Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: 4f1ROnNAjQTICrB9XVNSYT4Fr0vkaLMA40Oa0JZA4yw=
Subject key identifier: 24:13:78:F9:7E:3F:08:B0:87:E9:E7:89:F0:A6:38:C4:A0:8D:8F:77
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019E30E07553AC55B7FAC431FDD64ABEB965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 191B
Signing time: Sat 16 May 2026 13:01:16 +0000
Manifest this update: Sat 16 May 2026 13:01:16 +0000
Manifest next update: Sun 17 May 2026 13:01:16 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: 7WRSTExs3iXBYEJq57zDL4Hdt8mLpsbKDUF/cJlrN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:75:53:ac:55:b7:fa:c4:31:fd:d6:4a:be:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: May 16 13:01:16 2026 GMT
Not After : May 17 13:01:16 2026 GMT
Subject: CN=241378f97e3f08b087e9e789f0a638c4a08d8f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:6f:fa:b0:31:8f:63:7e:4e:f8:4f:2a:d7:
43:73:06:45:fa:8e:83:9e:f8:d7:5b:15:60:75:c6:
82:98:d4:6c:a8:90:eb:f9:c0:af:5e:d3:28:04:06:
49:00:87:48:5b:83:7c:bc:f0:c1:83:d8:fc:8f:91:
de:6c:7b:4e:11:91:ae:0e:77:a6:3a:ce:63:24:85:
ff:f4:88:d6:83:e3:08:bb:27:5c:98:7a:18:f5:1c:
46:6e:d3:57:57:da:de:2f:b9:e4:9d:ae:f2:20:d3:
d6:8b:64:af:ef:61:3a:e5:27:fc:ba:40:54:14:49:
bf:76:42:39:f9:c0:0c:3c:72:c7:a2:7b:2b:90:06:
06:7c:9d:38:ef:88:19:a5:41:61:b3:9e:a9:c4:6c:
c3:ea:93:65:f4:fb:85:e5:e2:99:75:19:30:1d:45:
b4:9e:49:fd:66:7d:57:05:7d:84:fa:4d:9c:1c:0a:
d6:5b:9b:f8:30:2c:2d:e2:84:7e:42:33:bf:9c:65:
ea:d5:74:4c:da:b2:e3:86:2f:a8:49:28:64:cb:57:
20:61:0e:d5:f1:71:47:98:3e:77:58:6a:97:85:0b:
33:b7:60:ce:94:b5:83:30:a4:19:c1:d3:11:78:35:
b9:ee:f4:f7:b8:c7:f2:5c:01:23:83:92:8f:7f:64:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:78:F9:7E:3F:08:B0:87:E9:E7:89:F0:A6:38:C4:A0:8D:8F:77
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:98:50:4d:1d:5b:94:7b:7a:5c:c5:da:bb:a2:7d:21:25:b7:
ee:29:3c:d8:dc:79:d3:82:c8:6f:46:a9:e7:cc:05:a6:72:5e:
f1:51:e5:71:a8:39:64:0e:06:a1:66:57:8c:5f:e8:0e:c9:bc:
11:32:b9:21:64:10:5b:fd:e9:d4:f5:21:4c:a0:0c:7c:ff:59:
78:3c:74:bd:f0:c9:21:34:c7:47:f9:1c:46:29:5d:7a:91:f7:
5a:6d:45:bb:2d:24:59:66:b1:41:2f:80:9b:cc:5f:1c:64:f6:
cc:f8:04:60:21:28:e6:8a:03:c1:e6:9c:02:fc:3d:21:4c:35:
7f:92:01:07:24:a7:1a:e2:08:84:7c:23:9e:14:6e:d7:cf:5e:
fc:aa:2c:a4:0f:7f:90:d4:53:dd:11:5e:b7:f3:74:93:08:c1:
a8:15:41:45:cd:7c:f3:a9:b7:6b:78:7d:d1:cf:5d:ee:bd:26:
bc:1d:d7:5b:48:2f:bd:8f:96:12:b7:07:1a:ec:95:a3:19:b0:
e7:00:ca:64:ae:11:f6:f4:f3:b4:cb:dc:99:c4:f5:ca:4c:35:
77:cb:89:d5:f0:bc:21:5d:ef:18:8b:34:9a:9f:9c:a1:78:f9:
68:74:b1:b0:59:ec:2f:70:89:34:75:d7:01:fc:a7:df:67:4e:
6f:45:4b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4HVTrFW3+sQx/dZKvrllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi
MTg1YmIwHhcNMjYwNTE2MTMwMTE2WhcNMjYwNTE3MTMwMTE2WjAzMTEwLwYDVQQD
EygyNDEzNzhmOTdlM2YwOGIwODdlOWU3ODlmMGE2MzhjNGEwOGQ4Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9v+rAxj2N+TvhPKtdDcwZF+o6D
nvjXWxVgdcaCmNRsqJDr+cCvXtMoBAZJAIdIW4N8vPDBg9j8j5HebHtOEZGuDnem
Os5jJIX/9IjWg+MIuydcmHoY9RxGbtNXV9reL7nkna7yINPWi2Sv72E65Sf8ukBU
FEm/dkI5+cAMPHLHonsrkAYGfJ0474gZpUFhs56pxGzD6pNl9PuF5eKZdRkwHUW0
nkn9Zn1XBX2E+k2cHArWW5v4MCwt4oR+QjO/nGXq1XRM2rLjhi+oSShky1cgYQ7V
8XFHmD53WGqXhQszt2DOlLWDMKQZwdMReDW57vT3uMfyXAEjg5KPf2Q9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQTePl+Pwiwh+nnifCmOMSgjY93MB8GA1UdIwQY
MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt
NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5
LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZhQTR1b
lHt6XMXau6J9ISW37ik82Nx504LIb0ap58wFpnJe8VHlcag5ZA4GoWZXjF/oDsm8
ETK5IWQQW/3p1PUhTKAMfP9ZeDx0vfDJITTHR/kcRildepH3Wm1Fuy0kWWaxQS+A
m8xfHGT2zPgEYCEo5ooDweacAvw9IUw1f5IBBySnGuIIhHwjnhRu189e/KospA9/
kNRT3RFet/N0kwjBqBVBRc1886m3a3h90c9d7r0mvB3XW0gvvY+WErcHGuyVoxmw
5wDKZK4R9vTztMvcmcT1ykw1d8uJ1fC8IV3vGIs0mp+coXj5aHSxsFnsL3CJNHXX
Afyn32dOb0VLug==
-----END CERTIFICATE-----
Generated at Sat May 16 15:40:06 2026 by rpki-client