Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: eCxnD/a+22gxyEf9WGQOUQM6U0OfJHNHH0376B6z+Xo=
Subject key identifier: DA:0E:1D:CE:64:4E:48:F3:CD:78:7C:81:06:4E:C6:4E:B2:71:3A:C1
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01A002B955F0FB6EA73D2B1A7574DB430CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1A01
Signing time: Sat 15 Aug 2026 00:01:35 +0000
Manifest this update: Sat 15 Aug 2026 00:01:35 +0000
Manifest next update: Sun 16 Aug 2026 00:01:35 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: IB9xsOjekdSb3HXxPK7jd6J/gStuuy33i2vUxaPP9/M=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:55:f0:fb:6e:a7:3d:2b:1a:75:74:db:43:0c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Aug 15 00:01:35 2026 GMT
Not After : Aug 16 00:01:35 2026 GMT
Subject: CN=da0e1dce644e48f3cd787c81064ec64eb2713ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:7a:bd:da:22:8f:53:34:aa:d5:a1:3b:c8:
f3:53:b9:39:c2:36:3f:98:51:6c:c5:e1:f1:ae:14:
a5:53:1d:e1:f7:08:42:a2:9a:10:47:65:48:1b:3d:
06:4a:0f:46:08:52:5a:72:ec:a8:bb:2c:c3:ee:c9:
8a:d6:42:8c:e6:92:a7:05:6b:39:af:2c:1e:1b:7f:
b5:f4:6c:e1:56:38:72:dd:10:dd:6e:cc:fb:bd:96:
53:73:df:98:40:0a:3d:9c:50:50:19:d9:b7:68:47:
cf:67:16:81:75:10:eb:ff:f6:51:dc:73:af:5a:9f:
29:ea:15:3b:2b:b0:3f:c8:6b:98:d0:cf:db:df:6f:
1c:77:26:29:4d:33:09:e1:f4:ba:dd:18:5d:fb:64:
f6:18:9d:ee:61:fc:b7:46:a6:34:a4:83:56:f7:d9:
94:e7:57:bd:07:07:c3:2a:2b:c1:c9:19:08:01:48:
80:a0:7b:5d:8b:3c:45:2e:47:25:b7:c2:de:18:1e:
a5:3a:0e:91:9a:0a:03:db:74:c9:ce:6c:8f:7b:03:
d8:53:5e:d4:d2:6b:c1:05:90:48:7f:a7:73:3b:55:
14:e4:5e:46:50:e9:d6:e6:cb:e0:23:ea:92:e7:12:
6b:79:78:e8:91:34:77:34:cf:ae:f3:2b:b4:19:25:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:1D:CE:64:4E:48:F3:CD:78:7C:81:06:4E:C6:4E:B2:71:3A:C1
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cc:18:57:51:fd:f0:33:47:f4:72:af:7c:ef:05:1c:97:1c:
bb:8b:72:28:ef:39:14:70:13:10:14:19:5c:0a:46:3e:5a:1c:
4f:2a:28:9b:ec:58:cf:cd:ad:75:53:1e:e7:2a:1f:d3:62:1a:
35:a7:b1:03:67:74:1b:4c:01:f3:4b:4c:f9:94:0b:69:d5:08:
bf:f9:2b:55:60:bd:63:31:6c:07:e5:4c:6b:55:55:9a:d7:04:
35:7f:3e:c0:9e:a9:90:e8:b2:9a:b2:b5:04:1e:46:19:fa:0c:
58:e5:87:32:e1:17:4b:3d:d3:85:05:cd:5d:9f:1a:f3:de:be:
b9:a4:8f:37:d7:aa:8e:b0:a7:66:7b:8d:02:42:9f:f3:a9:eb:
66:37:f3:bd:ab:4d:99:22:fa:98:a1:03:18:27:05:38:3e:72:
28:48:b5:2a:46:90:9d:78:0d:b9:34:2c:e6:5b:31:65:8c:82:
64:7c:b3:ed:c5:fa:4c:1a:c7:aa:ce:b2:51:aa:c7:f1:a7:8f:
fc:4c:3e:c2:28:57:53:08:a4:05:3c:09:75:87:66:83:63:67:
b5:45:e9:1e:b7:1a:c0:9c:08:80:d9:1a:7a:cd:bf:01:06:7b:
3a:b1:20:d1:77:66:c5:5a:73:16:05:79:99:7b:0c:cb:15:64:
87:77:2f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuVXw+26nPSsadXTbQwy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4
ZjQ0ODkwHhcNMjYwODE1MDAwMTM1WhcNMjYwODE2MDAwMTM1WjAzMTEwLwYDVQQD
EyhkYTBlMWRjZTY0NGU0OGYzY2Q3ODdjODEwNjRlYzY0ZWIyNzEzYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9V6vdoij1M0qtWhO8jzU7k5wjY/
mFFsxeHxrhSlUx3h9whCopoQR2VIGz0GSg9GCFJacuyouyzD7smK1kKM5pKnBWs5
ryweG3+19GzhVjhy3RDdbsz7vZZTc9+YQAo9nFBQGdm3aEfPZxaBdRDr//ZR3HOv
Wp8p6hU7K7A/yGuY0M/b328cdyYpTTMJ4fS63Rhd+2T2GJ3uYfy3RqY0pINW99mU
51e9BwfDKivByRkIAUiAoHtdizxFLkclt8LeGB6lOg6RmgoD23TJzmyPewPYU17U
0mvBBZBIf6dzO1UU5F5GUOnW5svgI+qS5xJreXjokTR3NM+u8yu0GSUxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoOHc5kTkjzzXh8gQZOxk6ycTrBMB8GA1UdIwQY
MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt
YmFlOWQyYjI5NjAxLzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx
LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMwYV1H9
8DNH9HKvfO8FHJccu4tyKO85FHATEBQZXApGPlocTyoom+xYz82tdVMe5yof02Ia
NaexA2d0G0wB80tM+ZQLadUIv/krVWC9YzFsB+VMa1VVmtcENX8+wJ6pkOiymrK1
BB5GGfoMWOWHMuEXSz3ThQXNXZ8a896+uaSPN9eqjrCnZnuNAkKf86nrZjfzvatN
mSL6mKEDGCcFOD5yKEi1KkaQnXgNuTQs5lsxZYyCZHyz7cX6TBrHqs6yUarH8aeP
/Ew+wihXUwikBTwJdYdmg2NntUXpHrcawJwIgNkaes2/AQZ7OrEg0XdmxVpzFgV5
mXsMyxVkh3cv1g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:15:28 2026 by rpki-client