c4:4d:59:30:49:fc:
52:2e:81:c6:07:41:58:e0:43:ed:7a:2b:f9:02:40:f4:d6:6f:
a5:73:2e:f4:4d:47:d0:4a:69:27:81:cf:b2:8a:f1:e1:42:03:
71:a4:00:28:86:01:ff:2e:49:b2:db:81:56:03:67:39:a9:20:
50:72:4e:f1:bf:78:77:98:3d:ba:d2:a0:22:f4:fc:01:44:c9:
d6:4b:9b:7b:82:5f:01:66:50:fb:d4:98:b7:14:20:8e:11:c2:
4a:8a:ab:55:c4:c5:56:c7:e7:ab:01:b4:19:ae:69:44:8a:60:
e9:24:27:40:6b:e9:8f:c9:15:ab:5e:60:9d:a9:4e:e0:e7:1d:
d3:05:2a:41:64:6b:13:12:09:f2:04:4c:3f:09:5a:fe:80:ac:
ff:fd:fa:5b:d0:ed:24:85:08:a5:a1:fd:43:ea:6f:6d:95:39:
0f:c7:51:bc:d9:72:d7:b9:ab:0d:0a:e8:1d:23:13:fb:5e:48:
9b:57:7c:ad:10:0e:91:6f:a7:5b:5d:c5:32:c1:d2:a2:66:2b:
80:45:92:77:38:d4:30:ca:51:a0:19:a0:b9:79:0e:b5:db:1f:
18:55:a6:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcCreFEtQ6+1dbvS8RKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZTk4ZGVlOWFhZGM4NmI0ZGZhOWUxNjhkOTIxYmQ4MGJh
M2YzYTYwHhcNMjYwMzI5MDcwMTI1WhcNMjYwMzMwMDcwMTI1WjAzMTEwLwYDVQQD
EyhkYjA0Nzk4Zjg1ZWM1ZjQ2NTNiMTA2M2YxYjlhY2ZjMmZlMTNmYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KFwqacUBJweOM3Li2WYNgbcbbF5
2/56pyH2QYOT21jT/iKXksggdDOEjUTDzt0mvMeysj1pw4/B3Aty3AF/yrLA53Ft
D3qbMehSRz4YOMJ4wFJTORwaCA8qMZ2WindyfRs4B+oa1fHi8IXxVb2Sco+dErqb
qvWlf1wrq25lA7wl9PFYj58FfFL5T1Xc0L4ZsHlcRDIFvNITp62cO/25yHyqogZI
FYbZCEGaQjxSRasrsXLR5e9pHb99JbVVDEHIyIYmjRwjTFszh+akjhRA0Y2mlRTT
p0SFeZSvDCXLZZm0hy/ltJOTyDxxVgZZWcHl0HcCIn+gKzCKd3jCwGWHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsEeY+F7F9GU7EGPxuaz8L+E/u6MB8GA1UdIwQY
MBaAFHjpje6archrTfqeFo2SG9gLo/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt
NWM3MTk1NmE1Mzc3LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3
LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqYWT3xq
SKyYfxPph/Rt8fgNhPVepnIK2+rdZjC3xE1ZMEn8Ui6BxgdBWOBD7Xor+QJA9NZv
pXMu9E1H0EppJ4HPsorx4UIDcaQAKIYB/y5JstuBVgNnOakgUHJO8b94d5g9utKg
IvT8AUTJ1kube4JfAWZQ+9SYtxQgjhHCSoqrVcTFVsfnqwG0Ga5pRIpg6SQnQGvp
j8kVq15gnalO4Ocd0wUqQWRrExIJ8gRMPwla/oCs//36W9DtJIUIpaH9Q+pvbZU5
D8dRvNly17mrDQroHSMT+15Im1d8rRAOkW+nW13FMsHSomYrgEWSdzjUMMpRoBmg
uXkOtdsfGFWmyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:27 2026 by rpki-client