Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: DFwRIMb1RmFX1crb0baPGYziEh7YencCVOygIJkHwk4=
Subject key identifier: 7E:68:48:2C:E5:49:1C:42:C1:93:AC:89:20:C3:4A:EB:FC:BD:E8:89
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019CE5FF25CF281A9A9377A2D3C62887DAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 1618
Signing time: Fri 13 Mar 2026 07:00:29 +0000
Manifest this update: Fri 13 Mar 2026 07:00:29 +0000
Manifest next update: Sat 14 Mar 2026 07:00:29 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: +oMi/cOjPhPegJ7Kv2lXSAwFtPIbu0ZfCjccxYCEj0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:25:cf:28:1a:9a:93:77:a2:d3:c6:28:87:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Mar 13 07:00:29 2026 GMT
Not After : Mar 14 07:00:29 2026 GMT
Subject: CN=7e68482ce5491c42c193ac8920c34aebfcbde889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:29:8f:e0:00:e9:fa:69:34:35:eb:34:e3:
b2:cb:a9:66:f0:df:4a:56:1b:6c:c9:df:e8:2b:53:
5a:c3:53:1e:10:32:03:10:1a:76:9a:6e:fa:cf:9a:
fb:9c:9b:09:f5:35:fd:7c:db:6d:36:14:30:f0:e1:
69:f2:6f:30:b4:d8:a1:04:43:37:9a:55:ec:4b:91:
54:e0:d8:d4:de:b5:d7:ba:69:05:f3:e2:a0:1e:f5:
dd:c8:54:a9:46:23:c7:33:e2:b6:80:b1:b3:66:f8:
f7:eb:44:6e:bf:d2:4a:8f:d1:1b:08:19:88:b3:43:
de:34:39:65:19:74:e1:8b:75:e0:74:2b:ef:9f:5a:
12:c5:d5:4f:2f:d9:4d:e6:e2:e1:c0:46:22:9e:ba:
28:bc:14:98:0a:37:59:cf:41:e9:a3:b4:8a:6a:35:
17:f9:9a:5c:5b:a7:80:54:c6:1a:2d:85:2d:59:bd:
2b:2c:66:4f:96:a5:f2:6a:90:bd:dd:24:e7:af:16:
16:45:b0:79:b1:95:4a:5d:8a:bf:a9:7c:b5:bc:a0:
20:f1:76:c4:48:df:89:c6:5a:ab:f1:8e:c2:68:e0:
d9:50:02:44:21:33:63:a4:0b:1d:27:0a:44:f8:26:
88:b8:85:ea:5d:a6:ea:33:e0:d7:1d:37:3e:a0:78:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:48:2C:E5:49:1C:42:C1:93:AC:89:20:C3:4A:EB:FC:BD:E8:89
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4f:d4:d1:f2:63:e7:e4:70:c8:76:24:3a:ea:1e:20:de:1a:
c4:2b:15:0b:46:23:85:7c:45:56:57:54:ac:68:4d:60:85:d8:
2b:c1:5a:79:1e:af:03:98:cd:e6:c5:14:71:62:e7:5b:f7:8a:
38:9d:5b:ff:37:da:0a:73:e4:ec:04:1c:14:18:b0:e6:ea:27:
06:22:4d:68:a9:c5:7c:67:3b:4f:29:ad:94:ca:3d:ee:8a:07:
79:e8:ac:f6:cd:6d:36:02:fc:bd:88:bf:2d:2d:03:8f:fc:12:
2f:11:eb:74:ad:a5:6a:70:f1:f9:0a:93:dc:f6:f8:84:87:42:
7d:02:62:4a:be:41:f7:2c:cc:06:0d:e4:ac:ea:f7:57:e7:60:
ca:54:3c:8b:20:12:7d:c5:3d:f6:9a:15:64:db:98:3c:91:3f:
45:d5:93:52:9e:9a:9c:4d:b0:b7:01:07:e5:cb:72:85:0e:77:
8f:c4:9f:ad:0e:a9:8f:75:14:c0:f6:fb:79:76:14:0b:a6:7f:
19:78:34:c4:b1:60:bc:ea:d6:c4:ed:34:87:55:bd:e3:82:f6:
94:39:c8:85:bf:37:de:8c:e1:c9:aa:46:d2:b9:13:e1:a4:68:
6a:25:68:fe:5d:b6:bb:4d:73:6a:63:3e:41:d5:67:20:58:7f:
4a:8d:5e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/yXPKBqak3ei08Yoh9rGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk
M2M4YTYwHhcNMjYwMzEzMDcwMDI5WhcNMjYwMzE0MDcwMDI5WjAzMTEwLwYDVQQD
Eyg3ZTY4NDgyY2U1NDkxYzQyYzE5M2FjODkyMGMzNGFlYmZjYmRlODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bYpj+AA6fppNDXrNOOyy6lm8N9K
Vhtsyd/oK1Naw1MeEDIDEBp2mm76z5r7nJsJ9TX9fNttNhQw8OFp8m8wtNihBEM3
mlXsS5FU4NjU3rXXumkF8+KgHvXdyFSpRiPHM+K2gLGzZvj360Ruv9JKj9EbCBmI
s0PeNDllGXThi3XgdCvvn1oSxdVPL9lN5uLhwEYinroovBSYCjdZz0Hpo7SKajUX
+ZpcW6eAVMYaLYUtWb0rLGZPlqXyapC93STnrxYWRbB5sZVKXYq/qXy1vKAg8XbE
SN+Jxlqr8Y7CaODZUAJEITNjpAsdJwpE+CaIuIXqXabqM+DXHTc+oHi0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5oSCzlSRxCwZOsiSDDSuv8veiJMB8GA1UdIwQY
MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt
MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh
LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU/U0fJj
5+RwyHYkOuoeIN4axCsVC0YjhXxFVldUrGhNYIXYK8FaeR6vA5jN5sUUcWLnW/eK
OJ1b/zfaCnPk7AQcFBiw5uonBiJNaKnFfGc7TymtlMo97ooHeeis9s1tNgL8vYi/
LS0Dj/wSLxHrdK2lanDx+QqT3Pb4hIdCfQJiSr5B9yzMBg3krOr3V+dgylQ8iyAS
fcU99poVZNuYPJE/RdWTUp6anE2wtwEH5ctyhQ53j8SfrQ6pj3UUwPb7eXYUC6Z/
GXg0xLFgvOrWxO00h1W944L2lDnIhb833ozhyapG0rkT4aRoaiVo/l22u01zamM+
QdVnIFh/So1e4Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:01:21 2026 by rpki-client