Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: rdZ4L4pN+Pj2T1mK55fC6ceDF2KT9s8AGSmVGhnowbM=
Subject key identifier: 9E:37:05:6C:DE:89:0D:C8:37:E6:B5:12:0A:1F:5D:DB:CD:B5:D6:D2
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 019F1265B11C1C4FF76CFCEDAF82BD418D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 08:01:22 +0000
Manifest this update: Mon 29 Jun 2026 08:01:22 +0000
Manifest next update: Tue 30 Jun 2026 08:01:22 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: lWfoOJFRG5iTf5l7bMv4hlttFGjskkNqVKCJjJ/Ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:b1:1c:1c:4f:f7:6c:fc:ed:af:82:bd:41:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jun 29 08:01:22 2026 GMT
Not After : Jun 30 08:01:22 2026 GMT
Subject: CN=9e37056cde890dc837e6b5120a1f5ddbcdb5d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:17:36:25:47:64:9d:00:5a:9d:ae:73:a2:
46:32:58:0e:26:f3:ba:ce:ab:90:15:aa:e6:08:02:
6f:56:85:b8:cc:06:86:2f:8e:a6:95:b0:97:a5:67:
92:22:01:ec:a4:ad:d2:ec:87:5c:39:df:7f:7e:6a:
33:77:38:12:e5:da:05:ec:cc:c6:1b:fd:62:59:46:
bb:d2:37:49:ec:b9:b8:bb:6d:40:3f:c8:8a:d9:32:
67:5d:1f:71:2e:2e:14:db:34:da:0f:cf:15:26:d5:
2c:f2:15:ed:a4:e6:d6:52:a5:cc:31:58:97:e3:a6:
b0:21:e5:cc:26:b8:8a:1f:e0:61:f5:56:1f:50:86:
75:99:0e:63:82:49:cd:db:31:40:39:4d:db:46:ef:
4c:4b:92:95:52:b4:37:21:c1:63:67:9b:38:9a:dd:
2f:f6:4e:91:ce:22:c2:10:bd:1a:56:53:7b:26:6f:
cf:b0:4f:f9:62:d2:1c:ae:43:a6:4b:c7:0d:a4:41:
0a:55:e2:bf:8e:06:e3:f4:26:7e:79:cd:97:9a:22:
30:06:e5:9e:e7:ec:a6:f4:a7:21:0e:2d:82:dd:b9:
a7:01:ae:73:3e:68:71:dd:e9:19:75:b9:b0:08:20:
62:88:e1:19:35:da:00:09:bd:04:40:4a:f5:95:d6:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:05:6C:DE:89:0D:C8:37:E6:B5:12:0A:1F:5D:DB:CD:B5:D6:D2
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d0:84:a2:83:09:46:65:f4:86:ab:db:63:d7:6b:75:25:42:
83:aa:ad:c8:3d:43:3c:a2:72:65:10:c4:7a:65:85:60:60:c9:
be:fc:5a:2a:e6:fc:e0:a9:f2:b5:71:ce:e4:f1:32:34:8e:27:
2e:f0:45:61:36:5f:fb:18:a4:5f:df:93:44:a9:c5:80:cc:c5:
d3:03:ce:53:e5:e4:b9:19:8e:27:d1:e7:e6:31:4b:bc:3c:ae:
9e:b5:c6:a7:b0:26:5a:62:c0:eb:18:4c:a5:ff:03:9f:a8:65:
48:07:a2:5b:14:57:4b:28:d1:d2:c7:75:fa:74:17:1d:f8:8e:
15:6d:7d:9f:92:52:cc:1b:cd:d0:d6:f4:e2:3d:0b:7d:d5:0a:
50:c0:e3:49:bd:6c:68:18:ed:2c:f4:b2:62:af:9f:1c:5c:25:
56:a5:18:c9:d1:e3:d4:6b:8b:42:7c:11:ff:61:ce:b9:71:5b:
9f:28:72:11:f9:e5:6b:45:47:1b:97:dc:a0:76:a8:b7:c6:23:
cc:63:6e:ea:4b:81:a4:b3:3b:78:35:7f:a9:e2:62:bb:2e:81:
82:98:53:08:1e:7d:91:3f:06:4c:2b:56:d6:14:36:99:53:98:
0c:16:79:49:f9:a8:52:4c:4c:80:dd:29:f6:2e:2a:ec:2a:62:
3f:72:1f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZbEcHE/3bPztr4K9QY0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3
ODhlZjUwHhcNMjYwNjI5MDgwMTIyWhcNMjYwNjMwMDgwMTIyWjAzMTEwLwYDVQQD
Eyg5ZTM3MDU2Y2RlODkwZGM4MzdlNmI1MTIwYTFmNWRkYmNkYjVkNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0XNiVHZJ0AWp2uc6JGMlgOJvO6
zquQFarmCAJvVoW4zAaGL46mlbCXpWeSIgHspK3S7IdcOd9/fmozdzgS5doF7MzG
G/1iWUa70jdJ7Lm4u21AP8iK2TJnXR9xLi4U2zTaD88VJtUs8hXtpObWUqXMMViX
46awIeXMJriKH+Bh9VYfUIZ1mQ5jgknN2zFAOU3bRu9MS5KVUrQ3IcFjZ5s4mt0v
9k6RziLCEL0aVlN7Jm/PsE/5YtIcrkOmS8cNpEEKVeK/jgbj9CZ+ec2XmiIwBuWe
5+ym9KchDi2C3bmnAa5zPmhx3ekZdbmwCCBiiOEZNdoACb0EQEr1ldZdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ43BWzeiQ3IN+a1EgofXdvNtdbSMB8GA1UdIwQY
MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt
MjMwN2JiNTkyMjVmLzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm
LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdCEooMJ
RmX0hqvbY9drdSVCg6qtyD1DPKJyZRDEemWFYGDJvvxaKub84KnytXHO5PEyNI4n
LvBFYTZf+xikX9+TRKnFgMzF0wPOU+XkuRmOJ9Hn5jFLvDyunrXGp7AmWmLA6xhM
pf8Dn6hlSAeiWxRXSyjR0sd1+nQXHfiOFW19n5JSzBvN0Nb04j0LfdUKUMDjSb1s
aBjtLPSyYq+fHFwlVqUYydHj1GuLQnwR/2HOuXFbnyhyEfnla0VHG5fcoHaot8Yj
zGNu6kuBpLM7eDV/qeJiuy6BgphTCB59kT8GTCtW1hQ2mVOYDBZ5SfmoUkxMgN0p
9i4q7CpiP3IfAA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:38:30 2026 by rpki-client