Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: XQ+ToLTvqKs+jF+U5r9ue9+N0NRoJcTuf2gy9yHvySg=
Subject key identifier: D2:71:B5:91:3C:DC:0D:CE:46:18:F1:B0:95:51:7A:D9:4D:0E:2C:39
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019F1A1ECD71EA060A96ABF320AABB7F5D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1838
Signing time: Tue 30 Jun 2026 20:00:53 +0000
Manifest this update: Tue 30 Jun 2026 20:00:53 +0000
Manifest next update: Wed 01 Jul 2026 20:00:53 +0000
Files and hashes: 1: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: oBbaObjnjw5zjVJS5SuUOF9ebbVQxEm+i27rMuXCKmA=)
2: XHX6uA0vFND00gt2A2M8M6c_H2E.roa (hash: 0mS0wIrGW0SE8AZb8eImudM9dWAJb+YE0EwH1fJXNI4=)
3: xeGrXuDwQsria6nGQpdYDNVKb7o.roa (hash: dpzz3V+4W0QhRNb+9ncCF/mKR7tT1zRFVnqQN36PbDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:cd:71:ea:06:0a:96:ab:f3:20:aa:bb:7f:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jun 30 20:00:53 2026 GMT
Not After : Jul 1 20:00:53 2026 GMT
Subject: CN=d271b5913cdc0dce4618f1b095517ad94d0e2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:0d:9c:92:26:c2:31:f6:31:72:d4:b7:47:
cc:a2:c7:c6:64:5c:49:45:f1:0b:40:98:f0:71:ed:
1c:f7:ba:f4:a1:ba:99:fa:55:71:43:1e:eb:69:e5:
94:97:ad:e4:62:13:d0:99:b4:d1:82:26:e7:fe:be:
13:9b:92:d2:74:86:c1:2a:0c:d8:2d:f6:20:8b:8c:
e5:7a:98:57:c6:cc:98:b3:bb:73:fd:45:ca:39:1d:
96:8b:9c:c9:db:e4:af:13:7d:f0:18:b9:40:89:f2:
34:eb:41:ff:fa:86:7a:f3:85:57:24:4a:a6:69:b0:
0e:8f:e9:0f:eb:45:47:33:a1:98:c9:a5:5c:b1:e0:
45:ce:7f:a9:95:cf:03:1e:bc:b7:6c:ee:fb:65:60:
43:f8:64:7e:78:93:12:ac:54:73:3d:82:15:f4:c0:
a2:2b:44:11:a4:33:d8:07:40:cd:84:8f:fa:44:92:
99:95:ca:4e:d8:09:c3:94:d5:fe:53:47:dd:c0:96:
fd:25:af:32:c1:40:9b:97:a6:cf:ee:7d:25:d6:92:
d8:49:c1:d0:c6:b5:94:94:19:ca:7a:2a:bd:94:56:
3e:a9:fe:3b:81:9a:61:f3:0f:d8:04:f0:af:84:a1:
46:f5:0a:2c:46:f5:0f:ea:38:0f:dc:aa:33:c8:1a:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:71:B5:91:3C:DC:0D:CE:46:18:F1:B0:95:51:7A:D9:4D:0E:2C:39
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:fe:a3:a6:a2:c8:c8:96:ae:fa:31:9e:f5:06:10:80:95:
5b:11:5a:a3:71:b6:82:11:af:89:fb:c2:b7:be:b7:d5:64:7a:
d0:e6:e0:5a:d3:8a:16:f4:4a:0d:99:fd:79:c9:c0:f0:25:c4:
cb:98:b8:99:bc:e2:61:c9:2e:6b:bf:27:a6:9c:81:3a:5d:87:
76:b9:fb:5d:69:86:06:74:c1:19:1e:f9:a0:cb:f9:e2:66:95:
f5:02:03:d2:67:b8:bf:4c:d3:d0:f9:2c:05:26:fc:17:ac:29:
4d:99:32:3d:53:81:c2:8c:94:d0:ec:04:d4:21:da:b3:95:10:
38:e0:5b:a8:a7:07:8e:d9:b2:58:84:72:f4:5d:81:97:36:06:
72:31:be:43:fc:40:f2:44:66:c3:d8:a9:98:a6:8d:6a:84:13:
b0:e2:ea:a4:67:a2:a1:20:54:c5:b2:97:b7:9d:00:ca:29:de:
7e:85:d1:b9:fe:cf:c4:48:65:91:3c:61:5b:11:c1:37:40:5d:
f0:40:5b:d7:d8:4b:61:bc:f3:a2:44:b0:d9:41:9c:0a:4b:d7:
da:e1:04:ef:b0:50:a6:0f:8a:85:5e:7a:02:df:78:4d:22:5c:
52:92:e3:ff:a6:4d:be:36:59:43:de:5a:33:ea:3b:d9:4b:0e:
7a:e9:d9:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aHs1x6gYKlqvzIKq7f10/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjYwNjMwMjAwMDUzWhcNMjYwNzAxMjAwMDUzWjAzMTEwLwYDVQQD
EyhkMjcxYjU5MTNjZGMwZGNlNDYxOGYxYjA5NTUxN2FkOTRkMGUyYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MINnJImwjH2MXLUt0fMosfGZFxJ
RfELQJjwce0c97r0obqZ+lVxQx7raeWUl63kYhPQmbTRgibn/r4Tm5LSdIbBKgzY
LfYgi4zlephXxsyYs7tz/UXKOR2Wi5zJ2+SvE33wGLlAifI060H/+oZ684VXJEqm
abAOj+kP60VHM6GYyaVcseBFzn+plc8DHry3bO77ZWBD+GR+eJMSrFRzPYIV9MCi
K0QRpDPYB0DNhI/6RJKZlcpO2AnDlNX+U0fdwJb9Ja8ywUCbl6bP7n0l1pLYScHQ
xrWUlBnKeiq9lFY+qf47gZph8w/YBPCvhKFG9QosRvUP6jgP3KozyBreTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJxtZE83A3ORhjxsJVRetlNDiw5MB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfn+o6ai
yMiWrvoxnvUGEICVWxFao3G2ghGvifvCt7631WR60ObgWtOKFvRKDZn9ecnA8CXE
y5i4mbziYckua78nppyBOl2Hdrn7XWmGBnTBGR75oMv54maV9QID0me4v0zT0Pks
BSb8F6wpTZkyPVOBwoyU0OwE1CHas5UQOOBbqKcHjtmyWIRy9F2BlzYGcjG+Q/xA
8kRmw9ipmKaNaoQTsOLqpGeioSBUxbKXt50AyinefoXRuf7PxEhlkTxhWxHBN0Bd
8EBb19hLYbzzokSw2UGcCkvX2uEE77BQpg+KhV56At94TSJcUpLj/6ZNvjZZQ95a
M+o72UsOeunZ8g==
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:29 2026 by rpki-client