Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: 5iEGzewY9W50MnK7fRUaG5SCIFcwY932/AXi60mGiaI=
Subject key identifier: 95:F3:F3:03:0C:62:7C:D4:59:9A:17:C8:01:99:E2:35:81:B2:B6:7A
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019D389C417F1B65A456E9367914CC823568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: AFjgj3wO0E3u1GwdCpnSug8abRE.roa (hash: /NnUBYyLAGJ7vpempT7h0f0+FEt6PcJJLRluwujlzWI=)
2: Sn7_2gib1Z4Y7qV-x5tw5ypzrKg.roa (hash: TvWW8wiVEH/RjPvexCDnTxcGMw5rvsW5sddaZst2n7c=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: RoLckzRn4+z+4dLzSJpFuNDGy4A3ta0SPJSd89hNgq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:41:7f:1b:65:a4:56:e9:36:79:14:cc:82:35:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=95f3f3030c627cd4599a17c80199e23581b2b67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:d6:3b:8c:4a:be:a1:4e:88:9d:6b:0d:61:
9a:2a:66:d5:5a:5c:4d:73:b3:e4:3a:32:64:21:b3:
00:69:ba:4d:a0:5e:56:91:58:7c:9e:92:99:2d:93:
fd:f1:59:d2:bb:c2:0e:76:ba:42:59:e6:51:c8:dc:
d5:a4:5d:a3:7a:9d:9e:4b:5f:2e:1a:00:5b:64:f2:
36:c5:e4:83:f0:89:42:a9:8a:d6:e0:fe:76:7b:5b:
e9:60:f0:ea:d9:3a:d5:a5:05:b0:86:ec:64:b9:e0:
c6:7d:44:6a:20:b9:87:c2:ac:cf:e5:17:4a:c0:b3:
23:00:a0:66:56:1f:e3:ac:5b:9a:ef:26:e0:9a:3c:
8e:aa:66:eb:8e:4a:d4:59:dd:3d:29:d4:0c:fa:3f:
1b:5a:38:c2:e1:c3:1e:13:c5:74:57:ee:f0:db:6b:
48:13:f0:b5:e5:25:1b:3a:d3:cd:4b:a2:45:41:29:
60:8d:d6:d0:d2:5b:ca:06:5c:1f:73:a7:63:22:35:
37:16:24:9d:1d:5f:3d:ec:81:4a:80:bd:60:6c:1b:
66:8d:8e:4a:a0:d7:ef:cb:02:50:bd:74:52:09:4d:
81:f8:d6:f8:83:4e:6b:22:86:85:fd:9d:31:94:6e:
aa:11:dc:89:fa:2d:c1:bb:54:c7:d7:1a:39:92:d9:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:F3:03:0C:62:7C:D4:59:9A:17:C8:01:99:E2:35:81:B2:B6:7A
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:77:16:a4:60:6f:4c:72:f1:4e:23:b5:7d:77:83:9b:fe:
7c:f3:e9:5c:d4:8b:d8:45:67:d5:a8:a9:f8:45:3b:8f:7d:47:
18:e7:49:19:d0:a2:a4:39:32:5b:35:97:58:9f:61:cf:fb:74:
b7:19:b2:28:43:7e:f5:42:01:c7:10:d8:09:05:75:55:6a:59:
13:30:ef:61:43:0c:3f:22:3d:e3:ad:4b:ba:de:08:84:2d:c4:
01:37:62:80:73:17:fd:3a:aa:d4:38:aa:6e:e5:ae:d8:6e:31:
99:41:a2:db:2c:7a:80:0c:11:d5:07:d8:35:45:3d:10:07:3c:
0c:8e:26:35:2d:d6:25:cd:b1:2b:70:5f:7f:2f:64:b9:ce:39:
03:5f:c0:e0:6a:3c:f4:6a:4d:7d:ba:aa:4c:3f:8e:97:2b:c2:
8d:71:0d:86:ba:04:6c:67:32:cd:60:02:45:5e:7d:b7:c9:29:
8a:48:9f:04:13:80:30:af:e0:41:50:65:24:d1:87:5a:d8:a2:
06:f6:01:a9:63:1e:9b:e7:9c:2d:0f:37:30:3e:0b:3a:79:47:
f8:c8:25:67:2b:6c:64:8a:77:9e:66:4b:44:e4:be:7e:bf:2f:
e7:6c:b9:4e:cd:b1:a5:ae:79:5f:89:70:66:2a:a2:6f:9e:35:
7b:eb:59:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEF/G2WkVuk2eRTMgjVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWI0OTBkNzY2ZjRiMWMyMTFkN2RhZGQ2ZWZhNzcwZjZl
YjllMjUwHhcNMjYwMzI5MDgwMDU3WhcNMjYwMzMwMDgwMDU3WjAzMTEwLwYDVQQD
Eyg5NWYzZjMwMzBjNjI3Y2Q0NTk5YTE3YzgwMTk5ZTIzNTgxYjJiNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkvWO4xKvqFOiJ1rDWGaKmbVWlxN
c7PkOjJkIbMAabpNoF5WkVh8npKZLZP98VnSu8IOdrpCWeZRyNzVpF2jep2eS18u
GgBbZPI2xeSD8IlCqYrW4P52e1vpYPDq2TrVpQWwhuxkueDGfURqILmHwqzP5RdK
wLMjAKBmVh/jrFua7ybgmjyOqmbrjkrUWd09KdQM+j8bWjjC4cMeE8V0V+7w22tI
E/C15SUbOtPNS6JFQSlgjdbQ0lvKBlwfc6djIjU3FiSdHV897IFKgL1gbBtmjY5K
oNfvywJQvXRSCU2B+Nb4g05rIoaF/Z0xlG6qEdyJ+i3Bu1TH1xo5ktkcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXz8wMMYnzUWZoXyAGZ4jWBsrZ6MB8GA1UdIwQY
MBaAFHhbSQ12b0scIR19rdbvp3D2654lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjct
N2NhZTA0MGU0OWU4LzEvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjctN2NhZTA0MGU0OWU4
LzEvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgN3FqRg
b0xy8U4jtX13g5v+fPPpXNSL2EVn1aip+EU7j31HGOdJGdCipDkyWzWXWJ9hz/t0
txmyKEN+9UIBxxDYCQV1VWpZEzDvYUMMPyI9461Lut4IhC3EATdigHMX/Tqq1Diq
buWu2G4xmUGi2yx6gAwR1QfYNUU9EAc8DI4mNS3WJc2xK3Bffy9kuc45A1/A4Go8
9GpNfbqqTD+OlyvCjXENhroEbGcyzWACRV59t8kpikifBBOAMK/gQVBlJNGHWtii
BvYBqWMem+ecLQ83MD4LOnlH+MglZytsZIp3nmZLROS+fr8v52y5Ts2xpa55X4lw
Ziqib541e+tZGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:39 2026 by rpki-client