Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
File: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft (raw, json)
Hash identifier: w2L58f8B5veYmeHxU0/QsoTT2aM3KoYdbFAgi1kZ7+Y=
Subject key identifier: EF:BB:14:0A:6D:B5:67:8D:50:38:59:BF:B8:A1:0A:4E:21:FE:EC:5E
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 019D37C0CE58376312153C8D8C0240DD1796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: 8JmS7uYL4UEZuT6K7pKRXqDBY74.roa (hash: j5lVhjr9/hurOwk0J51l+RpJ8JUJ+d19HiO+0lkeTxo=)
2: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl (hash: zX8c7Riji/fwnDWpnmsLQbGoY4Mms6yy1NPcGPlaoI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ce:58:37:63:12:15:3c:8d:8c:02:40:dd:17:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=efbb140a6db5678d503859bfb8a10a4e21feec5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:36:b2:02:6d:70:ce:71:df:ad:14:55:19:
e0:06:99:ac:da:a5:a9:35:71:e4:96:e5:84:5a:e5:
03:6c:f4:14:1c:06:8a:13:df:4c:83:61:57:ee:a4:
d0:ac:c4:96:8d:d1:e6:2f:0d:18:ec:76:d6:24:0e:
0b:94:a2:66:c1:c1:9b:43:84:ad:eb:42:c2:4c:2e:
d0:7e:be:45:2b:f4:94:b0:77:8c:22:8b:f9:8e:24:
31:c3:c7:0b:26:a6:75:08:d0:35:3e:08:d6:52:86:
c9:ca:f0:3a:51:ff:ea:a6:9e:f0:7f:25:a0:05:f3:
c3:49:56:03:c4:1d:07:bc:8c:97:4b:71:03:69:92:
15:38:cd:ff:cb:cb:c0:e5:04:a8:a1:71:45:48:66:
46:f4:fa:45:45:9c:85:a6:10:cd:ee:02:4a:dd:3c:
d8:55:55:38:8d:5c:aa:37:58:a7:28:fd:a7:e4:7a:
ed:37:9b:ae:0f:f5:4b:9e:c2:48:b8:3a:b4:42:b4:
5a:c5:c2:e4:5a:c5:88:a8:2d:64:53:f7:a4:9b:3f:
c2:38:8a:ce:b1:47:94:36:b2:15:39:8d:93:5c:36:
6d:f0:cc:40:57:d6:0b:00:c4:58:f9:86:a8:0f:76:
4f:e1:d7:ee:9b:cd:2a:50:ce:88:01:bf:13:ce:58:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:14:0A:6D:B5:67:8D:50:38:59:BF:B8:A1:0A:4E:21:FE:EC:5E
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:40:ea:42:18:95:1d:40:49:49:73:ce:98:cb:16:37:5f:
46:f9:ab:aa:1a:ec:e0:50:7e:f6:7e:ec:25:4e:bd:3e:e1:a0:
71:ea:6c:bf:94:69:75:cb:4f:f8:d6:82:84:4c:ad:2f:5a:3d:
5e:02:29:62:0f:45:91:8c:d5:da:a7:1d:7e:7b:31:01:5b:0f:
cf:07:17:60:66:60:e3:b8:66:d2:49:cf:d3:9a:d0:a5:d3:3d:
fb:07:a1:5e:ae:25:a6:b1:d4:46:de:ef:ca:38:8a:21:f8:5a:
69:e4:e2:27:79:c1:a9:11:79:74:65:02:cf:e8:b5:c1:f3:ae:
77:81:9e:08:d6:bd:84:07:a8:da:d4:4c:ac:d9:31:51:e2:86:
f6:16:9c:36:38:b8:2f:85:7c:95:0b:3b:3c:db:cd:bf:8b:a3:
1b:99:ce:d1:49:f9:36:ae:a7:9e:3c:0f:c9:38:fe:f1:70:18:
50:1c:fe:b1:de:07:a6:29:ac:c2:7c:e5:d9:3b:6d:e4:18:59:
28:5e:fe:5c:28:e7:ca:fc:2b:9a:be:cf:f2:10:f7:6d:ee:7b:
4d:1e:c4:84:5d:9d:e6:48:4f:cf:40:60:0a:4b:c6:45:de:d4:
6d:cf:71:d7:5d:2f:46:04:4c:36:33:94:ef:14:c7:20:2a:54:
81:97:86:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wM5YN2MSFTyNjAJA3ReWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODVjNWJjNzU0Y2E1ODViZDI1OTJlNmJmMWNmYTZmNjQ5
Y2Q5ZjQwHhcNMjYwMzI5MDQwMTE1WhcNMjYwMzMwMDQwMTE1WjAzMTEwLwYDVQQD
EyhlZmJiMTQwYTZkYjU2NzhkNTAzODU5YmZiOGExMGE0ZTIxZmVlYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPc2sgJtcM5x360UVRngBpms2qWp
NXHkluWEWuUDbPQUHAaKE99Mg2FX7qTQrMSWjdHmLw0Y7HbWJA4LlKJmwcGbQ4St
60LCTC7Qfr5FK/SUsHeMIov5jiQxw8cLJqZ1CNA1PgjWUobJyvA6Uf/qpp7wfyWg
BfPDSVYDxB0HvIyXS3EDaZIVOM3/y8vA5QSooXFFSGZG9PpFRZyFphDN7gJK3TzY
VVU4jVyqN1inKP2n5HrtN5uuD/VLnsJIuDq0QrRaxcLkWsWIqC1kU/ekmz/COIrO
sUeUNrIVOY2TXDZt8MxAV9YLAMRY+YaoD3ZP4dfum80qUM6IAb8TzljnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+7FApttWeNUDhZv7ihCk4h/uxeMB8GA1UdIwQY
MBaAFHmFxbx1TKWFvSWS5r8c+m9knNn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlYRnZIVk1wWVc5SlpMbXZ4ejZiMlNjMmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjliZDQtMmY2Yy00ZGEyLWJkZDct
MWM2N2QyNGFlNjcyLzEvZVlYRnZIVk1wWVc5SlpMbXZ4ejZiMlNjMmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjliZDQtMmY2Yy00ZGEyLWJkZDctMWM2N2QyNGFlNjcy
LzEvZVlYRnZIVk1wWVc5SlpMbXZ4ejZiMlNjMmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5BA6kIY
lR1ASUlzzpjLFjdfRvmrqhrs4FB+9n7sJU69PuGgcepsv5RpdctP+NaChEytL1o9
XgIpYg9FkYzV2qcdfnsxAVsPzwcXYGZg47hm0knP05rQpdM9+wehXq4lprHURt7v
yjiKIfhaaeTiJ3nBqRF5dGUCz+i1wfOud4GeCNa9hAeo2tRMrNkxUeKG9hacNji4
L4V8lQs7PNvNv4ujG5nO0Un5Nq6nnjwPyTj+8XAYUBz+sd4Hpimswnzl2Ttt5BhZ
KF7+XCjnyvwrmr7P8hD3be57TR7EhF2d5khPz0BgCkvGRd7Ubc9x110vRgRMNjOU
7xTHICpUgZeGow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:42 2026 by rpki-client