Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: nb8FiH4CmCs91hihR0FLgZfHkH/IQd6X680NKx2AT+4=
Subject key identifier: 88:7E:C9:79:6C:3F:3C:4D:38:6A:9A:78:5C:8C:A6:4C:61:AF:FA:4E
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019F18D61B3EBDFB9823D81031BFF839FECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0F64
Signing time: Tue 30 Jun 2026 14:01:52 +0000
Manifest this update: Tue 30 Jun 2026 14:01:52 +0000
Manifest next update: Wed 01 Jul 2026 14:01:52 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: q1QjZ+hBKhXByivFR1KdSwXJWp2myk/ej7M0rHA9qIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:1b:3e:bd:fb:98:23:d8:10:31:bf:f8:39:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jun 30 14:01:52 2026 GMT
Not After : Jul 1 14:01:52 2026 GMT
Subject: CN=887ec9796c3f3c4d386a9a785c8ca64c61affa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:7d:37:18:70:ba:23:88:46:e2:fc:18:57:
c7:bd:3c:10:c9:ae:fc:30:34:d5:78:ef:b2:56:19:
1d:3c:fe:06:31:fc:3a:7f:a9:8a:ac:80:31:ce:dd:
b9:d2:7e:7a:cb:f9:48:3a:46:6d:17:ac:3b:dd:0e:
07:c4:08:e2:60:43:5b:4d:cd:b1:ee:ac:ac:2d:a9:
78:84:fa:a9:83:57:0d:f4:0e:68:30:88:16:84:a9:
8d:21:5f:4c:21:a7:5d:42:a4:ce:2d:c4:86:69:97:
58:24:11:2a:02:42:2b:02:b3:84:5e:f5:ae:7c:ba:
4e:61:ec:cd:dd:03:62:00:b0:f7:2a:14:74:03:82:
81:9a:fa:2c:2f:4d:1f:04:ea:24:a2:5f:14:59:d3:
37:2f:2d:71:83:17:8f:dc:27:16:0a:f0:70:14:9e:
6e:a6:3b:3e:3d:59:58:9c:d9:5a:c5:5a:cb:b6:82:
7a:d9:db:50:d9:de:a5:00:e9:86:dd:ca:c0:2e:07:
a5:08:d5:f7:26:17:aa:df:6d:2d:ca:55:14:95:93:
8a:81:16:3f:22:06:70:f0:aa:43:af:67:30:f6:6a:
12:2c:d9:d7:1c:94:c3:38:4f:ae:03:19:aa:f9:41:
ab:df:cc:a0:04:d5:d7:0d:6a:f1:4c:3f:b8:b5:cb:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:C9:79:6C:3F:3C:4D:38:6A:9A:78:5C:8C:A6:4C:61:AF:FA:4E
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:3b:fa:56:f8:7f:67:0f:3c:15:fa:8b:99:db:a0:72:b4:
19:d5:81:92:c1:27:bf:bb:27:4f:22:5d:45:b9:49:58:80:d0:
33:d8:6e:90:f5:81:93:14:e4:32:07:ff:a4:9e:f4:e7:d4:87:
b1:3c:a1:e6:e7:30:04:ca:56:7a:d7:e2:b3:92:45:72:e4:a3:
7a:17:dd:0f:36:46:e5:e9:15:f2:a5:51:b5:b8:16:22:f6:7b:
bc:d7:d6:f5:cb:1f:53:4a:99:00:a9:da:0f:1c:b8:bb:c3:7e:
38:9a:13:8c:ce:6a:17:c4:5e:0a:33:26:c0:5e:50:50:02:cf:
3e:9c:87:79:97:18:7c:c1:f0:6e:53:0e:9c:5f:21:79:9f:be:
08:99:9a:12:2e:3b:36:ec:c9:5f:09:09:80:5b:c2:92:e5:11:
9a:49:26:ec:32:e0:35:0b:7b:fd:52:3f:a6:02:e1:71:0d:db:
e3:0b:28:0d:9e:42:01:07:bb:60:dc:c9:71:9e:ba:31:bb:e2:
54:4f:53:95:1e:42:4b:89:dd:17:69:ce:b9:13:bf:3a:2c:0c:
59:a9:35:9d:f2:1c:f0:a2:17:77:24:f9:17:0e:3f:21:a7:16:
be:c8:b8:e6:81:1c:31:9d:71:55:28:d3:af:1d:92:36:1d:ee:
6f:b7:73:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1hs+vfuYI9gQMb/4Of7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjYwNjMwMTQwMTUyWhcNMjYwNzAxMTQwMTUyWjAzMTEwLwYDVQQD
Eyg4ODdlYzk3OTZjM2YzYzRkMzg2YTlhNzg1YzhjYTY0YzYxYWZmYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCF9NxhwuiOIRuL8GFfHvTwQya78
MDTVeO+yVhkdPP4GMfw6f6mKrIAxzt250n56y/lIOkZtF6w73Q4HxAjiYENbTc2x
7qysLal4hPqpg1cN9A5oMIgWhKmNIV9MIaddQqTOLcSGaZdYJBEqAkIrArOEXvWu
fLpOYezN3QNiALD3KhR0A4KBmvosL00fBOokol8UWdM3Ly1xgxeP3CcWCvBwFJ5u
pjs+PVlYnNlaxVrLtoJ62dtQ2d6lAOmG3crALgelCNX3Jheq320tylUUlZOKgRY/
IgZw8KpDr2cw9moSLNnXHJTDOE+uAxmq+UGr38ygBNXXDWrxTD+4tcvwnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh+yXlsPzxNOGqaeFyMpkxhr/pOMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFI7+lb4
f2cPPBX6i5nboHK0GdWBksEnv7snTyJdRblJWIDQM9hukPWBkxTkMgf/pJ7059SH
sTyh5ucwBMpWetfis5JFcuSjehfdDzZG5ekV8qVRtbgWIvZ7vNfW9csfU0qZAKna
Dxy4u8N+OJoTjM5qF8ReCjMmwF5QUALPPpyHeZcYfMHwblMOnF8heZ++CJmaEi47
NuzJXwkJgFvCkuURmkkm7DLgNQt7/VI/pgLhcQ3b4wsoDZ5CAQe7YNzJcZ66Mbvi
VE9TlR5CS4ndF2nOuRO/OiwMWak1nfIc8KIXdyT5Fw4/IacWvsi45oEcMZ1xVSjT
rx2SNh3ub7dz9A==
-----END CERTIFICATE-----
Generated at Wed Jul 1 00:17:52 2026 by rpki-client