Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier: nbQ4L31cGR+UEnFd0flWEl1hS/ZQ4C8hhKkooowJIaQ=
Subject key identifier: B0:48:E0:33:CB:11:75:1E:58:FD:1A:56:01:A1:F5:D5:67:23:9C:24
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial: 019DCFE3C41EB7A05921823D91FA7066C564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number: 0FC0
Signing time: Mon 27 Apr 2026 17:01:43 +0000
Manifest this update: Mon 27 Apr 2026 17:01:43 +0000
Manifest next update: Tue 28 Apr 2026 17:01:43 +0000
Files and hashes: 1: LihjF3erJvHMjTYo7GDxbJGT55U.roa (hash: tOjtoNpUm+UuyQUObaS6VVdDcVoLBkYa2bxLOM78Y7k=)
2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: /Ewm8z7E346xRw3hVaGFxBrYDxP5cTjnfSqPgPQ1AYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:c4:1e:b7:a0:59:21:82:3d:91:fa:70:66:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Validity
Not Before: Apr 27 17:01:43 2026 GMT
Not After : Apr 28 17:01:43 2026 GMT
Subject: CN=b048e033cb11751e58fd1a5601a1f5d567239c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:da:48:84:7f:99:13:b3:89:49:60:39:ea:
b1:2c:1c:69:b6:2b:81:ec:7d:9d:39:0b:1c:20:28:
4a:89:9f:65:e9:16:77:7c:81:6f:8a:c3:f0:58:d2:
2b:f3:f5:9a:44:de:10:63:8b:50:2c:9d:13:83:fe:
b8:22:30:34:2a:18:b7:39:8b:38:2b:28:de:f1:8d:
d4:87:30:90:cf:2f:5c:2a:eb:ad:c1:19:5c:13:bf:
78:36:d3:c4:97:cc:5a:fc:c3:3e:67:a2:32:38:30:
46:ea:e9:98:95:74:d8:55:89:9b:ab:22:00:62:a8:
2a:2e:55:e4:c4:a8:9c:88:f8:8f:df:ac:b9:28:5d:
b9:5e:c7:9a:72:5a:3b:21:5f:3f:93:d3:47:fc:38:
a5:ac:81:43:a2:b9:fa:a5:7e:33:e1:11:a2:16:ac:
d8:5d:3c:1a:1b:e8:05:6e:bf:14:a9:c5:f1:2d:1f:
99:45:c5:21:6c:e6:09:ac:01:a8:e6:d2:d4:a4:fe:
fc:3c:78:23:40:a0:fb:ef:58:a0:9c:94:4f:e2:16:
d3:37:d8:0a:e8:2a:cc:d0:2c:11:41:8a:fa:48:2e:
e3:7b:cf:29:5e:c8:38:c8:c7:35:07:bc:10:95:db:
59:46:83:a5:6a:64:f6:03:70:10:e9:bc:60:12:22:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:E0:33:CB:11:75:1E:58:FD:1A:56:01:A1:F5:D5:67:23:9C:24
X509v3 Authority Key Identifier:
keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:2e:6d:d4:0e:26:2d:ab:d0:c4:87:29:5e:5d:bb:22:3f:
df:6c:ff:8b:6f:c8:c7:f2:5c:f0:50:22:73:40:76:b2:0d:dc:
38:dc:ee:b7:37:f0:8a:8f:6b:9f:46:5d:47:bb:b2:5e:01:90:
a6:28:bc:f6:e6:05:74:0a:51:58:45:ab:d7:d0:41:7b:f0:a4:
8b:76:9c:6f:32:5c:ed:2a:c3:15:4c:e2:b6:df:18:4d:74:e6:
4d:9b:47:1d:2c:8c:e3:b5:a9:3b:8d:6a:3d:fe:55:22:86:28:
9a:8f:89:c0:3a:74:21:61:e8:de:b4:33:90:c9:ae:f3:0e:8b:
4e:d7:65:c7:6c:be:2d:a0:87:81:69:15:a2:a0:c4:b6:65:2e:
e5:db:5d:ce:3a:84:b7:5d:59:c7:02:d1:04:24:c6:27:ca:e5:
a3:ad:6a:b2:cd:e3:8c:b9:4d:2d:38:23:b5:60:3d:89:ae:ab:
1d:aa:62:46:a7:a2:16:61:6a:58:ad:01:b0:a4:22:5f:74:73:
a3:ee:99:b5:bb:19:65:6e:3f:4c:7e:77:95:7f:b1:2e:15:08:
73:b0:d1:0b:b2:87:ba:d9:ef:45:5e:72:eb:24:96:f6:71:75:
c4:d4:f2:25:7d:b6:48:39:f8:7d:64:8a:05:9e:77:79:02:2c:
95:91:ad:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P48Qet6BZIYI9kfpwZsVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0
NzQ4MzUwHhcNMjYwNDI3MTcwMTQzWhcNMjYwNDI4MTcwMTQzWjAzMTEwLwYDVQQD
EyhiMDQ4ZTAzM2NiMTE3NTFlNThmZDFhNTYwMWExZjVkNTY3MjM5YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lTaSIR/mROziUlgOeqxLBxptiuB
7H2dOQscIChKiZ9l6RZ3fIFvisPwWNIr8/WaRN4QY4tQLJ0Tg/64IjA0Khi3OYs4
Kyje8Y3UhzCQzy9cKuutwRlcE794NtPEl8xa/MM+Z6IyODBG6umYlXTYVYmbqyIA
YqgqLlXkxKiciPiP36y5KF25Xseaclo7IV8/k9NH/DilrIFDorn6pX4z4RGiFqzY
XTwaG+gFbr8UqcXxLR+ZRcUhbOYJrAGo5tLUpP78PHgjQKD771ignJRP4hbTN9gK
6CrM0CwRQYr6SC7je88pXsg4yMc1B7wQldtZRoOlamT2A3AQ6bxgEiKhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBI4DPLEXUeWP0aVgGh9dVnI5wkMB8GA1UdIwQY
MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct
MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx
LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWEubdQO
Ji2r0MSHKV5duyI/32z/i2/Ix/Jc8FAic0B2sg3cONzutzfwio9rn0ZdR7uyXgGQ
pii89uYFdApRWEWr19BBe/Cki3acbzJc7SrDFUzitt8YTXTmTZtHHSyM47WpO41q
Pf5VIoYomo+JwDp0IWHo3rQzkMmu8w6LTtdlx2y+LaCHgWkVoqDEtmUu5dtdzjqE
t11ZxwLRBCTGJ8rlo61qss3jjLlNLTgjtWA9ia6rHapiRqeiFmFqWK0BsKQiX3Rz
o+6ZtbsZZW4/TH53lX+xLhUIc7DRC7KHutnvRV5y6ySW9nF1xNTyJX22SDn4fWSK
BZ53eQIslZGtiw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:16 2026 by rpki-client