Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: a+6AmwsUgdZDdFATe8IpJ+T/3YY5Kwh22kg0fpK/tPk=
Subject key identifier: 8F:99:FB:CF:3C:14:A2:D0:F4:F9:70:96:8E:0B:53:B7:3E:02:77:75
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019F1A1EF2F73B0AD4734AAF4684C265D75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 127F
Signing time: Tue 30 Jun 2026 20:01:03 +0000
Manifest this update: Tue 30 Jun 2026 20:01:03 +0000
Manifest next update: Wed 01 Jul 2026 20:01:03 +0000
Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: Oj7e9OjwSNFMrNROBZuJdx0Eb182bNTZ9++zNsOUyOc=)
2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:f2:f7:3b:0a:d4:73:4a:af:46:84:c2:65:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jun 30 20:01:03 2026 GMT
Not After : Jul 1 20:01:03 2026 GMT
Subject: CN=8f99fbcf3c14a2d0f4f970968e0b53b73e027775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:7a:08:01:99:92:42:0e:02:78:9b:14:85:
dc:36:d4:2f:6a:05:ba:ed:9c:52:a3:7e:85:34:4a:
3a:1c:ba:e3:07:0d:70:bd:d2:8f:25:ea:4c:f9:d4:
bc:74:c2:e9:e0:e5:90:7a:3e:b8:e9:c1:6d:9a:85:
f1:91:8f:d3:11:ea:12:0f:f5:bd:77:19:e6:ae:31:
c3:3e:e4:bf:0a:71:31:05:fa:fe:9d:7b:97:6c:00:
b9:34:e0:f7:ee:21:e9:83:9b:e7:d6:d8:64:6f:ff:
29:69:ef:a2:7c:a0:b2:4b:0d:96:c4:24:bb:fb:9f:
37:1c:7a:1e:00:7a:a8:2b:89:3a:55:ed:37:0f:ca:
56:10:83:b7:34:7b:13:0b:0a:b6:9a:8c:cf:b7:7b:
75:0b:c4:ce:20:ed:33:4a:40:28:c3:35:ce:8b:17:
18:6f:3d:7c:69:a7:5b:42:86:f5:b2:79:20:32:ed:
97:f2:59:a7:7e:45:a3:5e:69:80:19:f9:44:13:56:
9c:10:1c:ea:46:b8:f9:5d:59:d7:cd:26:ac:f5:db:
8a:9b:e4:7f:51:31:88:6b:0e:27:7b:4c:e2:eb:f9:
e7:e3:56:16:8a:50:84:5d:c7:1a:5a:fd:42:a7:65:
51:8e:ec:e3:aa:72:0f:9e:46:e0:31:33:63:dd:4f:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:FB:CF:3C:14:A2:D0:F4:F9:70:96:8E:0B:53:B7:3E:02:77:75
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:46:45:02:a0:d0:1b:f9:fd:38:f5:6c:2c:a4:51:86:c6:00:
fb:12:c5:9f:4d:9f:4f:c8:2f:2f:37:3b:09:37:16:c4:f0:a6:
89:ef:83:64:29:90:19:93:1c:1d:10:9e:6b:08:2e:92:8b:66:
3b:65:39:3e:47:a9:e3:85:01:50:50:60:a3:25:5e:b4:f4:24:
27:de:34:a2:1e:7c:45:86:09:31:89:a1:4b:53:2c:e6:5f:cb:
78:5f:d7:dc:d2:e2:84:a9:ae:06:79:a7:b0:ef:2e:f3:0d:be:
34:5a:a4:64:73:4a:90:da:02:9a:66:a3:43:52:69:b7:c0:e8:
fd:e0:fa:57:40:10:59:48:76:3a:62:c8:c0:d2:43:55:0d:b1:
9c:2f:2d:70:c7:b5:be:93:15:c4:80:2a:61:23:48:80:da:20:
b0:4c:39:52:74:eb:a9:1e:9e:35:9e:1c:0b:b4:13:44:40:95:
98:3a:18:24:20:be:ef:ab:d5:1c:82:4d:d7:45:25:ec:4c:96:
de:ac:a4:b8:d0:ba:9e:43:5f:8b:d9:0a:68:7f:76:ba:fa:db:
91:83:4d:3e:7e:ee:b3:7d:aa:a8:b1:81:43:b8:46:71:53:ee:
2b:47:7a:cd:78:83:fa:90:86:7a:7d:33:31:b4:d6:10:80:94:
89:f9:9b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aHvL3OwrUc0qvRoTCZddeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjYwNjMwMjAwMTAzWhcNMjYwNzAxMjAwMTAzWjAzMTEwLwYDVQQD
Eyg4Zjk5ZmJjZjNjMTRhMmQwZjRmOTcwOTY4ZTBiNTNiNzNlMDI3Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2F6CAGZkkIOAnibFIXcNtQvagW6
7ZxSo36FNEo6HLrjBw1wvdKPJepM+dS8dMLp4OWQej646cFtmoXxkY/TEeoSD/W9
dxnmrjHDPuS/CnExBfr+nXuXbAC5NOD37iHpg5vn1thkb/8pae+ifKCySw2WxCS7
+583HHoeAHqoK4k6Ve03D8pWEIO3NHsTCwq2mozPt3t1C8TOIO0zSkAowzXOixcY
bz18aadbQob1snkgMu2X8lmnfkWjXmmAGflEE1acEBzqRrj5XVnXzSas9duKm+R/
UTGIaw4ne0zi6/nn41YWilCEXccaWv1Cp2VRjuzjqnIPnkbgMTNj3U87lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+Z+888FKLQ9Plwlo4LU7c+And1MB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEZFAqDQ
G/n9OPVsLKRRhsYA+xLFn02fT8gvLzc7CTcWxPCmie+DZCmQGZMcHRCeawgukotm
O2U5Pkep44UBUFBgoyVetPQkJ940oh58RYYJMYmhS1Ms5l/LeF/X3NLihKmuBnmn
sO8u8w2+NFqkZHNKkNoCmmajQ1Jpt8Do/eD6V0AQWUh2OmLIwNJDVQ2xnC8tcMe1
vpMVxIAqYSNIgNogsEw5UnTrqR6eNZ4cC7QTRECVmDoYJCC+76vVHIJN10Ul7EyW
3qykuNC6nkNfi9kKaH92uvrbkYNNPn7us32qqLGBQ7hGcVPuK0d6zXiD+pCGen0z
MbTWEICUifmb1A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:10 2026 by rpki-client