Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: YnUs85ANnU3fuMjXvUgL+pInxyzIZgXl8vkZhr6VRTw=
Subject key identifier: 54:EF:BD:91:33:E2:1F:2D:F1:A5:44:59:B9:6D:A4:33:F5:D0:07:A1
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 019F189E5AAB38AE46C25E559DA455391F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 19AB
Signing time: Tue 30 Jun 2026 13:00:58 +0000
Manifest this update: Tue 30 Jun 2026 13:00:58 +0000
Manifest next update: Wed 01 Jul 2026 13:00:58 +0000
Files and hashes: 1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: XDqVXBCXe6zTEXeJCy18//dl9tyz+gQ90KpxKBnZIGc=)
2: S9k_0IlINL-KeGXzKJG1-aE0tUw.roa (hash: O/mE/4dpTNBbXj9EMpbseAy+oyk2TkWYstcB6Otmbbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:5a:ab:38:ae:46:c2:5e:55:9d:a4:55:39:1f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jun 30 13:00:58 2026 GMT
Not After : Jul 1 13:00:58 2026 GMT
Subject: CN=54efbd9133e21f2df1a54459b96da433f5d007a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:5f:91:e7:55:58:43:62:46:41:10:6d:e4:
1c:85:60:1a:58:08:52:c5:aa:67:c9:54:bc:3d:a0:
e5:ae:47:b3:4a:86:0b:21:97:24:86:e6:dc:6e:62:
a5:ff:e0:6b:9a:a4:1a:98:c1:0e:f5:79:41:6e:c4:
b8:4e:c8:fc:33:20:4f:92:74:66:a4:bb:98:7e:28:
cd:b2:c9:19:0b:8f:8e:9d:5e:06:1d:06:df:22:92:
de:bc:58:02:7b:dd:c1:70:fc:ba:b8:66:e6:7c:32:
21:02:56:de:ae:97:c6:dc:a3:77:a1:20:e5:5e:46:
aa:6c:4a:e7:df:b6:0e:fe:54:06:84:7d:68:54:b8:
9e:4a:b7:5f:a5:92:ef:84:e2:70:f5:06:bb:1c:c3:
07:dd:53:2b:56:2c:99:42:f3:fd:26:29:57:97:59:
8d:f2:09:ff:2f:5f:a6:84:8e:78:ca:7f:f5:ad:9a:
a3:ca:4a:60:39:4e:05:9d:9a:4f:53:e6:16:20:1b:
a2:c0:f3:c1:d8:4e:ff:87:8d:5e:12:84:3a:c6:13:
2c:f3:c5:d6:90:d0:ec:42:cf:0f:bf:b9:a4:e5:2c:
57:d7:a5:13:1c:bb:13:7f:4c:8c:de:dc:de:71:03:
51:67:83:d4:7d:fe:62:aa:5f:46:a7:ee:fa:d9:a1:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:BD:91:33:E2:1F:2D:F1:A5:44:59:B9:6D:A4:33:F5:D0:07:A1
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:bf:1d:bf:3c:b7:28:9d:80:18:07:17:d5:7d:9f:60:c1:
fc:2b:46:58:e5:59:ac:25:81:33:b9:bc:43:64:8a:dc:97:10:
8f:63:9b:9d:c9:40:c0:66:21:b0:bf:25:9b:94:bd:66:65:11:
85:bd:2c:a3:91:af:56:2a:83:55:ba:8f:27:e4:f6:3f:a0:62:
70:ae:8b:e7:ab:c0:4f:c6:0f:cb:9e:25:1b:4d:16:f4:9a:f5:
37:af:77:b9:70:45:f6:21:f9:cd:ac:a2:46:b3:04:2a:1b:9b:
5b:01:1c:5a:f6:44:83:34:d5:fe:89:7c:7d:ce:74:63:4e:62:
93:cb:87:b5:3b:b2:50:4a:3b:ef:c0:60:06:5c:d9:eb:37:3e:
71:91:39:72:d6:cb:69:77:9d:de:43:d8:86:cb:ad:0b:d8:bc:
a1:7b:2d:96:2e:80:fa:62:f4:63:c8:05:ff:86:c3:c4:fd:e3:
f3:bc:2a:9c:da:a3:67:0d:cf:21:0f:83:31:f4:ff:95:93:4f:
a0:ff:53:46:f0:5a:ea:b2:fe:b6:40:a7:4c:06:6c:3a:00:f4:
ff:19:8e:2b:bf:60:cd:c5:04:ce:82:53:69:52:a3:68:99:63:
5c:8d:7b:01:7f:0a:8f:f5:84:23:33:94:84:f4:c4:5e:c8:a2:
fe:77:63:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnlqrOK5Gwl5VnaRVOR+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjYwNjMwMTMwMDU4WhcNMjYwNzAxMTMwMDU4WjAzMTEwLwYDVQQD
Eyg1NGVmYmQ5MTMzZTIxZjJkZjFhNTQ0NTliOTZkYTQzM2Y1ZDAwN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i1fkedVWENiRkEQbeQchWAaWAhS
xapnyVS8PaDlrkezSoYLIZckhubcbmKl/+BrmqQamMEO9XlBbsS4Tsj8MyBPknRm
pLuYfijNsskZC4+OnV4GHQbfIpLevFgCe93BcPy6uGbmfDIhAlberpfG3KN3oSDl
XkaqbErn37YO/lQGhH1oVLieSrdfpZLvhOJw9Qa7HMMH3VMrViyZQvP9JilXl1mN
8gn/L1+mhI54yn/1rZqjykpgOU4FnZpPU+YWIBuiwPPB2E7/h41eEoQ6xhMs88XW
kNDsQs8Pv7mk5SxX16UTHLsTf0yM3tzecQNRZ4PUff5iql9Gp+762aH5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTvvZEz4h8t8aVEWbltpDP10AehMB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+O/Hb88
tyidgBgHF9V9n2DB/CtGWOVZrCWBM7m8Q2SK3JcQj2ObnclAwGYhsL8lm5S9ZmUR
hb0so5GvViqDVbqPJ+T2P6BicK6L56vAT8YPy54lG00W9Jr1N693uXBF9iH5zayi
RrMEKhubWwEcWvZEgzTV/ol8fc50Y05ik8uHtTuyUEo778BgBlzZ6zc+cZE5ctbL
aXed3kPYhsutC9i8oXstli6A+mL0Y8gF/4bDxP3j87wqnNqjZw3PIQ+DMfT/lZNP
oP9TRvBa6rL+tkCnTAZsOgD0/xmOK79gzcUEzoJTaVKjaJljXI17AX8Kj/WEIzOU
hPTEXsii/ndjlA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:34 2026 by rpki-client