Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: VJTOPrBpLDB4qoI6xfg4Ux5gvwjZJEn8stjkXd8RLuI=
Subject key identifier: 20:D8:78:59:4F:DE:3D:A0:8C:B1:41:9A:20:3B:8D:73:08:D7:A6:B3
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019D386593753A4D275902B3A7C6EEC962C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 05E9
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (hash: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo=)
2: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (hash: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: oYG2wJz8FS5lxB75YSvq5pXdmFMe5tmH2Bx8rFjZREI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:93:75:3a:4d:27:59:02:b3:a7:c6:ee:c9:62:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=20d878594fde3da08cb1419a203b8d7308d7a6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:90:07:43:8e:8e:f1:45:5a:03:0d:e4:6e:
59:ff:6d:b2:0e:9c:73:3c:fe:02:b1:a8:25:fd:02:
8c:10:70:11:7a:4f:e0:ad:0e:2e:f6:55:95:9b:0e:
63:f8:88:d0:b6:f9:13:47:8d:d0:7d:b3:65:2e:71:
c0:f4:c6:14:33:ee:25:5b:20:25:3b:8b:cd:a6:5a:
b1:a2:f4:22:51:7d:70:ec:11:4d:35:27:54:d3:8f:
10:f4:d9:bf:8d:49:48:d1:e1:04:0a:94:89:89:3f:
4c:39:ed:fb:1d:1c:62:3c:d9:aa:fa:36:a3:12:8b:
55:18:56:8a:f5:2a:25:49:d4:93:cf:f2:53:5c:36:
c8:8b:1d:3c:0c:5e:38:cf:ef:37:70:bc:9d:fe:6c:
f3:4d:81:a3:b0:07:6a:9c:c3:27:ef:cf:96:bd:94:
45:d4:18:e1:7f:c2:f6:78:4e:41:dc:7b:ea:46:f3:
b4:c3:ed:3f:10:01:1a:32:8f:51:87:f2:e8:d2:65:
b0:a1:40:19:89:50:39:e3:fd:71:26:60:70:6e:64:
cc:b5:c7:3d:df:e0:28:4d:34:eb:47:d1:0e:52:28:
ca:05:92:8d:b9:86:ed:5f:a0:63:93:9b:86:6c:94:
c3:91:e1:81:57:6d:db:f4:1f:5d:f7:b0:15:f1:2a:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:78:59:4F:DE:3D:A0:8C:B1:41:9A:20:3B:8D:73:08:D7:A6:B3
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:3f:0b:7e:13:6d:ab:75:e7:67:70:4b:30:ee:f1:7f:73:
51:81:e7:6a:46:82:b8:20:ad:c4:97:fe:1a:95:4d:3e:fb:4a:
38:04:76:9d:14:84:20:24:73:a0:10:17:72:22:24:e8:40:d0:
67:47:fc:be:42:ab:da:07:34:a0:4b:01:13:0c:bb:dd:0c:b0:
1b:10:69:bc:29:12:a4:87:96:cb:72:72:74:35:dc:82:e7:7f:
71:28:df:bd:81:cd:9c:c8:53:b4:88:94:58:2a:2c:41:3d:e7:
90:5f:3b:df:b6:24:49:a7:e9:34:35:39:21:0e:5f:55:8c:bd:
45:b8:56:29:32:5d:1b:33:e7:4f:c4:e4:82:70:0b:bb:0b:d9:
fd:b5:a5:21:58:2b:f3:41:a6:00:b7:2e:5c:72:b1:8a:cc:d3:
19:ed:3a:af:c1:77:db:b3:76:01:85:9f:2e:e4:50:e2:ae:af:
81:40:80:64:c0:81:8e:71:a5:e3:26:c7:c3:49:50:94:20:f1:
7f:ae:c7:1c:f8:32:fb:32:e7:fa:33:8e:87:15:24:1d:52:9a:
94:ff:a0:68:34:04:a5:f8:8f:d4:7e:ff:5a:a9:21:38:3b:45:
fd:df:4d:dc:6b:4b:7a:06:20:11:98:96:59:93:3e:b6:d7:c8:
aa:7c:53:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZN1Ok0nWQKzp8buyWLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNGQzMWFiMThlNDFmOGQ5NTlhMDlkNTU2NjBkZDMyYWE5
YzQ1ZjcwHhcNMjYwMzI5MDcwMTE0WhcNMjYwMzMwMDcwMTE0WjAzMTEwLwYDVQQD
EygyMGQ4Nzg1OTRmZGUzZGEwOGNiMTQxOWEyMDNiOGQ3MzA4ZDdhNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVSQB0OOjvFFWgMN5G5Z/22yDpxz
PP4Csagl/QKMEHARek/grQ4u9lWVmw5j+IjQtvkTR43QfbNlLnHA9MYUM+4lWyAl
O4vNplqxovQiUX1w7BFNNSdU048Q9Nm/jUlI0eEECpSJiT9MOe37HRxiPNmq+jaj
EotVGFaK9SolSdSTz/JTXDbIix08DF44z+83cLyd/mzzTYGjsAdqnMMn78+WvZRF
1Bjhf8L2eE5B3HvqRvO0w+0/EAEaMo9Rh/Lo0mWwoUAZiVA54/1xJmBwbmTMtcc9
3+AoTTTrR9EOUijKBZKNuYbtX6Bjk5uGbJTDkeGBV23b9B9d97AV8SqxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDYeFlP3j2gjLFBmiA7jXMI16azMB8GA1UdIwQY
MBaAFHtNMasY5B+NlZoJ1VZg3TKqnEX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAt
YmZmMDIzYjM0NGY3LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAtYmZmMDIzYjM0NGY3
LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtg/C34T
bat152dwSzDu8X9zUYHnakaCuCCtxJf+GpVNPvtKOAR2nRSEICRzoBAXciIk6EDQ
Z0f8vkKr2gc0oEsBEwy73QywGxBpvCkSpIeWy3JydDXcgud/cSjfvYHNnMhTtIiU
WCosQT3nkF8737YkSafpNDU5IQ5fVYy9RbhWKTJdGzPnT8TkgnALuwvZ/bWlIVgr
80GmALcuXHKxiszTGe06r8F327N2AYWfLuRQ4q6vgUCAZMCBjnGl4ybHw0lQlCDx
f67HHPgy+zLn+jOOhxUkHVKalP+gaDQEpfiP1H7/WqkhODtF/d9N3GtLegYgEZiW
WZM+ttfIqnxTDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:29 2026 by rpki-client