Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
File: 64JTR370B4ekh0qzFSNEcKeBRzE.mft (raw, json)
Hash identifier: NRMJvinIutr5678uf1pT01OfQVq81CziHfztFo3Gav0=
Subject key identifier: A4:D2:9C:6C:5F:69:28:F1:ED:53:E1:6F:EB:0D:8F:7D:A3:17:EB:C5
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Certificate issuer: /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial: 019D3865BD9775E99C8418CEDA4778D8CD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
Manifest number: BE
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 64JTR370B4ekh0qzFSNEcKeBRzE.crl (hash: vS8apDvdiz+J8ccdCpaeUKFl2y8BAUaXJIDb4N/J7b4=)
2: GjVB6VNfky3Cv5QhaFAqU2u9HJ4.asa (hash: kqdn8mHVdB0J+vYDLZ9IAW32CYuXvCsidQRkLRwVd0c=)
3: c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa (hash: DZTMStTrvuwcy5k73Rjjqjnb39nj0Wc3hKlmSRtn5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bd:97:75:e9:9c:84:18:ce:da:47:78:d8:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=a4d29c6c5f6928f1ed53e16feb0d8f7da317ebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:f6:51:81:3e:5d:99:a4:8b:87:92:f9:f7:
fe:bf:ca:b3:a0:8c:4d:23:67:49:d4:d5:eb:aa:f9:
4e:53:1c:bc:41:93:df:6c:88:dc:75:06:c5:74:12:
0a:8f:87:8b:4f:0a:ca:7a:d2:c9:df:70:78:76:f6:
ae:28:ed:b6:d2:d2:22:fd:5e:7d:2e:a3:43:ec:25:
83:5c:7e:a6:8b:a5:91:ea:e6:1b:36:78:b5:36:1d:
44:7f:59:ec:2b:8b:54:c1:eb:96:68:db:73:7f:85:
97:c3:2f:13:11:bc:7e:76:dd:7c:69:37:b7:50:2d:
70:7d:8f:f2:21:fa:c6:1d:5d:d7:a1:3c:ce:fc:cc:
66:2c:b2:6c:32:4c:53:90:09:dc:f4:65:a1:81:df:
4c:52:00:7a:16:25:4c:a4:79:ff:39:01:63:93:15:
68:51:a3:90:8c:17:a6:e5:fe:dc:0f:25:18:bf:fd:
a5:fd:78:0b:a9:c6:e1:eb:e6:ef:9b:ab:cf:58:9e:
07:0e:07:a9:52:98:e0:e4:79:90:a6:bd:9a:62:0f:
44:52:77:53:7f:03:b7:f3:e5:09:3f:e2:b4:bc:24:
6a:bf:ee:3f:0b:9a:c9:d5:00:5e:14:9a:07:14:c4:
f7:e7:a9:ff:f9:fc:51:d2:36:a1:08:33:ab:57:bb:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:9C:6C:5F:69:28:F1:ED:53:E1:6F:EB:0D:8F:7D:A3:17:EB:C5
X509v3 Authority Key Identifier:
keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:30:ba:70:04:29:05:c6:7c:34:b1:97:a4:4f:fb:c5:11:
57:5f:80:d3:5f:db:3d:5e:f4:4f:b8:0d:fe:0d:96:b2:d2:62:
da:f2:fc:a5:24:31:73:2b:d0:ab:da:5b:2f:91:88:30:37:1c:
89:6c:4c:93:63:a3:cf:b5:b1:aa:04:35:2a:67:5e:e9:5f:c3:
99:d1:fa:6d:fd:9f:43:c4:05:1b:fa:d3:c8:5a:6d:a4:fa:16:
cd:89:62:40:1d:67:09:3e:bd:a7:fa:6c:ff:32:95:19:11:6f:
fb:83:25:f5:85:d8:dc:46:ba:5e:98:38:ca:ed:27:24:c8:d2:
cd:b4:b5:31:84:13:3e:ab:4e:80:b0:af:84:e5:c9:76:e1:0b:
0f:62:b1:f5:8e:eb:89:f8:0f:dd:e3:ed:5c:1f:c2:ed:b8:71:
ed:3b:d7:59:ee:d0:28:c7:7d:76:73:79:31:7e:a8:13:39:cb:
d0:61:7f:d5:b9:9c:1c:81:35:fa:c2:74:93:70:7f:7c:f0:3a:
7d:cd:76:14:d3:7c:36:90:68:a1:b6:ac:2b:22:2c:1c:c6:c9:
32:6f:f5:18:f7:4b:37:bd:03:74:27:22:39:f4:49:d2:ae:31:
1e:2c:b3:48:a3:47:5c:e0:26:7e:0d:ab:17:d5:de:10:bf:7c:
f7:6f:73:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zb2XdemchBjO2kd42M01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViODI1MzQ3N2VmNDA3ODdhNDg3NGFiMzE1MjM0NDcwYTc4
MTQ3MzEwHhcNMjYwMzI5MDcwMTI0WhcNMjYwMzMwMDcwMTI0WjAzMTEwLwYDVQQD
EyhhNGQyOWM2YzVmNjkyOGYxZWQ1M2UxNmZlYjBkOGY3ZGEzMTdlYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcP2UYE+XZmki4eS+ff+v8qzoIxN
I2dJ1NXrqvlOUxy8QZPfbIjcdQbFdBIKj4eLTwrKetLJ33B4dvauKO220tIi/V59
LqND7CWDXH6mi6WR6uYbNni1Nh1Ef1nsK4tUweuWaNtzf4WXwy8TEbx+dt18aTe3
UC1wfY/yIfrGHV3XoTzO/MxmLLJsMkxTkAnc9GWhgd9MUgB6FiVMpHn/OQFjkxVo
UaOQjBem5f7cDyUYv/2l/XgLqcbh6+bvm6vPWJ4HDgepUpjg5HmQpr2aYg9EUndT
fwO38+UJP+K0vCRqv+4/C5rJ1QBeFJoHFMT356n/+fxR0jahCDOrV7tREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTSnGxfaSjx7VPhb+sNj32jF+vFMB8GA1UdIwQY
MBaAFOuCU0d+9AeHpIdKsxUjRHCngUcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjRKVFIzNzBCNGVraDBxekZTTkVjS2VCUnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDE0YzYtZGZkNy00M2NmLTgzMGEt
MzBhYjA2NGJiMzBiLzEvNjRKVFIzNzBCNGVraDBxekZTTkVjS2VCUnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDE0YzYtZGZkNy00M2NmLTgzMGEtMzBhYjA2NGJiMzBi
LzEvNjRKVFIzNzBCNGVraDBxekZTTkVjS2VCUnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNowunAE
KQXGfDSxl6RP+8URV1+A01/bPV70T7gN/g2WstJi2vL8pSQxcyvQq9pbL5GIMDcc
iWxMk2Ojz7WxqgQ1Kmde6V/DmdH6bf2fQ8QFG/rTyFptpPoWzYliQB1nCT69p/ps
/zKVGRFv+4Ml9YXY3Ea6Xpg4yu0nJMjSzbS1MYQTPqtOgLCvhOXJduELD2Kx9Y7r
ifgP3ePtXB/C7bhx7TvXWe7QKMd9dnN5MX6oEznL0GF/1bmcHIE1+sJ0k3B/fPA6
fc12FNN8NpBoobasKyIsHMbJMm/1GPdLN70DdCciOfRJ0q4xHiyzSKNHXOAmfg2r
F9XeEL98929z9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client