Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: Cw0SM0Zi6QqAD0rLuqA2sMfVsAkT0OQRUwvEOQmAZ4w=
Subject key identifier: FA:62:6B:5A:3B:0A:3D:00:AF:45:EE:72:83:8C:1F:BA:7B:AB:CD:E7
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01A0005D29C392737F2B13441D785F4F12C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 1A23
Signing time: Fri 14 Aug 2026 13:01:40 +0000
Manifest this update: Fri 14 Aug 2026 13:01:40 +0000
Manifest next update: Sat 15 Aug 2026 13:01:40 +0000
Files and hashes: 1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: OlsrxCCP5E+BbdkM6XIdb0ct0L2Ybgr38vnjqpoQrQM=)
2: S9k_0IlINL-KeGXzKJG1-aE0tUw.roa (hash: O/mE/4dpTNBbXj9EMpbseAy+oyk2TkWYstcB6Otmbbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:29:c3:92:73:7f:2b:13:44:1d:78:5f:4f:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Aug 14 13:01:40 2026 GMT
Not After : Aug 15 13:01:40 2026 GMT
Subject: CN=fa626b5a3b0a3d00af45ee72838c1fba7babcde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:27:aa:2b:fd:99:c2:25:31:19:b6:5a:55:
0e:4a:43:66:a1:23:52:06:d7:4e:54:87:ab:9d:5c:
1a:b5:ae:60:2a:66:94:4b:4f:f4:57:57:d6:75:c3:
34:fe:4e:5d:d9:87:55:34:88:b2:f8:ae:3f:da:1a:
f4:7f:5d:dd:47:63:9e:74:af:e1:7c:e8:d5:77:d5:
6f:6c:3d:50:45:06:d8:91:b8:1e:26:7b:2d:a2:b8:
e9:84:12:2f:59:d9:d5:02:cc:64:11:f4:23:d6:d3:
5b:b1:6b:90:fe:77:7b:5c:70:41:51:e6:ed:4e:d9:
1f:fc:e2:4f:9b:06:17:a9:1c:29:13:d4:91:23:2c:
40:25:0b:0c:94:46:e8:3c:06:a7:2e:59:82:df:ca:
95:f1:d5:15:07:69:6c:e6:59:7a:d4:2b:ff:a5:70:
ae:2b:b6:38:2c:0e:85:8a:5e:29:21:a8:44:fa:54:
19:a3:a9:17:23:74:f9:e3:72:cb:ff:81:51:52:e1:
64:f5:e0:0e:19:5d:32:2d:d0:99:e6:e6:cf:74:f8:
3a:98:42:e8:79:86:43:7d:d1:99:db:c3:a7:5f:4a:
57:b7:df:57:bb:20:aa:d0:08:c4:03:ac:03:e2:2f:
62:d9:db:d2:04:41:43:91:3b:1c:6f:3e:5b:cc:b6:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:6B:5A:3B:0A:3D:00:AF:45:EE:72:83:8C:1F:BA:7B:AB:CD:E7
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:50:d4:53:98:26:b5:f1:53:4d:1d:d0:25:66:79:0d:ef:c5:
3e:fb:ec:a9:4a:3c:09:51:e6:9d:d6:7a:29:83:f1:81:c6:5b:
d4:cb:0d:d7:cc:12:e4:8b:a8:e1:81:fc:08:56:4d:05:11:f6:
b3:03:fc:a7:1d:2e:20:5a:4c:01:df:14:fa:c2:f1:a4:56:4c:
0b:a9:36:2b:2b:07:be:25:c8:23:fd:8f:7b:a0:b3:3e:7c:00:
4a:fd:33:cb:f0:ca:5e:72:28:79:f7:87:80:74:be:6c:cb:0e:
64:c7:be:5b:58:b9:5c:84:25:da:f2:7a:41:75:ec:44:3b:6d:
06:93:45:38:2f:cf:27:c2:ea:dd:62:5c:48:25:d6:67:91:c9:
35:fc:52:9f:59:f9:c5:50:fd:02:0d:c7:64:2a:f0:49:ac:75:
bf:02:99:fc:3f:e7:d5:9f:7e:d0:da:5c:5b:51:08:bc:74:f7:
06:d5:7d:67:50:c2:c8:0d:95:54:55:94:81:38:e6:bc:55:cb:
ad:eb:11:bb:a1:20:24:43:9b:be:43:90:3b:1c:a0:85:a3:48:
a7:73:57:0d:e5:0e:c8:76:1c:74:47:90:fb:81:3b:b0:ce:de:
7a:05:96:76:d8:3a:e1:11:24:01:ae:15:3d:19:bc:d1:d5:78:
d5:7b:ac:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXSnDknN/KxNEHXhfTxLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjYwODE0MTMwMTQwWhcNMjYwODE1MTMwMTQwWjAzMTEwLwYDVQQD
EyhmYTYyNmI1YTNiMGEzZDAwYWY0NWVlNzI4MzhjMWZiYTdiYWJjZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F8nqiv9mcIlMRm2WlUOSkNmoSNS
BtdOVIernVwata5gKmaUS0/0V1fWdcM0/k5d2YdVNIiy+K4/2hr0f13dR2OedK/h
fOjVd9VvbD1QRQbYkbgeJnstorjphBIvWdnVAsxkEfQj1tNbsWuQ/nd7XHBBUebt
Ttkf/OJPmwYXqRwpE9SRIyxAJQsMlEboPAanLlmC38qV8dUVB2ls5ll61Cv/pXCu
K7Y4LA6Fil4pIahE+lQZo6kXI3T543LL/4FRUuFk9eAOGV0yLdCZ5ubPdPg6mELo
eYZDfdGZ28OnX0pXt99XuyCq0AjEA6wD4i9i2dvSBEFDkTscbz5bzLZnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpia1o7Cj0Ar0XucoOMH7p7q83nMB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslDUU5gm
tfFTTR3QJWZ5De/FPvvsqUo8CVHmndZ6KYPxgcZb1MsN18wS5Iuo4YH8CFZNBRH2
swP8px0uIFpMAd8U+sLxpFZMC6k2KysHviXII/2Pe6CzPnwASv0zy/DKXnIoefeH
gHS+bMsOZMe+W1i5XIQl2vJ6QXXsRDttBpNFOC/PJ8Lq3WJcSCXWZ5HJNfxSn1n5
xVD9Ag3HZCrwSax1vwKZ/D/n1Z9+0NpcW1EIvHT3BtV9Z1DCyA2VVFWUgTjmvFXL
resRu6EgJEObvkOQOxyghaNIp3NXDeUOyHYcdEeQ+4E7sM7eegWWdtg64REkAa4V
PRm80dV41Xus0g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:53 2026 by rpki-client