Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: 04d6oQM4NgrvkzXRzxrkZ6um6Rldi0SJMBEmWAhT2Wc=
Subject key identifier: E4:E0:F2:16:08:A2:B1:A5:10:55:DF:3F:A6:D2:78:64:E3:4B:EB:60
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019D38D2F436A159C01A2FA59E08824BA183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa (hash: 08IB4CQ6qXGvHbqlm2iST8aQYIXZEjOYZuD8asm6wTA=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: 2cq3Rp3Pv3vJE20jq77K5qNQU2e2+F1eox8VDbvRKM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f4:36:a1:59:c0:1a:2f:a5:9e:08:82:4b:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=e4e0f21608a2b1a51055df3fa6d27864e34beb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:73:09:d3:cf:5f:de:a3:d8:c5:12:b5:a8:
a4:e4:6e:16:38:e0:3c:20:ba:ff:09:0b:21:7f:f0:
6a:a3:3e:d0:b6:73:c5:8b:c6:d6:9e:d6:e6:bd:f7:
77:da:98:45:ea:48:ae:05:1e:44:f6:bd:3b:e3:dd:
1c:09:26:e8:9f:d6:eb:6a:fc:8b:d1:c1:65:74:53:
4f:60:85:e9:03:f3:19:69:b6:3a:12:5a:f8:15:0f:
58:7a:81:37:0d:36:3c:37:b9:28:c0:d2:9e:2b:e5:
2d:f7:ce:13:17:d7:d6:09:8d:a0:41:e3:c8:ba:ce:
0c:e8:68:e3:23:63:3c:63:9a:7a:a1:a5:4d:87:5b:
21:79:76:f5:2e:43:31:bf:28:7e:9f:ca:88:3f:9a:
e8:e5:d8:6d:9a:b7:52:16:e7:ac:0e:40:50:a9:ce:
3f:bf:20:cf:5b:56:28:0d:77:c4:b6:67:92:fe:46:
2c:0b:22:7d:b7:23:32:05:b7:3a:86:6f:1e:4c:4a:
fd:4c:e9:fa:ee:15:e7:4c:2e:b4:57:19:49:f7:ff:
67:91:a0:ab:84:38:af:1c:ef:7d:18:e9:56:44:b8:
8a:b0:d4:d5:d0:95:b9:16:39:42:1e:af:68:83:4d:
4c:b5:99:98:20:55:89:c7:27:c7:08:21:a6:98:37:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:F2:16:08:A2:B1:A5:10:55:DF:3F:A6:D2:78:64:E3:4B:EB:60
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8c:6f:ba:1a:c6:de:4d:af:be:dd:70:3b:ee:6b:50:35:99:
f3:de:ec:22:21:ab:e2:9c:d4:4c:3e:c8:32:a1:81:34:43:62:
dc:06:5c:0b:d7:03:cb:8d:ab:a7:74:b4:49:75:80:f0:2c:0a:
ab:44:db:f3:96:a5:78:e7:7c:89:bc:71:ad:ab:3d:d0:f5:3b:
19:f7:c0:ea:54:93:5b:e7:58:47:43:92:30:2c:da:4c:fb:54:
78:9d:80:e2:81:ed:b3:8f:04:3a:46:55:ee:7c:83:1d:18:4d:
84:d5:e5:a6:f5:99:05:87:86:e4:a2:ab:96:fd:99:d4:02:ff:
70:1f:ee:b3:d0:d2:58:cb:dc:8f:a1:0f:84:55:58:c2:85:f6:
78:be:c5:0b:54:45:73:8c:c5:cf:23:0f:9c:f2:35:bd:69:4a:
e4:f0:dd:85:6f:ba:22:c4:03:4e:0b:9e:4f:e6:03:2f:c9:15:
a0:5a:bc:33:63:98:34:c3:7d:a2:59:51:3d:24:1d:80:d8:5a:
c1:96:ff:6c:85:28:c6:c2:7a:b0:1f:98:98:95:b8:30:18:76:
56:62:3f:af:ea:3e:f6:f7:b7:ca:9f:40:b7:8a:87:33:b7:69:
36:2e:1a:98:aa:94:1a:07:7e:7e:d6:b9:ab:e8:5e:36:b4:e9:
37:fc:7c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vQ2oVnAGi+lngiCS6GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy
ZjRjOTQwHhcNMjYwMzI5MDkwMDQyWhcNMjYwMzMwMDkwMDQyWjAzMTEwLwYDVQQD
EyhlNGUwZjIxNjA4YTJiMWE1MTA1NWRmM2ZhNmQyNzg2NGUzNGJlYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kRzCdPPX96j2MUStaik5G4WOOA8
ILr/CQshf/Bqoz7QtnPFi8bWntbmvfd32phF6kiuBR5E9r07490cCSbon9bravyL
0cFldFNPYIXpA/MZabY6Elr4FQ9YeoE3DTY8N7kowNKeK+Ut984TF9fWCY2gQePI
us4M6GjjI2M8Y5p6oaVNh1sheXb1LkMxvyh+n8qIP5ro5dhtmrdSFuesDkBQqc4/
vyDPW1YoDXfEtmeS/kYsCyJ9tyMyBbc6hm8eTEr9TOn67hXnTC60VxlJ9/9nkaCr
hDivHO99GOlWRLiKsNTV0JW5FjlCHq9og01MtZmYIFWJxyfHCCGmmDej/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTg8hYIorGlEFXfP6bSeGTjS+tgMB8GA1UdIwQY
MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct
Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3
LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoxvuhrG
3k2vvt1wO+5rUDWZ897sIiGr4pzUTD7IMqGBNENi3AZcC9cDy42rp3S0SXWA8CwK
q0Tb85aleOd8ibxxras90PU7GffA6lSTW+dYR0OSMCzaTPtUeJ2A4oHts48EOkZV
7nyDHRhNhNXlpvWZBYeG5KKrlv2Z1AL/cB/us9DSWMvcj6EPhFVYwoX2eL7FC1RF
c4zFzyMPnPI1vWlK5PDdhW+6IsQDTgueT+YDL8kVoFq8M2OYNMN9ollRPSQdgNha
wZb/bIUoxsJ6sB+YmJW4MBh2VmI/r+o+9ve3yp9At4qHM7dpNi4amKqUGgd+fta5
q+heNrTpN/x80Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:16 2026 by rpki-client