Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: uFi2D9WGgVSMpNs7Z7SfOv68xw6HOsczbIUEwrcnBZg=
Subject key identifier: 91:3A:25:F2:00:15:A7:34:EB:FC:7E:42:66:76:6D:21:55:B9:C3:E5
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A16120272A018AA26BA72116EE1017474A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 11EF
Signing time: Thu 22 Oct 2026 01:00:59 +0000
Manifest this update: Thu 22 Oct 2026 01:00:59 +0000
Manifest next update: Fri 23 Oct 2026 01:00:59 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: guJDj+6PYIKGxfJoCDL94+z0OUJ8PHJh3kDvg+6RVVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:20:27:2a:01:8a:a2:6b:a7:21:16:ee:10:17:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Oct 22 01:00:59 2026 GMT
Not After : Oct 23 01:00:59 2026 GMT
Subject: CN=913a25f20015a734ebfc7e4266766d2155b9c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:78:d0:5c:72:dc:a0:8d:64:e0:07:30:df:
48:d5:60:78:5b:0b:2c:47:5b:06:41:f0:06:cb:20:
2a:9a:c6:04:0b:d8:f5:9e:69:fb:5b:25:54:3a:33:
f6:bb:1e:5d:1e:cb:ef:31:45:a1:52:d2:9c:aa:0f:
c9:03:ea:f6:90:a4:b1:3a:a3:f6:94:b2:59:e1:6d:
41:6b:6a:3e:b3:38:79:6b:08:fe:98:80:ff:e1:f4:
4e:5d:d1:9f:06:e2:ee:5c:f1:22:be:25:f3:26:1d:
36:af:ff:db:2c:17:e3:f8:06:57:ad:87:d0:cc:e4:
97:4d:d8:16:f2:77:a9:25:9d:61:89:f0:fb:b0:36:
a0:83:61:69:5f:3a:bd:f9:23:ff:2d:aa:6b:23:28:
91:43:82:34:98:42:e0:e9:2b:00:a2:2f:ea:3d:95:
57:b0:f1:76:ee:9e:1b:b6:a8:83:98:4d:d1:81:6c:
21:96:19:31:dd:9d:8c:08:da:1d:ff:7d:10:e7:72:
46:c4:bc:83:b3:a8:f6:95:18:33:8a:c9:45:53:72:
3c:66:30:be:6f:71:05:f3:bc:d5:cc:5f:7b:ee:5f:
96:4f:18:93:eb:4a:bb:06:78:52:36:36:5d:53:35:
8d:03:67:2d:2f:58:ac:13:21:08:cd:1a:c3:f4:d3:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:25:F2:00:15:A7:34:EB:FC:7E:42:66:76:6D:21:55:B9:C3:E5
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ad:b7:52:a3:f6:bf:83:54:9f:12:12:ec:04:c1:2b:26:a0:
1d:bd:6b:bc:ca:28:d9:be:dd:87:7a:52:ad:63:d9:b8:18:50:
f6:dc:ce:a3:13:53:1f:e0:d5:4c:b7:71:25:7c:1a:0c:5a:34:
0e:54:fc:0d:2c:48:45:a3:48:cd:a6:c4:c3:5a:8f:5c:00:4c:
43:ae:e6:1b:68:6e:e0:be:2c:0a:60:6b:77:04:e8:83:a5:1a:
17:6e:df:92:85:a2:6b:97:27:f5:47:94:a8:2c:d7:a3:41:b7:
51:47:9c:e6:65:97:47:35:1d:f8:df:bf:c3:40:7c:c5:64:d3:
13:d1:6d:8e:82:1c:12:5f:2f:9b:86:1d:60:5a:4e:3d:04:df:
6b:1c:c6:16:12:14:bd:6f:38:c0:6c:ec:1b:53:84:12:34:7c:
b9:dc:df:45:74:34:77:06:83:1f:5d:ff:91:f7:a4:91:cb:4c:
c4:bc:f5:41:f5:ee:3c:13:76:81:90:0d:1f:fe:c0:4e:c6:19:
3d:ab:17:d1:07:b3:11:2f:44:d0:d9:b2:90:81:61:ce:46:9c:
53:f1:99:2f:c2:76:5e:e2:1b:5c:65:2d:3e:f5:bf:77:a9:35:
66:1f:49:eb:7e:f7:5a:27:4b:34:d9:ff:82:e8:95:36:a5:e4:
0e:c9:2c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFhICcqAYqia6chFu4QF0dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh
YzA4NTkwHhcNMjYxMDIyMDEwMDU5WhcNMjYxMDIzMDEwMDU5WjAzMTEwLwYDVQQD
Eyg5MTNhMjVmMjAwMTVhNzM0ZWJmYzdlNDI2Njc2NmQyMTU1YjljM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX940Fxy3KCNZOAHMN9I1WB4Wwss
R1sGQfAGyyAqmsYEC9j1nmn7WyVUOjP2ux5dHsvvMUWhUtKcqg/JA+r2kKSxOqP2
lLJZ4W1Ba2o+szh5awj+mID/4fROXdGfBuLuXPEiviXzJh02r//bLBfj+AZXrYfQ
zOSXTdgW8nepJZ1hifD7sDagg2FpXzq9+SP/LaprIyiRQ4I0mELg6SsAoi/qPZVX
sPF27p4btqiDmE3RgWwhlhkx3Z2MCNod/30Q53JGxLyDs6j2lRgzislFU3I8ZjC+
b3EF87zVzF977l+WTxiT60q7BnhSNjZdUzWNA2ctL1isEyEIzRrD9NN9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE6JfIAFac06/x+QmZ2bSFVucPlMB8GA1UdIwQY
MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt
ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl
LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq23UqP2
v4NUnxIS7ATBKyagHb1rvMoo2b7dh3pSrWPZuBhQ9tzOoxNTH+DVTLdxJXwaDFo0
DlT8DSxIRaNIzabEw1qPXABMQ67mG2hu4L4sCmBrdwTog6UaF27fkoWia5cn9UeU
qCzXo0G3UUec5mWXRzUd+N+/w0B8xWTTE9FtjoIcEl8vm4YdYFpOPQTfaxzGFhIU
vW84wGzsG1OEEjR8udzfRXQ0dwaDH13/kfekkctMxLz1QfXuPBN2gZANH/7ATsYZ
PasX0QezES9E0NmykIFhzkacU/GZL8J2XuIbXGUtPvW/d6k1Zh9J6373WidLNNn/
guiVNqXkDsksrQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:52:25 2026 by rpki-client