Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File: eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier: PPC6+GhMp/xeWvJBs5SGO9vd8zb1uusw1OZSX3Ct598=
Subject key identifier: A2:09:84:6E:FF:60:81:A5:B7:FC:6C:21:B3:86:34:C0:B4:1E:E6:AA
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 01A17BBB0A4C70A8787E8EA11CAA11D9F565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number: 11D4
Signing time: Tue 27 Oct 2026 05:00:17 +0000
Manifest this update: Tue 27 Oct 2026 05:00:17 +0000
Manifest next update: Wed 28 Oct 2026 05:00:17 +0000
Files and hashes: 1: 5V2uHMYB3AUKGtIMOIip7J3pWIE.roa (hash: SNdMO15bPZaXBCMvAcfZFL9fGPGQ8SDwl5MGeeyye2I=)
2: QCoWTqPLbJGw1zUEhRnFeDiw-yk.roa (hash: 5ldKqSvwDttirHKWjJFhqblT3JDzISSPbft9iHSvGCE=)
3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: 1BUl/k7YHY8vnC12xDFkLtEeieDq0ac/EOEhDclNrts=)
4: tcrZxlSyhxTj8kiRDMPfiA4u4Z0.roa (hash: X3hmm+WjiPxOc2QFBzEzmGR0EXyXyN6SSxewOy8ufSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:0a:4c:70:a8:78:7e:8e:a1:1c:aa:11:d9:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Oct 27 05:00:17 2026 GMT
Not After : Oct 28 05:00:17 2026 GMT
Subject: CN=a209846eff6081a5b7fc6c21b38634c0b41ee6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:ef:8f:40:78:c2:76:07:a8:c9:dd:a9:0c:
4a:7d:51:d4:16:b1:f4:9f:5f:d5:68:79:5d:11:ab:
a8:c7:9c:c2:3e:67:f3:85:f0:0d:59:91:f1:07:44:
fa:82:ed:ba:93:b8:de:80:e3:41:7a:a9:a1:15:be:
8c:17:a6:00:90:dd:67:16:64:9f:51:0d:ee:ea:1f:
63:82:de:ea:9e:59:17:ee:20:ea:b5:3e:d3:10:43:
69:b8:81:68:29:22:db:84:0f:51:8c:4f:d5:b1:70:
0f:82:0b:7d:26:48:4b:43:4c:34:f0:60:8c:17:e3:
01:c5:eb:60:8b:1e:7d:cc:9e:ec:b4:83:54:2a:aa:
6c:30:81:c4:29:e4:3a:27:66:c4:4e:af:bb:17:7c:
63:95:1c:a1:0a:0e:4b:09:24:91:7b:6a:2f:03:1b:
bd:0f:a6:3a:7f:97:6e:a5:38:dc:5d:e3:7c:18:fa:
50:b5:ee:c2:59:4d:e4:ef:59:df:72:3a:1e:45:33:
31:36:96:1f:11:d5:4c:7e:cf:29:da:ed:47:87:41:
50:91:2d:b5:5d:a2:93:2d:6d:f9:dc:c0:18:ec:e1:
ca:43:2f:4c:a2:58:7f:2a:37:57:50:38:af:31:d0:
b3:d6:da:f6:25:11:f5:25:0c:62:0d:ea:43:0d:61:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:84:6E:FF:60:81:A5:B7:FC:6C:21:B3:86:34:C0:B4:1E:E6:AA
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:62:0d:29:ec:d7:1b:cc:41:23:81:b6:8b:d4:c6:37:d6:86:
1f:42:77:c1:8e:52:d1:7c:67:66:6e:21:fa:d3:54:b2:3c:d1:
aa:bd:60:fa:f2:d0:6c:a9:e8:64:d7:ed:fc:06:f4:78:65:56:
74:49:25:ae:7e:3e:71:f3:27:12:53:e8:e8:87:3a:04:f5:08:
01:3a:a0:85:67:36:f8:b8:bc:b7:3c:34:1b:9c:8f:dc:c8:84:
46:8f:1e:02:09:50:e7:49:d1:a9:70:1c:f4:37:8c:8d:de:87:
14:c5:9d:9c:b6:d2:5d:a0:aa:32:5b:e6:1a:6e:11:3c:65:be:
47:20:e4:65:6a:91:60:00:7d:0d:fe:05:55:8e:c0:40:5b:aa:
e5:91:56:05:d9:0e:22:86:01:d8:bd:c8:6b:ac:c3:e6:09:a4:
02:91:0d:51:5f:e5:36:df:29:c0:2c:28:21:d5:f3:48:a0:01:
b0:cd:1a:47:00:bf:9f:da:bb:5b:4f:d0:22:eb:fb:0b:90:e6:
58:29:b6:69:7c:39:ef:06:9a:77:19:90:dc:54:62:31:3a:fe:
f2:5f:b7:73:23:3a:7c:7c:10:52:6f:9e:d9:8f:8d:64:9a:8a:
0e:d5:7d:a7:cf:34:32:22:7d:62:97:89:7e:5a:af:24:2a:fe:
cf:a0:22:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uwpMcKh4fo6hHKoR2fVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTMwNGJhMzRiNjFhMTVlMzc5N2ZmZDRkMWFlOGMyMThj
MWM3YmYwHhcNMjYxMDI3MDUwMDE3WhcNMjYxMDI4MDUwMDE3WjAzMTEwLwYDVQQD
EyhhMjA5ODQ2ZWZmNjA4MWE1YjdmYzZjMjFiMzg2MzRjMGI0MWVlNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5bvj0B4wnYHqMndqQxKfVHUFrH0
n1/VaHldEauox5zCPmfzhfANWZHxB0T6gu26k7jegONBeqmhFb6MF6YAkN1nFmSf
UQ3u6h9jgt7qnlkX7iDqtT7TEENpuIFoKSLbhA9RjE/VsXAPggt9JkhLQ0w08GCM
F+MBxetgix59zJ7stINUKqpsMIHEKeQ6J2bETq+7F3xjlRyhCg5LCSSRe2ovAxu9
D6Y6f5dupTjcXeN8GPpQte7CWU3k71nfcjoeRTMxNpYfEdVMfs8p2u1Hh0FQkS21
XaKTLW353MAY7OHKQy9Molh/KjdXUDivMdCz1tr2JRH1JQxiDepDDWF4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIJhG7/YIGlt/xsIbOGNMC0HuaqMB8GA1UdIwQY
MBaAFHmjBLo0thoV43l//U0a6MIYwce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYt
OTlhMGQyOWJhNTYzLzEvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYtOTlhMGQyOWJhNTYz
LzEvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmINKezX
G8xBI4G2i9TGN9aGH0J3wY5S0XxnZm4h+tNUsjzRqr1g+vLQbKnoZNft/Ab0eGVW
dEklrn4+cfMnElPo6Ic6BPUIATqghWc2+Li8tzw0G5yP3MiERo8eAglQ50nRqXAc
9DeMjd6HFMWdnLbSXaCqMlvmGm4RPGW+RyDkZWqRYAB9Df4FVY7AQFuq5ZFWBdkO
IoYB2L3Ia6zD5gmkApENUV/lNt8pwCwoIdXzSKABsM0aRwC/n9q7W0/QIuv7C5Dm
WCm2aXw57waadxmQ3FRiMTr+8l+3cyM6fHwQUm+e2Y+NZJqKDtV9p880MiJ9YpeJ
flqvJCr+z6Ai8g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:10 2026 by rpki-client