Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: 9B0Mu7K4d8m+OYMTgArQ+Xi9DjUSIRHApsSD9Amjs9U=
Subject key identifier: 49:EA:17:3D:22:45:09:D5:54:96:DE:78:44:F3:E7:7D:BE:FC:88:F6
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 01A18150658C1A35B95682F3DA42157CE432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 061E
Signing time: Wed 28 Oct 2026 07:01:31 +0000
Manifest this update: Wed 28 Oct 2026 07:01:31 +0000
Manifest next update: Thu 29 Oct 2026 07:01:31 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: dApLfkSusR/y+dygHhogx3HvzFeVbNEjMVYnFcq5aIE=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:65:8c:1a:35:b9:56:82:f3:da:42:15:7c:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Oct 28 07:01:31 2026 GMT
Not After : Oct 29 07:01:31 2026 GMT
Subject: CN=49ea173d224509d55496de7844f3e77dbefc88f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:da:5a:f9:35:50:2d:2c:c3:ae:4b:3c:15:
4a:fe:84:eb:f7:85:41:e8:04:aa:39:ff:04:fa:a0:
ee:7c:77:4f:dc:49:7f:83:16:7e:e7:3c:92:d1:e5:
46:f5:62:32:be:ef:c9:7a:88:91:d1:77:32:5c:b4:
97:92:bf:c9:53:d4:e6:63:bf:31:5d:5f:8e:23:d2:
09:b5:00:5f:ca:20:35:0a:ee:15:54:47:42:6c:da:
20:a4:f5:23:1b:e7:b3:06:18:bb:97:68:64:be:c5:
f6:5a:a1:75:3c:a0:0d:b0:df:d5:4d:9b:91:06:46:
7e:cc:3a:38:86:e3:50:48:44:39:51:a7:aa:2b:6c:
d2:41:1c:db:75:f4:c6:2e:86:ff:8f:fb:64:02:06:
b5:68:52:e6:85:49:21:1f:47:ea:ab:d7:3f:bc:42:
5e:76:e8:bb:53:da:34:64:d7:38:41:dd:19:0d:ea:
66:01:e4:08:d7:ab:37:e0:69:a6:d6:17:80:4f:a1:
ed:87:15:b0:cc:4d:a4:f5:cc:72:e8:94:3a:a1:06:
21:e1:0f:cd:44:3c:65:22:3e:d0:cf:3c:d9:a7:10:
ab:88:be:b7:24:9d:5e:41:e4:66:fb:ed:bf:39:23:
d7:34:f0:d0:e9:f5:48:86:14:06:58:db:19:b9:4b:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:17:3D:22:45:09:D5:54:96:DE:78:44:F3:E7:7D:BE:FC:88:F6
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:ed:60:4c:df:33:5b:a3:f9:91:7f:2a:c0:cc:19:19:64:
db:fa:5f:c7:b9:7f:3d:bc:e1:23:9d:f2:bf:9b:c0:0f:fc:ba:
93:60:06:fe:05:e6:aa:90:4f:c5:1a:6c:7a:fb:a8:66:9f:c3:
df:00:c3:44:bf:ef:ae:14:2e:52:d7:a9:72:77:1a:49:a4:12:
35:1a:0d:5e:64:bf:e2:77:c5:c1:02:b8:7c:fa:09:4c:46:e6:
e9:92:07:85:97:14:c4:aa:42:23:e2:d5:b0:c6:e1:c3:0e:52:
69:80:5e:64:67:f0:e3:96:6a:e1:1e:c3:b5:fc:2e:04:1c:d8:
51:9b:0e:a8:9d:00:5a:bf:20:52:c5:e4:02:36:f6:b3:2e:80:
3b:92:c2:7e:bf:f9:d3:d4:a4:8c:9e:97:8a:d3:a3:8c:ac:1e:
d9:03:28:64:ce:94:3d:81:e5:af:6d:79:88:60:0b:d5:ab:30:
4e:34:eb:b3:c3:1c:0f:d5:8e:87:b4:eb:bc:67:34:0d:11:67:
f0:16:5e:11:36:82:50:65:46:e1:ad:f6:f4:20:b7:34:a7:04:
0c:0b:71:40:a2:a9:27:08:d5:d7:fb:71:c7:d1:ef:17:d5:33:
d8:7e:bf:c2:b3:11:59:ba:34:15:37:10:c5:9f:85:06:46:aa:
d5:50:04:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUGWMGjW5VoLz2kIVfOQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjYxMDI4MDcwMTMxWhcNMjYxMDI5MDcwMTMxWjAzMTEwLwYDVQQD
Eyg0OWVhMTczZDIyNDUwOWQ1NTQ5NmRlNzg0NGYzZTc3ZGJlZmM4OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTLaWvk1UC0sw65LPBVK/oTr94VB
6ASqOf8E+qDufHdP3El/gxZ+5zyS0eVG9WIyvu/JeoiR0XcyXLSXkr/JU9TmY78x
XV+OI9IJtQBfyiA1Cu4VVEdCbNogpPUjG+ezBhi7l2hkvsX2WqF1PKANsN/VTZuR
BkZ+zDo4huNQSEQ5UaeqK2zSQRzbdfTGLob/j/tkAga1aFLmhUkhH0fqq9c/vEJe
dui7U9o0ZNc4Qd0ZDepmAeQI16s34Gmm1heAT6HthxWwzE2k9cxy6JQ6oQYh4Q/N
RDxlIj7QzzzZpxCriL63JJ1eQeRm++2/OSPXNPDQ6fVIhhQGWNsZuUttIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnqFz0iRQnVVJbeeETz532+/Ij2MB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7rtYEzf
M1uj+ZF/KsDMGRlk2/pfx7l/PbzhI53yv5vAD/y6k2AG/gXmqpBPxRpsevuoZp/D
3wDDRL/vrhQuUtepcncaSaQSNRoNXmS/4nfFwQK4fPoJTEbm6ZIHhZcUxKpCI+LV
sMbhww5SaYBeZGfw45Zq4R7DtfwuBBzYUZsOqJ0AWr8gUsXkAjb2sy6AO5LCfr/5
09SkjJ6XitOjjKwe2QMoZM6UPYHlr215iGAL1aswTjTrs8McD9WOh7TrvGc0DRFn
8BZeETaCUGVG4a329CC3NKcEDAtxQKKpJwjV1/txx9HvF9Uz2H6/wrMRWbo0FTcQ
xZ+FBkaq1VAE0w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:15:21 2026 by rpki-client