Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: bmEdx0kEgY2UkMzQ4Tra2dw8Kv9Td1NQbxEoTm+yFHE=
Subject key identifier: 83:B2:CF:90:35:CF:5B:EF:86:09:98:4D:65:A0:98:B2:4B:EB:5F:AE
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019D3A8AF0B413FC826CE1771CCADD2683EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 17:01:17 +0000
Manifest this update: Sun 29 Mar 2026 17:01:17 +0000
Manifest next update: Mon 30 Mar 2026 17:01:17 +0000
Files and hashes: 1: 0KPNPZABDj0Qzagg_XV0X1ugEl0.roa (hash: MiYwj7dTzwCXkj4L24OFbR3dzFvz57EK/cZJ5GPnv1I=)
2: 0qcfJpEX8g6MF2qj_nDo1QD1IkU.roa (hash: E2DR9Q+D5XZIwJi+r9euBWagkYE3FYAiz4v22D7W4YM=)
3: 3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa (hash: AnfSRJoJBQHSsw5wKN0U0W2kl6uSdHO9bTTKS8nGB5c=)
4: S-bwMSos2-eKtENDykR1_8Qkp_I.roa (hash: xbxuJbxZkr/mH223J2YVdm3uiis0Dm1Iy28FKMjVeRU=)
5: XyYjURWnDtL6j5DL-ST6SPw7rFI.roa (hash: 26mKNoH4079E9ccWRUpU/d+cgxVIAOMCoINSih0nzDo=)
6: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: IwnxnmbYJ3InMEQ/YywYIHWY8cTatDvr5BaAHfoxRX8=)
7: lPnGL0KIOYwCmT8t1QVCdAPTLQc.roa (hash: bPZuuyywF6pfSEcL1PH/gV1v3n4qj+MA79LKLf/5bEE=)
8: tDGAKA6vCaBKcErUgT3MNC6aIu0.roa (hash: e/pJ6HHlGchTF3Diz9Sgd8uUt2kZ7DHh23Gu0gHK74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:f0:b4:13:fc:82:6c:e1:77:1c:ca:dd:26:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Mar 29 17:01:17 2026 GMT
Not After : Mar 30 17:01:17 2026 GMT
Subject: CN=83b2cf9035cf5bef8609984d65a098b24beb5fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:9d:92:e1:50:86:50:fe:e9:b9:6b:cb:f9:
93:0b:6a:3c:1d:73:16:a8:1e:5d:4a:14:ed:73:7b:
9c:70:25:68:2d:81:fa:ce:9d:33:93:52:6c:5e:99:
24:ae:29:79:3b:d8:40:a4:e1:39:34:9b:e0:28:a8:
3f:bf:5f:04:4c:b3:51:ed:3b:86:fb:de:18:42:3e:
3a:92:30:8e:fd:26:94:d2:38:8f:50:93:fe:79:06:
2d:bf:04:d8:e2:f6:10:0d:db:2a:60:89:8c:0c:8f:
83:ba:56:5a:83:08:43:20:a3:c8:c8:da:7b:e8:1f:
e2:0d:8f:4d:a2:ac:b4:3d:33:07:04:bd:4f:00:17:
7a:f2:f1:56:dc:d5:87:42:61:c5:88:9b:17:b8:bd:
00:52:76:17:a7:9f:30:40:d2:87:19:37:a9:cf:b8:
ff:3c:2d:70:d0:88:d9:ec:19:26:f5:67:30:31:c5:
6f:38:93:e2:62:3b:76:d6:8a:32:ae:d0:3c:ca:2c:
1d:79:7e:8e:95:6b:da:9b:f1:5d:07:b1:25:87:89:
62:a1:24:53:f3:58:c1:c3:c3:93:c4:68:5e:83:98:
