Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier: cI7RHRGCHHNRfs9jwTwWqKxzeOnIaRrqRWqL5s4OKvc=
Subject key identifier: 5C:86:0D:7C:D4:37:B7:19:C7:52:2B:DE:C8:BA:D9:57:25:19:FC:7C
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 01A001702A55ED0BB6034ADF7583D5D7590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:02:03 +0000
Manifest this update: Fri 14 Aug 2026 18:02:03 +0000
Manifest next update: Sat 15 Aug 2026 18:02:03 +0000
Files and hashes: 1: 91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa (hash: 90s5uXSV7H+9vRaDDjLOzlHZrSmJ3myWDf1NIkj6TiE=)
2: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: qGuJj5tzrXWMqNux3R3Eil/vfvK1fi3i6RfnZX/jIcU=)
3: oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa (hash: 9H05WgwG0IKa6fefs9ah5b21BWk+H446mxJWL3/+bmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:2a:55:ed:0b:b6:03:4a:df:75:83:d5:d7:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Aug 14 18:02:03 2026 GMT
Not After : Aug 15 18:02:03 2026 GMT
Subject: CN=5c860d7cd437b719c7522bdec8bad9572519fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:b7:1b:40:d9:12:d0:b7:87:f1:2f:89:7c:
19:31:35:32:81:fb:82:12:d6:cb:c6:1b:49:d0:c6:
73:e3:ec:b6:f9:64:7d:c0:be:c7:63:5c:68:b1:3b:
a1:40:d5:21:6f:a4:89:0a:86:fd:ae:49:0f:5d:7b:
0d:36:8d:83:18:09:a1:03:05:6a:08:17:82:5e:51:
0e:97:27:d7:3b:30:b0:4e:47:dc:a0:18:12:f2:78:
41:d0:12:64:bf:c4:d4:6e:e3:9e:0a:60:1d:3c:29:
bd:84:02:a0:d9:06:f6:12:b6:7e:e7:cc:9d:70:d7:
dd:f5:5b:6b:89:c1:b8:59:1e:b8:92:c4:4c:e3:8a:
b1:14:d1:fb:01:67:41:96:36:df:7a:c0:12:47:8f:
b6:ff:ab:81:c9:d8:a4:92:6b:ca:b3:da:59:6b:61:
bd:9b:c6:b2:9e:1d:56:92:66:37:72:25:d7:91:ae:
5a:95:fe:9c:f9:25:07:41:12:93:76:ed:48:e7:c4:
56:37:eb:b1:31:59:31:97:89:43:74:99:d3:cd:59:
5c:23:08:99:ad:97:1f:3b:91:cb:fb:82:b4:ff:c0:
ae:a3:49:58:a7:29:38:39:42:53:f7:cc:81:2f:de:
64:ed:a3:1d:a1:05:31:a1:ff:ab:2c:8b:5f:5e:52:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:0D:7C:D4:37:B7:19:C7:52:2B:DE:C8:BA:D9:57:25:19:FC:7C
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:ec:2b:12:61:4f:84:ce:ed:f7:f5:06:0d:63:3b:93:75:
f6:6c:cb:c0:49:5b:81:86:c7:eb:d6:4a:25:9b:c9:4b:b1:8d:
2c:c0:9e:95:a7:f9:60:65:17:7e:ff:38:79:36:bd:7f:91:d5:
c8:ff:61:19:bf:22:6d:7d:80:b1:a9:80:0c:b2:fc:67:54:68:
1b:d9:ff:d4:a1:74:4f:44:3a:1c:9e:6a:c0:d6:49:e7:76:8b:
39:16:bd:13:5a:27:e4:01:13:b3:b6:c4:6a:89:03:7a:81:e4:
6c:85:88:70:17:71:9b:b1:8a:4a:51:8f:a1:af:4d:79:e3:b5:
24:78:be:78:f5:86:35:f2:be:1c:a5:e2:f2:9d:10:5c:86:9e:
8f:93:1d:7d:f1:15:99:c6:01:df:5d:15:ef:f5:94:53:09:fa:
f9:16:ce:58:7d:cb:e4:2f:1a:4d:c0:b7:e6:32:b6:6f:d6:44:
dc:a1:69:97:a1:9a:4e:a2:14:3f:f1:a3:c5:1a:1a:4a:4a:9b:
1a:90:15:ba:02:f8:a7:b1:32:ff:81:54:fd:58:4f:34:1c:bf:
95:9f:e6:c5:d5:2a:55:60:5d:55:a9:db:46:97:ad:22:33:99:
a0:f7:69:12:5b:09:fb:8b:84:0d:42:a3:b4:00:da:f2:3b:1f:
c6:ab:2f:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcCpV7Qu2A0rfdYPV11kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMDFjYzM0MzA3NDEwMmVmYTdmMGMzMGYyOTQ5OWUxYWQ1
NmUyOWYwHhcNMjYwODE0MTgwMjAzWhcNMjYwODE1MTgwMjAzWjAzMTEwLwYDVQQD
Eyg1Yzg2MGQ3Y2Q0MzdiNzE5Yzc1MjJiZGVjOGJhZDk1NzI1MTlmYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA23G0DZEtC3h/EviXwZMTUygfuC
EtbLxhtJ0MZz4+y2+WR9wL7HY1xosTuhQNUhb6SJCob9rkkPXXsNNo2DGAmhAwVq
CBeCXlEOlyfXOzCwTkfcoBgS8nhB0BJkv8TUbuOeCmAdPCm9hAKg2Qb2ErZ+58yd
cNfd9VtricG4WR64ksRM44qxFNH7AWdBljbfesASR4+2/6uBydikkmvKs9pZa2G9
m8aynh1WkmY3ciXXka5alf6c+SUHQRKTdu1I58RWN+uxMVkxl4lDdJnTzVlcIwiZ
rZcfO5HL+4K0/8Cuo0lYpyk4OUJT98yBL95k7aMdoQUxof+rLItfXlJzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyGDXzUN7cZx1Ir3si62VclGfx8MB8GA1UdIwQY
MBaAFBIBzDQwdBAu+n8MMPKUmeGtVuKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQt
OTllZDY3MzBmODRhLzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQtOTllZDY3MzBmODRh
LzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDPsKxJh
T4TO7ff1Bg1jO5N19mzLwElbgYbH69ZKJZvJS7GNLMCelaf5YGUXfv84eTa9f5HV
yP9hGb8ibX2AsamADLL8Z1RoG9n/1KF0T0Q6HJ5qwNZJ53aLORa9E1on5AETs7bE
aokDeoHkbIWIcBdxm7GKSlGPoa9NeeO1JHi+ePWGNfK+HKXi8p0QXIaej5MdffEV
mcYB310V7/WUUwn6+RbOWH3L5C8aTcC35jK2b9ZE3KFpl6GaTqIUP/GjxRoaSkqb
GpAVugL4p7Ey/4FU/VhPNBy/lZ/mxdUqVWBdVanbRpetIjOZoPdpElsJ+4uEDUKj
tADa8jsfxqsvKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:29 2026 by rpki-client