Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: 7cMQGsU8eT7ZhTnXas1dGTSumXlcBAi0yA+MNmm6AXc=
Subject key identifier: F8:74:82:14:97:06:F0:41:25:81:2D:B9:94:02:6B:D6:E3:1E:E8:75
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019DCF3E67E2ADBFF3A7D25EBF0A0C836CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 186D
Signing time: Mon 27 Apr 2026 14:01:06 +0000
Manifest this update: Mon 27 Apr 2026 14:01:06 +0000
Manifest next update: Tue 28 Apr 2026 14:01:06 +0000
Files and hashes: 1: AWdnvO_fGYURQMiK3WsDBvu78og.roa (hash: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE=)
2: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: qnF+VJi5dTb/ic8u+XLW2475fbCkiBZhFC3M2nZ/CxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:67:e2:ad:bf:f3:a7:d2:5e:bf:0a:0c:83:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Apr 27 14:01:06 2026 GMT
Not After : Apr 28 14:01:06 2026 GMT
Subject: CN=f87482149706f04125812db994026bd6e31ee875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:f1:d8:b4:71:80:09:7e:26:19:e9:bd:65:
19:52:71:4e:57:2e:3f:f5:00:ea:3f:f2:82:50:8b:
5c:a2:e5:ba:5b:3d:5a:3a:90:ef:38:3c:5a:89:77:
39:61:ae:f7:1c:77:8d:05:d5:5a:56:02:0e:9b:66:
82:be:d4:7b:6a:d1:46:30:57:e7:4c:f7:1a:4d:36:
4b:e8:04:07:7c:f3:a9:79:1b:05:9c:73:6e:83:f4:
91:55:37:16:1d:47:f3:68:22:37:79:f5:73:72:4b:
05:97:ab:88:31:8f:33:a8:80:b5:b1:43:e2:4b:88:
6a:ea:27:42:d4:69:4e:e1:17:a0:35:0a:a2:4c:c5:
8c:fd:ad:dc:f8:6f:ce:a7:54:73:91:62:ae:f0:0e:
db:62:14:4c:ab:51:ab:fa:e0:28:bc:31:ab:a4:ee:
9e:8f:2e:4e:d8:fc:0d:05:96:c7:ec:4f:dc:f4:98:
91:97:17:c2:c5:f1:b5:1d:1e:a9:d6:ff:5d:55:2b:
05:e8:58:13:6b:7c:75:22:f4:c9:db:9a:44:3d:09:
b2:cb:b4:4f:14:78:f2:0d:44:48:52:65:5e:c7:92:
22:9b:93:94:34:07:d0:0f:72:f3:8d:13:28:70:ca:
a0:02:07:74:4d:d6:b8:f6:7a:06:ab:21:9c:d1:6a:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:82:14:97:06:F0:41:25:81:2D:B9:94:02:6B:D6:E3:1E:E8:75
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:4b:7e:93:b5:67:ad:6d:f7:60:66:6d:5d:e2:48:04:50:
8b:55:28:18:45:6f:2c:3b:59:63:e3:d4:07:5d:1b:d0:f6:a4:
a4:cd:ad:a7:7f:66:68:91:6e:07:41:72:d5:18:c9:e1:d5:ba:
c5:40:d3:e6:c6:fa:7d:6c:40:57:6c:ee:35:d6:0f:61:ca:9f:
df:3b:3b:86:4e:0c:f7:62:53:8e:7e:d5:1d:72:04:eb:a4:02:
0c:74:9d:dd:55:b1:70:62:23:41:51:6b:e5:85:b8:ed:13:77:
49:72:d1:e6:49:84:5b:a6:56:64:11:df:70:c9:ca:d3:cd:11:
6e:37:87:be:a3:fd:51:44:5c:b3:c1:fd:a9:49:1c:ed:79:87:
66:7c:a9:8b:79:a0:ac:2a:67:ce:6e:83:05:06:80:96:64:c0:
d1:20:7d:10:b9:ba:ad:6d:d2:ff:b2:60:ed:cc:e2:c9:66:45:
d2:5b:ec:9a:2a:02:12:c7:f6:de:db:f0:72:0f:ff:c5:11:f8:
09:1b:32:1a:21:a2:10:d6:85:bc:56:27:af:54:66:8e:cf:1e:
86:5f:be:2f:47:ad:f6:41:2a:7e:dd:13:80:2c:11:bc:fd:7e:
36:f4:25:95:0a:98:b9:41:a7:57:61:d5:29:90:e7:3e:e5:88:
c7:5b:51:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPmfirb/zp9JevwoMg2ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNmQyODQwNDA0NDIzOWVmNTgyNDJmMjEwZTBiMTY2Njdl
YjQwZDAwHhcNMjYwNDI3MTQwMTA2WhcNMjYwNDI4MTQwMTA2WjAzMTEwLwYDVQQD
EyhmODc0ODIxNDk3MDZmMDQxMjU4MTJkYjk5NDAyNmJkNmUzMWVlODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjx2LRxgAl+JhnpvWUZUnFOVy4/
9QDqP/KCUItcouW6Wz1aOpDvODxaiXc5Ya73HHeNBdVaVgIOm2aCvtR7atFGMFfn
TPcaTTZL6AQHfPOpeRsFnHNug/SRVTcWHUfzaCI3efVzcksFl6uIMY8zqIC1sUPi
S4hq6idC1GlO4RegNQqiTMWM/a3c+G/Op1RzkWKu8A7bYhRMq1Gr+uAovDGrpO6e
jy5O2PwNBZbH7E/c9JiRlxfCxfG1HR6p1v9dVSsF6FgTa3x1IvTJ25pEPQmyy7RP
FHjyDURIUmVex5Iim5OUNAfQD3LzjRMocMqgAgd0Tda49noGqyGc0WpeIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh0ghSXBvBBJYEtuZQCa9bjHuh1MB8GA1UdIwQY
MBaAFHttKEBARCOe9YJC8hDgsWZn60DQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt
YTY1ZmJkODMwMzU4LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4
LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvZLfpO1
Z61t92BmbV3iSARQi1UoGEVvLDtZY+PUB10b0PakpM2tp39maJFuB0Fy1RjJ4dW6
xUDT5sb6fWxAV2zuNdYPYcqf3zs7hk4M92JTjn7VHXIE66QCDHSd3VWxcGIjQVFr
5YW47RN3SXLR5kmEW6ZWZBHfcMnK080RbjeHvqP9UURcs8H9qUkc7XmHZnypi3mg
rCpnzm6DBQaAlmTA0SB9ELm6rW3S/7Jg7cziyWZF0lvsmioCEsf23tvwcg//xRH4
CRsyGiGiENaFvFYnr1Rmjs8ehl++L0et9kEqft0TgCwRvP1+NvQllQqYuUGnV2HV
KZDnPuWIx1tR0g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:29:49 2026 by rpki-client