6f:82:d1:8c:1b:fd:c4:1f:e5:fd:3a:32:ac:d0:e7:
f5:3e:cf:48:13:60:62:36:f1:c9:4a:4d:94:68:22:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:CF:90:35:CF:5B:EF:86:09:98:4D:65:A0:98:B2:4B:EB:5F:AE
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9a:77:db:90:16:4d:38:5f:49:cc:15:39:67:bf:2b:02:15:
5e:c0:a0:11:ed:95:01:5f:36:1b:5e:66:31:94:8d:37:3c:8a:
aa:9e:c0:90:22:e1:be:66:4c:3c:f6:c1:a8:50:30:4b:30:e2:
73:39:6e:57:aa:7b:8c:c8:6c:b7:41:b2:88:51:12:66:0e:8a:
b3:a3:27:b6:e0:44:f8:1c:2f:b8:ed:43:11:34:c9:98:df:06:
92:8d:d2:e3:f1:92:48:58:2a:17:df:e1:ce:6b:11:79:1a:50:
22:84:73:0e:db:ca:2e:36:fa:00:46:08:de:cc:d1:ca:38:b6:
12:10:39:c3:e1:f7:96:00:78:04:f5:1e:72:63:8b:4f:fa:4a:
a8:a3:4d:11:3e:ce:98:25:f9:bd:fa:3d:9e:96:58:3a:de:7b:
68:24:6c:ab:e9:b9:cf:78:3a:c1:c0:fe:d7:b0:ca:68:04:c6:
14:29:0d:18:f0:e1:dc:b1:c9:f6:a6:99:61:68:f4:9f:24:f9:
c1:84:d8:08:32:98:a9:f5:44:08:94:72:68:7e:d9:ae:a0:11:
93:2f:b6:f0:6e:d2:37:24:c5:cc:68:8f:a1:5a:d0:ce:e2:ff:
3c:e1:ee:e6:f6:f4:77:94:e1:03:d6:53:26:b4:dc:7c:ec:e0:
9d:69:da:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06ivC0E/yCbOF3HMrdJoPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjYwMzI5MTcwMTE3WhcNMjYwMzMwMTcwMTE3WjAzMTEwLwYDVQQD
Eyg4M2IyY2Y5MDM1Y2Y1YmVmODYwOTk4NGQ2NWEwOThiMjRiZWI1ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluidkuFQhlD+6blry/mTC2o8HXMW
qB5dShTtc3uccCVoLYH6zp0zk1JsXpkkril5O9hApOE5NJvgKKg/v18ETLNR7TuG
+94YQj46kjCO/SaU0jiPUJP+eQYtvwTY4vYQDdsqYImMDI+DulZagwhDIKPIyNp7
6B/iDY9Noqy0PTMHBL1PABd68vFW3NWHQmHFiJsXuL0AUnYXp58wQNKHGTepz7j/
PC1w0IjZ7Bkm9WcwMcVvOJPiYjt21ooyrtA8yiwdeX6OlWvam/FdB7Elh4lioSRT
81jBw8OTxGheg5hvgtGMG/3EH+X9OjKs0Of1Ps9IE2BiNvHJSk2UaCJKqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOyz5A1z1vvhgmYTWWgmLJL61+uMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5p325AW
TThfScwVOWe/KwIVXsCgEe2VAV82G15mMZSNNzyKqp7AkCLhvmZMPPbBqFAwSzDi
czluV6p7jMhst0GyiFESZg6Ks6MntuBE+BwvuO1DETTJmN8Gko3S4/GSSFgqF9/h
zmsReRpQIoRzDtvKLjb6AEYI3szRyji2EhA5w+H3lgB4BPUecmOLT/pKqKNNET7O
mCX5vfo9npZYOt57aCRsq+m5z3g6wcD+17DKaATGFCkNGPDh3LHJ9qaZYWj0nyT5
wYTYCDKYqfVECJRyaH7ZrqARky+28G7SNyTFzGiPoVrQzuL/POHu5vb0d5ThA9ZT
JrTcfOzgnWnaqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:07 2026 by rpki-client