Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: gn7Dd27EcT6hK2aYCb5VP1LnliHEHHW4i+N+J49QzlQ=
Subject key identifier: 24:5E:16:AE:19:0B:20:FC:02:FC:90:16:39:70:A1:45:E8:8F:71:83
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019DCDF5306A6C41E4139F4F003212ECDAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 15FB
Signing time: Mon 27 Apr 2026 08:01:30 +0000
Manifest this update: Mon 27 Apr 2026 08:01:30 +0000
Manifest next update: Tue 28 Apr 2026 08:01:30 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: NhoS2wn71hgV+7XnezKV6id7FuZ9HhFTJ06PODArOq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:30:6a:6c:41:e4:13:9f:4f:00:32:12:ec:da:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Apr 27 08:01:30 2026 GMT
Not After : Apr 28 08:01:30 2026 GMT
Subject: CN=245e16ae190b20fc02fc90163970a145e88f7183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:c7:68:f8:d3:d5:62:7f:2e:d4:47:59:04:
41:c0:5b:27:d7:20:27:ca:ed:d3:67:ce:6d:af:68:
62:ee:d3:31:9c:3e:85:9c:de:7f:70:b3:35:47:dd:
7b:22:26:95:38:c1:39:f2:0f:db:11:c2:f8:25:54:
c8:88:85:de:a5:d3:61:79:fc:ca:d3:a9:b1:0d:72:
3b:39:1a:78:7a:ae:c9:ad:f2:33:a7:e6:9b:94:89:
d0:32:12:09:5f:d2:cf:b0:72:30:ed:81:14:ab:ab:
ae:ad:4f:10:52:38:8e:ba:dc:45:fd:8d:f3:37:95:
b0:1b:5b:6d:35:e5:70:bc:ee:7f:ab:20:62:78:7c:
8d:30:3a:6f:f9:41:f4:0c:c5:be:40:f5:9c:17:c0:
d2:a9:d3:ed:68:70:22:da:53:a0:14:0e:a3:64:b1:
d8:73:95:9f:b7:9d:72:00:31:ed:b3:a7:18:22:73:
8a:c5:4f:9a:72:1e:71:99:33:ce:59:32:3f:af:7d:
1c:f7:0c:88:74:bb:22:d5:45:3a:64:36:f8:d1:2b:
05:a6:10:94:38:42:37:28:19:c4:7d:00:31:01:04:
9f:e8:bb:6a:5e:1b:77:b1:e3:41:35:e4:39:47:c9:
2b:ae:bd:ff:19:4d:6c:90:0e:64:a3:e2:77:12:a4:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5E:16:AE:19:0B:20:FC:02:FC:90:16:39:70:A1:45:E8:8F:71:83
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:37:14:61:ee:d2:97:77:08:9e:8c:6b:8e:87:c7:35:95:b1:
d0:0b:1a:ec:cb:c4:f1:68:d2:27:6a:d0:cc:7e:8b:c5:27:93:
c7:a6:69:7a:ce:21:5a:37:b1:5a:0b:f5:43:9d:13:8f:e6:93:
f6:bc:96:ff:ef:c3:f6:16:61:ba:32:52:d7:8a:d9:1a:43:2c:
d6:a5:ec:0c:74:4f:06:a0:45:9b:94:b8:69:d6:84:34:3e:87:
93:26:f2:23:90:20:0e:78:0b:29:4c:6c:2c:6b:b3:4e:41:5e:
05:ef:85:96:20:fd:23:63:24:aa:d1:01:3f:6c:b8:62:36:e1:
a6:34:41:f0:a6:6b:aa:74:89:94:d9:70:d0:16:f4:9a:1f:c3:
dd:94:cb:9c:ff:a0:f0:7b:51:05:db:7d:84:99:12:24:03:e5:
3b:8c:55:4d:a3:2e:cc:45:4e:ea:0d:4a:ee:b3:42:f6:66:4d:
97:26:7c:7e:5d:44:6c:a8:d9:13:34:42:c6:a2:bd:23:5f:73:
fb:76:68:1c:92:8a:5c:98:75:90:ba:8f:ce:71:98:30:51:c1:
3d:98:f0:84:cb:8b:5d:af:fa:6f:f6:1b:59:0d:2e:e1:95:66:
89:20:64:39:62:99:b3:6f:8a:fb:27:e7:85:53:f4:19:50:00:
08:ae:6d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9TBqbEHkE59PADIS7NrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0
ZWI3YjkwHhcNMjYwNDI3MDgwMTMwWhcNMjYwNDI4MDgwMTMwWjAzMTEwLwYDVQQD
EygyNDVlMTZhZTE5MGIyMGZjMDJmYzkwMTYzOTcwYTE0NWU4OGY3MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SzHaPjT1WJ/LtRHWQRBwFsn1yAn
yu3TZ85tr2hi7tMxnD6FnN5/cLM1R917IiaVOME58g/bEcL4JVTIiIXepdNhefzK
06mxDXI7ORp4eq7JrfIzp+ablInQMhIJX9LPsHIw7YEUq6uurU8QUjiOutxF/Y3z
N5WwG1ttNeVwvO5/qyBieHyNMDpv+UH0DMW+QPWcF8DSqdPtaHAi2lOgFA6jZLHY
c5Wft51yADHts6cYInOKxU+ach5xmTPOWTI/r30c9wyIdLsi1UU6ZDb40SsFphCU
OEI3KBnEfQAxAQSf6LtqXht3seNBNeQ5R8krrr3/GU1skA5ko+J3EqQ7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCReFq4ZCyD8AvyQFjlwoUXoj3GDMB8GA1UdIwQY
MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt
NzU2OGExMGRmNDQzLzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz
LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDcUYe7S
l3cInoxrjofHNZWx0Asa7MvE8WjSJ2rQzH6LxSeTx6Zpes4hWjexWgv1Q50Tj+aT
9ryW/+/D9hZhujJS14rZGkMs1qXsDHRPBqBFm5S4adaEND6HkybyI5AgDngLKUxs
LGuzTkFeBe+FliD9I2MkqtEBP2y4YjbhpjRB8KZrqnSJlNlw0Bb0mh/D3ZTLnP+g
8HtRBdt9hJkSJAPlO4xVTaMuzEVO6g1K7rNC9mZNlyZ8fl1EbKjZEzRCxqK9I19z
+3ZoHJKKXJh1kLqPznGYMFHBPZjwhMuLXa/6b/YbWQ0u4ZVmiSBkOWKZs2+K+yfn
hVP0GVAACK5t6g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:05 2026 by rpki-client