Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: KMgo9m2CLqsT6nTFQ/SW7/IfKL+8UZ6xaSp9Y2vHEJg=
Subject key identifier: 32:77:E9:84:E5:A8:6C:15:0E:C2:59:8E:CF:77:18:79:62:59:AA:12
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019FA2CEE6082C0256D4D4BBC72DB839420A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1891
Signing time: Mon 27 Jul 2026 09:01:36 +0000
Manifest this update: Mon 27 Jul 2026 09:01:36 +0000
Manifest next update: Tue 28 Jul 2026 09:01:36 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: 9Xo11krGjhFul+C3iVao96nhnlLx4bXZhiFW+v4ReWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:e6:08:2c:02:56:d4:d4:bb:c7:2d:b8:39:42:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Jul 27 09:01:36 2026 GMT
Not After : Jul 28 09:01:36 2026 GMT
Subject: CN=3277e984e5a86c150ec2598ecf7718796259aa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:84:a4:e0:41:42:38:8c:70:5c:70:b7:d7:
73:f6:06:1b:d6:dd:02:ab:73:b7:70:50:2c:82:bb:
ac:ec:1f:78:66:3d:e6:82:5e:98:3d:07:0f:86:6e:
1b:f4:81:02:bd:b1:cb:a1:aa:1d:d8:fc:c6:40:31:
2c:01:4b:9e:36:35:4f:ba:e1:86:6b:6f:eb:0b:72:
97:47:c7:30:3b:09:61:b3:09:e1:74:88:7b:7d:12:
76:19:b8:ed:12:e4:54:d9:43:0c:ff:b2:88:a2:0c:
ce:85:90:b3:79:6d:21:3a:3f:ab:82:62:5d:50:2d:
49:06:3c:37:c4:0c:ad:53:26:bf:15:96:a7:0e:ba:
78:d5:d9:05:4b:d6:02:65:9e:ea:52:b1:2b:60:2d:
d8:d7:a2:89:dd:05:e8:69:d2:fe:28:22:74:f9:ed:
d8:04:07:78:fa:d3:36:3d:75:5e:6f:ee:6f:41:10:
9b:45:8c:cd:b1:48:d3:87:1e:02:49:19:9b:db:ba:
ae:d3:06:2c:99:b9:b1:ab:18:e9:8c:67:ce:f3:a4:
70:27:d1:aa:84:25:69:d0:a7:fb:56:65:d0:df:5f:
46:66:66:bc:c2:df:1a:f7:24:34:b5:ae:1b:bb:71:
46:f0:8a:74:fa:e7:84:5b:ca:71:ed:39:cd:c6:e7:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:E9:84:E5:A8:6C:15:0E:C2:59:8E:CF:77:18:79:62:59:AA:12
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f1:4c:9e:86:ed:fd:4b:6a:f6:a5:18:6c:c3:ba:bd:d2:b8:
ee:f6:be:ba:5d:ae:12:3e:08:e6:cc:30:a9:91:93:f2:a5:fe:
a1:34:20:7e:e3:02:66:32:f8:fb:7b:19:cb:ea:be:1f:5a:e5:
36:d1:18:fe:d7:fe:3a:dc:88:cf:15:83:b2:20:d5:a5:1b:64:
07:29:31:f7:19:9f:4a:25:ad:da:9d:35:16:7a:0d:27:b1:91:
c1:e0:b6:d2:66:1f:eb:92:59:80:cc:ca:d2:4c:dc:1d:a9:46:
36:d7:6b:da:a9:b8:5b:03:2f:de:45:ba:f1:3f:c4:af:60:a3:
ae:6c:f1:3c:d9:54:e2:ab:62:c0:1c:45:97:2f:73:26:a6:e5:
60:2d:b4:2e:41:e2:29:a3:f5:6d:39:8d:2f:29:72:cd:33:74:
e4:f5:4f:b5:1e:77:c5:7a:7c:a2:44:44:17:31:33:c2:7e:84:
5d:52:43:36:6b:d8:23:6c:69:59:54:c7:2e:a5:60:4b:9b:65:
c4:45:ac:b4:01:ca:1a:a6:52:ef:20:b0:cc:59:ed:5c:4b:2a:
89:45:d2:36:cd:0e:b8:16:a0:c8:d7:34:87:5a:00:81:82:91:
0b:21:61:2e:0e:b5:8c:ff:df:6e:6c:b0:0f:e9:eb:f1:7c:e6:
db:11:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:53 2026 by rpki-client